Home Page
    Products     Orders     Downloads     Support     Contact     Deutsch

ZOC Terminal

The SSH Client That Will Make You Happy

ZOC is a professional ssh client and terminal emulator. With its modern user interface, it has many ways of making your life easier.

In its own way, ZOC is the Swiss Army Knife of terminal emulators:
versatile, robust, proven.

Get It Now

About ZOC

ZOC Terminal is a powerful and feature-rich ssh client for Windows and macOS.

It lets you access servers and network gear using the secure shell protocol. The program offers everything that you expect from a modern secure shell client.

ZOC Terminal Emulation Screenshots

Overview of ZOC's SSH Features:
  • Based on industry reference implementation OpenSSH
  • Client supports latest encryptions like ED25519 SHA256, SHA2 or AES-256ctr
  • SSH Public key, keyboard interactive or password authentication
  • Dynamic port forwarding (client as a SOCKS proxy)
  • X11 forwarding (lets you run X-Windows applications from the remote session)
  • Static port forwarding (tunneling of connections to remote destinations)
  • Proxy support (client connects to server through http/socks4/socks5)
  • SSH Agent forwarding between client and server
  • Client side SSH key generator
  • SFTP file transfer
  • SSH Keep-Alive

General Features:
  • Wide range of emulations, e.g. xterm, VT220, TN3270, TN5250, Wyse, QNX, ...
  • Alternate connection methods, e.g. Telnet, Rlogin, Serial, Modem, ...
  • Host directory with user defined tabs and folders
  • Multiple sessions in a tabbed window
  • Color tinted tabs depending on host
  • User bar with user defined buttons and actions
  • Scripting and recording of SSH sessions
All Features...

Start your free 30 days evaluation today and download
zoc V7.10.4 for Windows or macOS.

What is a SSH-Client?

Secure Shell (SSH) is a cryptographic protocol that securely transports data over an unsecured network. As the name suggests, its main purpose is to establish a secure connection to a remote shell account.

The SSH client is the software, which the user runs on his local computer to connect to the remote server. Once connected, the ssh-client enables the user to enter commands and perform tasks through the shell of the remote computer.


ZOC SSH Features in Detail

ZOC is based on OpenSSH and supports the latest key exchange and encryption methods that the SSH protocol has to offer.

Unlike OpenSSH, this ssh client is wrapped in a modern tabbed user interface with a powerful host directory, industrial strength emulations and scripting.

Key Exchange

An especially difficult part of encrypted communication is the need to negotiate a shared secret (the key to use for encryption) over a public channel that could already be compromised.

The negotiation is performed through the so called Diffie-Hellman exchange or a variant thereof. ZOC supports all official diffie-hellman group exchanges, as well as the more modern ecdsa-sha2 and curve25519-sha256 protocols.


Authenticating describes the process, where the user presents proof of who he is and the server deciding, if the user should be allowed access. The SSH protocol describes various methods that can be used for authentication.

Of those, ZOC supports password authentication, pukey exchange and keyboard-interactive challenge. Public-key exchange comes in various flavors. ZOC understands RSA, DSA, ECDSA and ED25519 keys. Hardware (smart card) based key authentication is also possible.


Over time, the SSH protocol has seen a plethora of methods to be used to encrypt the communication (using shared secret was negotiated during the KEX phase as a cryptograhpic key). Some ciphers were phased out over time, especially after Edward Snowden revealed how powerful possible listeners like the NSA are, and new ones were introduced. ZOC supports the whole list, starting with aes256-ctr and going down to older ciphers like aes256-cbc or arcfour (these older ones may still be necessary to connect to older servers which have not been updated in a while).


An important part of the secure shell protocol is a feature called port-forwarding. This feature allows the user to create a connection from the client computer to the server network, which can be used by other programs and where all the connection data is encrypted. This feature is sometimes called tunneling.

Programs and protocols which do not use data encrpytion (e.g. ftp or rsh) can connect to the tunnel's port on the client computer and the ssh client will transmit their data through the encrypted ssh connection to the final destination (and vice versa).

For example, a user can set up a port-forwarding (also called ssh-tunnel) on the client software, listening on the client port 5514 and forwarding traffic to the address of an older device on the remote network that only supports the unencrypted rsh protocol.

The user can then use a non-encrypting rsh client, connect it to localhost port 5514 and thus will get connected via the secure shell client to the rsh server on the remote network. A normal rsh client will not encrypt its data, but the ssh client will encrypt all traffic before sending it through the ssh tunnel to the host on the other side (and vice versa), essentially creating an encrypted rsh connection.

Dynamic Port-Forwarding

The standard port-forwarding feature requires the client to set up the tunnel source port and destination before making the connection. This means that there is limited flexibility and that for each possible destination, a separate ssh tunnel needs to be set up.

This problem is addressed by secure shell's dynamic port forwarding. With dynamic port forwarding, the client sets up a listening port (as with normal port fowarding), but when a software connects to the port, it can tell the client which host and port it wants to connect to. This is done in the same way that client software can request connections from SOCKS proxies.

The ssh client will then forward the connection request to the secure shell server which makes the connection to the destination host. This way, the ssh client could let an unencrypted ftp software access ftp servers on the remote network through an encrypted data channel.

ZOC for Windows


Terms of Use  • Privacy Policy  • (C) EmTec Innovative Software - Home of ZOC, The Professional Terminal Emulator, Telnet and SSH Client for Power Users