ManageEngine Access Manager Plus

Access Manager Plus at a glance (for Canadian buyers)

What it is
ManageEngine's privileged session management platform. Proxies RDP, SSH, SQL, and VNC sessions through a browser gateway so users reach target systems without a VPN and without seeing the underlying credentials. Every session is recorded and audited.
Edition
One paid Standard Edition, plus a Free Edition for 2 users.
Licensing
Per user, with unlimited connections included per slab. User slabs: 5, 10, 15, 20, 25, 50, 75, 100, 200.
Term
Annual Subscription (renewable) or Perpetual (with annual maintenance and support). Both appear on ManageEngine's public store.
Canadian pricing
Listed in USD by ManageEngine; Optrics quotes and invoices in CAD at the RBC daily rate on the quote date. Free 30-day trial covers the full product.
Who to talk to in Canada
Optrics Engineering, ManageEngine's Canadian partner since 2010. Call 1-877-430-6240.

What Access Manager Plus Does

Access Manager Plus sits between your users and your target systems as a browser-based session gateway. Instead of handing out RDP credentials for a Windows jump box or SSH keys for a production Linux server, you provision a named user in Access Manager Plus, assign them permission to launch a session against a specific target, and they connect through the web console. The gateway injects the credentials at session start, so the user never sees them. Every session can be recorded end-to-end for compliance review.

What IT Teams Use It For

  • Browser-based remote access: RDP, SSH, SQL, and VNC sessions launched from a web console with no client software.
  • Credential injection: Target-system passwords and SSH keys stay inside Access Manager Plus and are never revealed to the user.
  • Session recording: Video for RDP and VNC, command logs for SSH, query logs for SQL - stored on the AMP server for audit.
  • Live session shadowing and termination: Watch active sessions in real time; terminate one from the console if something looks wrong.
  • Third-party and contractor access: Grant time-boxed access without giving vendors direct connectivity to the corporate network.
  • RemoteApp support: Publish a single application on a Windows host instead of a full desktop.
  • Secure file transfer: Files move between the user's browser and the target inside the audited session.
  • SSO integration: Log in once with the corporate identity provider (AD, Azure AD, SAML) and launch approved sessions from there.
  • Detailed audit logs: Who accessed what, when, and for how long - for SOC 2, PCI-DSS, ISO 27001, and cyber-insurance evidence.

How It Differs From Password Manager Pro and PAM360

Password Manager Pro is vault-first: its main job is to store and rotate shared passwords, with session recording added at the Premium tier. PAM360 is the full enterprise PAM suite: vault, sessions, JIT elevation, behaviour analytics, ITIL workflow, DevOps secrets. Access Manager Plus is session-first: if the main pain is "how do I let contractors and remote staff reach RDP/SSH boxes safely" and you don't need a full vault or PAM analytics, this is the tighter fit. Many customers also run Access Manager Plus alongside Password Manager Pro - one for sessions, one for shared password storage.

Who It's For

Organizations replacing a VPN + shared-admin-password pattern for privileged remote access. Common Canadian buyers include IT teams supporting field contractors, MSPs' internal admin teams, organizations bound by cyber-insurance requirements for privileged access logging, and any environment where third parties (vendors, auditors, integrators) need occasional access to production systems.

How Optrics Helps

As Canada's authorized ManageEngine partner since 2010, Optrics quotes Access Manager Plus in Canadian dollars, invoices in CAD with local tax handling, and helps size the right user slab. If you're weighing Access Manager Plus against Password Manager Pro or PAM360, we can walk through where each one actually fits before you commit.

Try It Free Get a Canadian Quote

Frequently Asked Questions

What is ManageEngine Access Manager Plus?

Access Manager Plus is ManageEngine's privileged session management platform. It provides browser-based, credential-injected access to RDP, SSH, SQL, and VNC sessions on target systems, records every session for audit, and never exposes the target infrastructure or the credentials to the end user. It replaces the VPN + shared admin password pattern for remote and third-party access.

How is Access Manager Plus licensed?

By user count, with unlimited connections included per slab. Available slabs: 5, 10, 15, 20, 25, 50, 75, 100, and 200 users. Sold as a single paid Standard Edition (a Free Edition covers 2 users), offered as Annual Subscription or Perpetual with annual maintenance and support.

What is the difference between Access Manager Plus, Password Manager Pro, and PAM360?

Access Manager Plus is session-first: browser-based access to RDP/SSH/SQL/VNC targets with recording and audit. Password Manager Pro is vault-first: password storage, rotation, and application-to-application credentials, with session recording as a Premium/Enterprise add-on. PAM360 is the full enterprise PAM suite: vault + sessions + JIT elevation + behaviour analytics + DevOps secrets + ITIL workflow. Pick Access Manager Plus if remote and third-party session access is the main problem to solve.

What protocols does Access Manager Plus support?

Access Manager Plus proxies RDP (Windows), SSH (Linux and network devices), SQL (SQL Server, MySQL), and VNC sessions through a browser gateway. It also supports RemoteApp for single-application access on Windows and secure file transfer within active sessions.

How does Access Manager Plus differ from a VPN?

A VPN places the remote user's device onto the corporate network, and any lateral movement afterwards depends on network segmentation. Access Manager Plus never puts the user on the network - it proxies each session at the application layer through a web gateway, so target systems and credentials stay isolated. It also records what the user does, which a VPN cannot.

