PC-Duo Gateway Server Guide Release 12.1 August 2012 Vector Networks, Inc. 541 Tenth Street, Unit 123 Atlanta, GA 30318 (800) 330-5035 http://www.vector-networks.com © Copyright 2012 Vector Networks Technologies and Proxy Networks, Inc. All rights reserved. PC-Duo is a trademark of Vector Networks Technologies, and PROXY is a trademark of Proxy Networks, Inc.
PC-Duo Gateway Server Guide Table of Contents PC-Duo overview .......................................................................................................................................... 5 What‘s New in PC-Duo 12.1 ...................................................................................................................... 6 What‘s New in PC-Duo 12.0 ......................................................................................................................
PC-Duo Overview Network protocols ................................................................................................................................ 33 Network addressing schemas .............................................................................................................. 33 Wake-on-LAN support ......................................................................................................................... 33 PC-Duo documentation and technical support ................
PC-Duo Gateway Server Guide Configure security through the Gateway ................................................................................................. 55 Configure the Gateway ............................................................................................................................ 56 Gateway Configuration ................................................................................................................................ 58 Remote Control Gateway servers ........
PC-Duo Overview PC-Duo overview Thank you for selecting PC-Duo remote desktop solutions. PC-Duo remote desktop solutions provide professional features that enable helpdesk technicians, network administrators, IT managers, and software trainers to deliver professional remote support for a fraction of the cost of hosted solutions. Some selected features include: Remote Access: Reach anyone, anywhere, anytime using firewall- and NAT-friendly remote control connections.
PC-Duo Gateway Server Guide What’s New in PC-Duo 12.1 PC-Duo 12.1 introduces the following new features and capabilities: “Click Once” Web Desktop: Ability to generate a window to a remote desktop directly from the Web Console (Master not required). No administrative rights needed and no reboot required.
PC-Duo Overview Windows Server 2008 R2 support: PC-Duo 11.6 provides full support (remote access, remote control, remote management) for Windows Server 2008 R2 computers (64-bit platforms only). Mac, Linux support: PC-Duo 11.6 provides support (remote access, remote control) for Macintosh and Linux computers running VNC server software (standard on Macs). Wake-on-LAN support: PC-Duo 11.6 includes ability to turn on remote computers that are configured to listen for Wake-on-LAN signal.
PC-Duo Gateway Server Guide the other available keyboard combinations to remote computer (see PC-Duo Master Guide for more information). Host-based chat: PC-Duo 11.2 introduces support for Host-based chat. This new service automatically creates a private chat room including Host user and any technicians connected to the Host. Technicians can see and participate in multiple chat rooms simultaneously (see PC-Duo Master Guide for more information).
PC-Duo Overview PC-Duo solutions Vector Networks provides three solutions for remote desktop support: PC-Duo Express Edition PC-Duo Express Edition is an easy-to-use remote desktop solution that uses simple peer-to-peer connections between helpdesk technicians and end-user remote computers. It is ideally suited for smaller companies and workgroups in which the number of remote computers being supported is small and manageable.
PC-Duo Gateway Server Guide Gateway-managed connections No Yes Yes Firewall-friendly connections No Yes Yes Terminal services connections No Yes Yes VDI connections No Yes Yes VNC connections Yes Yes No 10
PC-Duo Overview PC-Duo applications The PC-Duo remote desktop solutions include some or all of the following applications: PC-Duo Components PC-Duo Express Edition PC-Duo Enterprise Edition PC-Duo On-Demand Edition PC-Duo Host Yes Yes Yes PC-Duo Terminal Services Host No Yes Yes PC-Duo VDI Host No Yes Yes PC-Duo Master Yes Yes No PC-Duo Gateway No Yes Yes PC-Duo Web Console No Yes Yes PC-Duo Web Desktop No No Yes PC-Duo Deployment Tool Yes Yes Yes 11
PC-Duo Gateway Server Guide PC-Duo Host PC-Duo Host runs as a Windows service on the machine on which it is installed, and supports both peer-to-peer connections as well as Gateway-managed connections. By installing PC-Duo Host on a computer in your network, you can: Allow technicians to make peer-to-peer remote control connections to the machine, whether someone is there or not. Each Host manages its own security settings and access rights.
