Dynamic Destination Applications (Wildcard)

Overview

Dynamic Destination Applications enable administrators to define a single application that provides access to multiple target systems within a controlled range. Instead of configuring a separate application for each server, administrators can define a parameterized destination, allowing end users to specify the exact target at runtime.

This approach reduces configuration overhead while maintaining strict access control and full auditability.

Admin Configuration

The administrator creates an application and defines a destination using a reserved placeholder.

In the application Internal address / URL field, configure:

The reserved variable 'destination' represents the portion of the address that the user needs to provide.

The fixed part 192.168.5 defines the allowed range.

,The placeholder can be used in any segment of the address (e.g., 192.168.{{destination}}.5, and can appear multiple times within the same destination (e.g., 192.{{destination}}.3.{{destination}}).

User Access Flow

1. The user selects the application from the Applications Portal.
2. A prompt appears requesting the destination value.
3. The user enters the desired target (e.g., 23).
4. The system resolves the final destination: 192.168.5.23.
5. The connection is established.

Supported Protocols

Dynamic Destination Applications are supported for the following application types:

• RDP
• SSH
• SMB
• Web

Limitations

• Dynamic Destination Applications are not supported via the Cyolo CLI.