Does Access Manager Plus record privileged sessions?

Yes. Every session launched through Access Manager Plus can be recorded end-to-end - video playback for RDP and VNC, full command logs for SSH, and query logs for SQL. Recordings are stored on the Access Manager Plus server. Administrators can also live-shadow active sessions and terminate them from the console.

How do Canadian buyers get pricing for Access Manager Plus?

ManageEngine publishes list prices in USD. Optrics Engineering, ManageEngine's Canadian partner since 2010, quotes and invoices in Canadian dollars at the RBC daily rate on the quote date, with local tax handling. Request a quote or call 1-877-430-6240.

Documentation

Here you can find product documentation, brochures and guides. If you have any questions please feel free to contact us.

  • Datasheet - PDF
  • System Requirements - PDF
  • Best Practices - PDF

System Requirements

The table given below provides an overview of the hardware and software configurations required by Access Manager Plus (AMP).

Hardware Operating Systems Web Interface
Processor
  • Dual Core/Core2Duo or above
RAM
  • 4 GB or above
Hard Disk
  • 200 MB or more for product
  • 10 GB or more for database

Note: For session recording, disk space requirement may vary based on usage levels.

Windows
  • Windows Server 2019
  • Windows Server 2016
  • Windows Server 2008 & R2
  • Windows Server 2012 & R2
  • Windows 8, 10
Linux
  • Ubuntu 9.x+
  • CentOS 4.4+
  • Red Hat Linux 9.0
  • Red Hat Enterprise Linux 5.x, 6.x, 7.x
  • (Works well with any Linux flavor)

Note: AMP can also be run on VMs of the above operating systems

HTML client requires one of the following browsers:
  • Microsoft Edge
  • Chrome, Firefox, and Safari

** AMP is optimized for 1280 x 800 resolution and above.


Database
  • PostgreSQL 9.5.3 (bundled)
  • MS SQL Server 2008+ (on Windows 2008+)

Prerequisites

  • An external mail server (SMTP server) to send various notifications to users.
  • SFTP server to be installed on all the target machines for file transfer.
  • SSH server to be installed and enabled in the Windows landing server for RDP connections.
  • RemoteApp to be installed on the target machines for RemoteApp features.

Access Manager Plus Pricing in Canada

Access Manager Plus ships as a single paid Standard Edition, with a Free Edition for 2 users. Sizing is a straight choice of user slab and term (Subscription or Perpetual). As Canada's authorized ManageEngine partner since 2010, Optrics quotes in Canadian dollars at the daily RBC exchange rate, delivered on a Canadian invoice with local tax handling.

Licensing Information

  • Listed in USD by ManageEngine; Optrics quotes and invoices in CAD.
  • Both Annual Subscription (renewable) and Perpetual (with annual maintenance and support) are offered - both appear on ManageEngine's public store.
  • Each slab includes unlimited connections to target systems.
  • Licensed by user, with unlimited connections per slab.

User Slabs

Pick the row closest to the number of people who will launch sessions through the console. Connections to target systems are unlimited within each slab.

Users Connections
5Unlimited
10Unlimited
15Unlimited
20Unlimited
25Unlimited
50Unlimited
75Unlimited
100Unlimited
200Unlimited

Related products

  • Password Manager Pro: Vault-first PAM. Sold in three tiers (Standard / Premium / Enterprise) by administrator seat. Add session recording at Premium. Consider running Password Manager Pro and Access Manager Plus together - one for shared password storage, one for privileged sessions.
  • PAM360: Full enterprise PAM suite - vault, sessions, JIT elevation, behaviour analytics, DevOps secrets, ITIL workflow. Pick PAM360 if you want everything under one product and a formal compliance posture.
  • Password Manager Pro MSP: Multi-tenant vault edition for service providers managing separate isolated vaults per customer.
  • Key Manager Plus: Dedicated SSH key and SSL certificate lifecycle management if key/cert management is the main gap.
  • AD360: Identity administration bundle - AD management, auditing, self-service, and MFA. Complementary to Access Manager Plus for a fuller identity + privileged access stack.

Top 5 Secure & Managed Remote Access Capabilities

A VPN gives remote staff and outside vendors a route into the network, often with more access than the job needs. ManageEngine Access Manager Plus takes a different approach: users reach specific systems through a browser-based gateway, without a VPN and without ever seeing the credentials.

1. Privileged Session Control

Give vendors and contractors time-limited access to specific RDP, SSH, SQL and VNC systems from a web console. The gateway injects the credentials when the session starts, so passwords and keys never have to be shared with a third party.


2. An Alternative to VPN Access

Instead of placing a remote device on the corporate network, Access Manager Plus connects users only to the target systems they are approved for, through the browser. That limits what a compromised laptop can reach.


3. Real-Time Session Monitoring

Administrators can watch active sessions as they happen and terminate one from the console if something looks wrong. Sessions can be recorded end to end for later review.


4. Single Sign-On

Users log in once with the corporate identity provider - Active Directory, Azure AD or SAML - and launch the sessions they are approved for from there.


5. Compliance Reporting

Audit logs show who accessed which system, when and for how long, backed by video recordings for RDP and VNC, command logs for SSH and query logs for SQL. That record supports SOC 2, PCI-DSS, ISO 27001 and cyber-insurance evidence requests.