PC-Duo Overview PC-Duo Terminal Services Host PC-Duo Terminal Services Host is a server-side version of the PC-Duo Host designed to support Terminal Services sessions. The Terminal Services Host, also known as the root Host, runs on the Terminal Server (such as those from Citrix or Microsoft), and is configured to support one or more concurrent Terminal Services sessions.
PC-Duo Gateway Server Guide PC-Duo VDI Host PC-Duo Virtual Desktop Image Host is a special version of the PC-Duo Host designed to support the transient nature of virtual desktops. The VDI Host can be included as part of a virtual desktop template; when one or more virtual desktop sessions are generated using this template (often to create a pool of virtual desktop images), the sessions will include a Host with all the features of the installed Host but not the permanent nature.
PC-Duo Overview PC-Duo Master PC-Duo Master is a console application that technicians can use to establish remote support connections to one or more Host computers. With PC-Duo Master, you can: Make one or more peer-to-peer remote support connections to Host computers in your network. Connect to PC-Duo Gateway and make one or more Gateway-managed remote support connections to Host computers from a directory of available Hosts. View the entire screen of the remote computer.
PC-Duo Gateway Server Guide PC-Duo Gateway PC-Duo Gateway is an enterprise class server, which provides centralized administration, security and management for a network of remote support connections to Host computers in your environment. With PC-Duo Gateway configured as the hub of your remote support network, you can: Organize large numbers of Host computers into logical groups for easier access and management. Reach remote computers outside the network, behind firewalls or NAT-devices.
PC-Duo Overview PC-Duo Web Console PC-Duo Web Console is a web application that provides browser-based access to the PC-Duo Gateway Server for administration and configuration. It is effectively a webbased version of the Gateway Administrator. The Web Console also includes an optional feature called the Web Desktop, which allows on-demand access to remote desktops directly from the Web Console. It is effectively a web-based version of the Master application.
PC-Duo Gateway Server Guide PC-Duo Web Desktop The Web Desktop is an optional feature of the Web Console, which allows on-demand access to remote desktops directly from the Web Console. It is effectively a web-based version of the Master application. With PC-Duo Web Desktop: Helpdesk technicians can view and access remote desktops connected to the Gateway. Employees can view and access their computers at work, even if they are on the road or at home.
PC-Duo Overview PC-Duo Deployment Tool PC-Duo Deployment Tool is an easy-to-use software distribution utility that automates the deployment and installation of PC-Duo applications to remote computers in your network. With PC-Duo Deployment Tool, you can: Automatically deploy an image of PC-Duo Host, Master or Gateway to one or more computers or groups of computers in your network and avoid manual effort of going to each machine.
PC-Duo Gateway Server Guide PC-Duo technologies PC-Duo remote desktop solutions utilize highly optimized technologies to deliver speed, performance and reliability, including: Highly efficient screen capture algorithms. PC-Duo utilizes two kinds of screen capture technology: Kernel-mode screen capture. This technology utilizes the PC-Duo mirror driver, which reproduces graphics drawing commands from the remote Host on the PCDuo Master user‘s screen quickly and efficiently.
PC-Duo Overview PC-Duo services PC-Duo remote desktop solutions offer technicians a number of professional-quality services for investigating and solving problems on Host remote computers, including: Remote Control: ability to view screen activity on an end-user‘s remote machine, and with proper authorization, take control of and send keyboard/mouse inputs to the remote machine in real-time Remote Clipboard: ability to copy selected items on the screen of a remote machine into the clipboard on the re
PC-Duo Gateway Server Guide PC-Duo connection types PC-Duo services are performed over service connections between a PC-Duo Master (with appropriate access rights) and a PC-Duo Host. Service connections are established on demand, when a PC-Duo Master requests a service from a PC-Duo Host.
PC-Duo Overview By default, PC-Duo Master searches the network for Host computers when it starts up. Any Host computers it finds are listed on the Peer-to-Peer Hosts tab of the PC-Duo Master window. Peer-to-peer connections from Master (M) to Host (H) The dotted and solid lines, shown in above depict two different sets of peer-to-peer connections between PC-Duo Masters to PC-Duo Hosts.
