Secure Global Desktop 4.31 Administration Guide > Security > Giving secure connections across the Internet

Giving secure connections across the Internet

Problem

You want to give secure connections to all users accessing Secure Global Desktop across the Internet.

Solution

In Array Manager, ensure that processing of Connections settings is enabled, by checking the appropriate box on the Security panel. Then use Object Manager to configure the organization object so that client devices within a particular DNS domain receive standard connections, and all others receive secure connections.

Case study

Indigo Insurance exposes a Secure Global Desktop server through a firewall. Users logging in to Secure Global Desktop within the corporate intranet must receive standard connections, but those connecting from the Internet must receive secure connections. All client devices within the intranet are in the domain indigo-insurance.com.

Solution

In Array Manager, display Security properties. For Connection Types, make sure that Apply When Users Log In is checked. Click Apply.
In Object Manager, display properties for the organization object.
On the Attributes tab, choose Connections from the list.
Click New, and fill in the details for the connection:
- For Client Device, type *.indigo-insurance.com. This matches all client devices within the domain indigo-insurance.com.
- For Secure Global Desktop server, type *. This matches all Secure Global Desktop servers.
- For Connection, choose Standard.
Click New again, using these details:
- For Client Device, type *. This matches all client devices.
- For Secure Global Desktop server, type *. This matches all Secure Global Desktop servers.
- For Connection, choose Secure.
Use the arrow buttons to ensure that the first connection type specification is above the second. The first match is used, so the more-specific pattern should appear before the less-specific pattern.
Click Apply.

Next steps

You can override the connection type for everyone in an organizational unit, or for individual users, using the Connections attribute for OU objects or person objects.
To define the connection type for some types of user, you configure the Connections attribute for a profile object. For example, the connection type for all UNIX users is configured using the o=Tarantella System Objects/cn=UNIX User Profile profile object.

Related topics
Improving security between client devices and Secure Global Desktop servers What ports does Secure Global Desktop use? Using Secure Global Desktop with firewalls Securing client connections with Secure Global Desktop security services Giving secure connections to all users in a department Giving secure connections to a Secure Global Desktop server