Enterprise Security &
Audit Automation for MikroTik

Terminal Collaboration Rooms & Guest Sharing

Enable secure pair-engineering and vendor assistance with real-time observer and collaborator access control.

• ✓ Granular Role Enforcement: Assign Owner, Collaborator (interactive typing), or Observer (view-only) permissions per participant.
• ✓ Secure Guest Invites: Generate time-limited, password-protected guest links with host waiting-room approvals.

🔍 Tap to Inspect High-Res

Keystroke Session Recording & Web Playback

Forensic replay of every operator keystroke and command response, helping you collect audit evidence for SOC 2 and ISO 27001.

• ✓ Asciinema v2 Storage: Microsecond-accurate recording of every input character and ANSI output stream.
• ✓ Interactive Player: Web video player with timeline scrubbing, adjustable playback speed, and text copy.

🔍 Tap to Inspect High-Res

Live PAM Console with 1-Click Emergency Killswitch

Complete real-time visibility and instant killswitch control over every active privileged connection in your network.

• ✓ Real-Time Session Tracker: Monitor operator identities, source IPs, target devices, protocols, and durations.
• ✓ Instant Socket Termination: Terminate rogue or compromised connections instantly with a single click.

🔍 Tap to Inspect High-Res

Dual OTP: Panel TOTP + Native Winbox Dynamic 2FA

Native dynamic OTP for MikroTik RouterOS logins — protect Winbox, SSH, and WebFig with mobile authenticator tokens.

• ✓ Built-in RADIUS Server: Intercepts RouterOS MS-CHAPv2 auth requests and validates live 6-digit TOTP tokens.
• ✓ Universal Desktop Protection: Protects standard Winbox desktop client and native SSH sessions transparently.

🔍 Tap to Inspect High-Res

Centralized 5-Tier Audit Log Suite

Full 360-degree audit coverage across authentication, accounting, commands, and device events to satisfy stringent security standards.

• ✓ 5 Dedicated Audit Streams: RADIUS Auth, Accounting, CLI Commands (/pam/commands), Device Logs, and Syslog.
• ✓ Forensic Search & Export: Filter by operator, device, or time range with one-click CSV and JSON exports for auditors.

🔍 Tap to Inspect High-Res

Regex Syslog Pattern Classifiers & Incidents

Transform noisy router syslog streams into clean, actionable operational incidents with regular expressions.

• ✓ Asynchronous Regex Engine: Match high-throughput router syslog streams against user-defined regex capture groups.
• ✓ Structured Incident Categorization: Automatically classify BGP resets, interface flaps, and brute-force auth attempts.

🔍 Tap to Inspect High-Res

Session DLP & Recording for Every Protocol, Including Browser RDP and VNC

Privileged access management for network devices and servers: v2.1.0 extends PAM controls from terminals to graphical sessions. RDP and VNC work with any Windows or Linux host; WebBox (WinBox in the browser) is for MikroTik devices.

• ✓ Session DLP Policies (Pro): Control clipboard, file transfer, on-screen watermarking and forensic recording per policy.
• ✓ Every Protocol Recorded (Pro): SSH, Telnet, RDP, VNC and WebBox sessions are recorded and replayable in the browser (WebBox as MP4 with seeking); ended WebFig proxy sessions appear in session history. Browser RDP, VNC and WebBox need the Terminal Gateway addon v1.3.0.
• ✓ User-Bound Join & Guest Links: Join and guest links for shared sessions are bound to the signed-in user to prevent spoofing.

Read the MikroWizard 2.1.0 release notes →

🔍 Tap to Inspect High-Res