PC-Duo Gateway Server Guide When a computer with PC-Duo Master establishes a connection to a computer with PCDuo Host through a central server (i.e. PC-Duo Gateway), the connection that is established is a Gateway-managed connection. In this way, the Gateway serves as a central location for managing and monitoring connections, configuration, security and reporting. Any Host computers found by the Gateway are listed on the Gateway Hosts tab of the PC-Duo Master window.
PC-Duo Overview Gateway (G)-managed connections from Master (M) to Host (H) Firewall-friendly connections When PC-Duo Master users need access to Hosts that are outside the domain, and/or behind a firewall or NAT-device, normal peer-to-peer or Gateway-managed connections will not work. In these cases, it is difficult to find and maintain a secure remote support connection because of dynamic port assignments and other network challenges.
PC-Duo Gateway Server Guide automatically managed and added to the ―All Hosts‖ group. The TS Hosts are considered transient, since they go away when the TS user logs out of his/her session. In order to keep track of transient TS Hosts, the PC-Duo Gateway will create a new Group called "Terminal Services on ", and automatically insert transient Hosts into this Group. They are automatically deleted from the Gateway when the TS session ends.
PC-Duo Overview If the virtual desktop is discarded when the user logs out, the Host is effectively destroyed as well, but the Gateway doesn‘t know this. The Host remains known to the Gateway (and managed, using a Managed Hosts license) until it is manually cleaned up by an administrator, or until the Delete Hosts older than feature kicks in and deletes it.
PC-Duo Gateway Server Guide PC-Duo security features One of the most valuable aspects of PC-Duo remote desktop solutions is the ability to create and enforce fine-grained access control policies, and to easily modify them to reflect changes in your organization.
PC-Duo Overview ―Identity Authentication‖ ―Endpoint Authentication‖ Identity Authentication In general, this operation answers the following security question: How does the server know who the client is? A PC-Duo application acting as a server will not provide access or information to any PC-Duo application acting as a client until it can validate that client‘s identity.
PC-Duo Gateway Server Guide Shared secret password: In the case that the Host does not share a domain relationship with the PC-Duo Gateway, or if the Host is outside of the network and cannot contact its domain controller, Windows authentication will not usually be available. Behind the scenes, the PC-Duo Gateway and the Host will exchange a 16-byte secret password that only they will know.
PC-Duo Overview Gateway-managed (Master & Host are in same domain) Master-Gateway relationship Master Gateway Yes Gateway-Host relationship Gateway Host No Gateway-managed (Master & Host are not in same domain) Master-Gateway relationship Master Gateway Yes Gateway-Host relationship Host Gateway Yes Authorization One of the strongest features of PC-Duo remote support solutions is the fine-grained access control.
PC-Duo Gateway Server Guide AES encryption (128-bit key) with SHA1 hash Triple-DES (3DES) encryption (192-bit key) with SHA1 hash RC4-compatible encryption (128-bit key) with MD5 hash NOTE: PC-Duo 11.2 applications and older support only RC4 encryption; thus, this would be the encrpytion option negotiated between a PC-Duo 11.2 or later application (e.g. PC-Duo Master) and PC-Duo 11.2 application (e.g. PC-Duo Host).
PC-Duo Overview PC-Duo networking features PC-Duo remote desktop solutions support several standard transport protocols for computer-to-computer communication, and two types of network addressing schemas. Network protocols PC-Duo products support most of the standard networking and transport protocols, including: IP: IP is a general-purpose protocol supported on a wide variety of networks and servers.
PC-Duo Gateway Server Guide Explicit Wake-on-LAN: A network administrator, using either PC-Duo Master or PC- Duo Gateway Administrator, can attempt to wake up a remote computer by explicitly sending the WOL signal to that machine. If the remote computer was shut down in a state capable of receiving WOL signal, it will wake up and report to the Gateway and a connection will be established. See "Send Wake-on-LAN Signal" in the PC-Duo Master Guide for more information.
PC-Duo Overview PC-Duo documentation and technical support Each of the four PC-Duo components has its own guide: PC-Duo Master Guide PC-Duo Host Guide PC-Duo Gateway Server Guide PC-Duo Web Console Operating Guide PC-Duo Web Console Installation Guide PC-Duo Deployment Tool Guide For more information about PC-Duo documentation and technical support, see: "Typographical conventions" "Technical support options" Typographical conventions in documentation PC-Duo d
PC-Duo Gateway Server Guide Enter your name: YourName Password: YourPassword File names and computer text can also be displayed in italics to indicate that you should replace the values shown with values appropriate for your enterprise. Key names Names of keyboard keys appear in SMALL CAPS. When you need to press two or more keys simultaneously, the key names are joined by a + sign: Press RETURN. Press CTRL+ALT+DEL.
Gateway Installation PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section.
PC-Duo Gateway Server Guide Requirements PC-Duo Gateway can be installed on any computer that runs a supported operating system (OS) and meets the minimum requirements described in this section. NOTE: If you plan to use PC-Duo Host with PC-Duo Gateway, then install PC-Duo Host after you install PC-Duo Gateway.
Gateway Installation Screen recording hardware requirements vary according many factors, including the number of simultaneous active recording sessions, the resolution and color depth of each remote desktop, the type and amount of screen activity, the use of wallpaper and/or other visual effects, etc. Also, note that one connection between Host and PC-Duo Gateway may support one or more simultaneous recordings.
PC-Duo Gateway Server Guide Configuration options PC-Duo Gateway Edition can be configured to operate in any of the following ways: PC-Duo Gateway only: Require all remote control connections to pass through a central management server (PC-Duo Gateway). The PC-Duo Gateway functions as the hub of a network of connections to all the Host computers in your environment (―network within the network‖).
Gateway Installation Installation notes PC-Duo Gateway has two main components: PC-Duo Gateway, which runs as a service with no user interface. Multiple PC-Duo Gateways can be installed in the network. PC-Duo Gateway Administrator, which is used to configure one or more PC-Duo Gateways. PC-Duo Gateway Administrator (which does not require a license) can be installed on multiple computers in your network.
PC-Duo Gateway Server Guide Gateway service accounts The PC-Duo Gateway service runs as a domain-based or local account, not as LocalSystem or another built-in account. As part of the installation procedure, the PCDuo Gateway installer will prompt you for an account username and password, with the default being "RemoteControlGateway". If the account you select does not exist, you will be prompted to create it. You must have the proper domain administrative privileges to create an account on your domain.
Gateway Installation NOTE: At this first connection, the Host implicitly trusts the PC-Duo Gateway because it is on the known Gateways list. For even higher level of authentication, use SSL protocol with valid certificates to confirm the identity of the PC-Duo Gateway. On all subsequent connection attempts when the Host and PC-Duo Gateway are not in the same domain, the shared secret password will be presented and accepted for authentication (because it is known only to the Host and PC-Duo Gateway).
PC-Duo Gateway Server Guide SSL certificates PC-Duo Gateway Certificate Manager gets installed along with the PC-Duo Gateway and has options as shown below: NOTE: The Certificate Manager must be run by an administrator and can only connect to the PC-Duo Gateway running on the local computer. The Connect button is only enabled if the Certificate Manager cannot connect to the PC-Duo Gateway running on the default port via the TCP protocol.
Gateway Installation "View Certificate" Select a previously installed certificate To select a certificate previously installed in the local computer certificate store: 1 Choose the radio button Select a certificate previously installed in the local computer certificate store and click Request. The Select Certificate window appears as shown below: 2 Select the certificate you want to use, and then click OK.
PC-Duo Gateway Server Guide 2 Enter the required information for the new certificate, and then click OK. Create a certificate request for a certificate authority To create a certificate request to be submitted to a certificate authority: 1 Choose the radio button Create a certificate request to be submitted to a certificate authority (like VeriSign) and click Request. The Enter Information for Certificate Request window appears. 2 Enter the required information for the new certificate and click OK.
Gateway Installation 1 Choose the radio button Install a certificate created by a certificate authority from a previous request and click Request. The Find issued certificate file: window appears. 2 Locate the folder where the Certificate file is located, and then click Open. 3 Locate the folder where the Private Key file is located, and then click Open. 4 Locate the folder where the Configuration file is located, and then click Open. The Enter private key password: dialog box appears.
PC-Duo Gateway Server Guide View the details of the certificate on the Details tab: Select certain sets of detail by choosing one of the filters available under the Show: dropdown box. The default is to show all the certificate details. View the entities involved in certifying the certificate by selecting the Certification Path tab.
Gateway Installation 49
PC-Duo Gateway Server Guide Licensing If you downloaded this software from the Vector Networks web site on a 30-day trial basis and want to continue using the product, you may purchase it by contacting a preferred reseller, or by contacting Vector Networks directly. Your purchase provides an appropriate license key to use with Gateway. The software does not need to be re-installed after you purchase it. The product package contains a license key that you can add to your existing installation.
Gateway Installation Server, Hosts, Groups, security, etc. only Web Desktop is not enabled The license model is Managed Hosts, and the total number of managed Hosts is equal to the sum of Hosts specified in all the 5010 keys shown here. If any 5048 keys are present, these keys will be ignored.
Gateway Operation Once PC-Duo Gateway, PC-Duo Host, and PC-Duo Master are properly configured, a PC-Duo Master user can follow these steps to connect to a Host computer through a PCDuo Gateway: 1 Select Start > All Programs > Vector Networks > PC-Duo Master. 2 Select the Managed Hosts tab in the PC-Duo Master window. 3 Connect to a PC-Duo Gateway. 4 Select a group to narrow the number of Managed Hosts listed (optional). 5 Connect to one of the managed Hosts.
Gateway Operation Start the Gateway Gateway has two main components: PC-Duo Gateway runs as a service with no user interface. You can have multiple PC- Duo Gateways on your network, each on their own computer. You cannot use a PC-Duo Gateway unless this service is running. PC-Duo Gateway Administrator window lets you configure one or more PC-Duo Gateways. To start PC-Duo Gateway Administrator window, select the Start > All Programs > Vector Networks > PC-Duo Gateway Administrator command.
PC-Duo Gateway Server Guide Run the Gateway Administrator PC-Duo Gateway Administrator window runs as a portion of an MMC console tree. PC-Duo Gateway console tree appears when you open the PC-Duo Gateway Administrator window. Remote Control Gateway Servers is listed as the top item in the console tree on the left, with a number of folders below it.
Gateway Operation Configure security through the Gateway PC-Duo Gateway has six different areas of security. Use ―Gateway Security‖ to configure user credentials-based rights to access and/or control this PC-Duo Gateway. Use ―Group security‖ to configure user credentials-based rights to access or modify the name or description of a managed Host Group. Use ―Host security for a group‖ to configure user credentials-based rights to access and/or control the Hosts in a managed Host Group.
PC-Duo Gateway Server Guide Configure the Gateway Follow this procedure to set up and configure PC-Duo Gateway in your network. Each step provides directions to use the default settings for PC-Duo Gateway. Information about customizing the PC-Duo Gateway configuration is also provided where appropriate. 1 Create a domain user account for your PC-Duo Gateway. If you choose the default account user name (RemoteControlGateway), the steps for Host computer configuration will be simpler.
Gateway Operation computers to which you assign the same access and control policy for one or more users. Assign the access and control rights to individual users, or to (domain) groups of users. In particular, if users who connect to the PC-Duo Gateway via PC-Duo Master are not in the Administrators group, you must, at minimum, assign access rights to the PCDuo Gateway according to ―Gateway Security‖.
Gateway Configuration This section explains each of the components of PC-Duo Gateway that can be configured using the PC-Duo Gateway Administrator. ―Remote Control Gateway servers‖ to add or delete PC-Duo Gateways in the PCDuo Gateway Administrator. ―Gateway Server Settings‖ to view and/or edit configuration settings for the Gateway, including security settings ―Managed Hosts‖ to create groups of Hosts under PC-Duo Gateway management and to set security for groups and Hosts.
Gateway Configuration Remote Control Gateway servers When you start PC-Duo Gateway Administrator, the list of currently configured PC-Duo Gateways is listed under Remote Control Gateway Servers. If you install PC-Duo Gateway Administrator on the same computer on which you install the PC-Duo Gateway, your PCDuo Gateway Administrator is automatically set to connect to and configure your PC-Duo Gateway.
PC-Duo Gateway Server Guide Using the Find Gateway Wizard, you can locate a PC-Duo Gateway on your network and optionally configure the credentials to connect to it. When adding a PC-Duo Gateway, you can perform one of the following: Specify a PC-Duo Gateway network address and protocol directly. Poll to discover PC-Duo Gateway on your network with a specified protocol, and select a PC-Duo Gateway from the resulting list.
Gateway Configuration When the PC-Duo Gateway Administrator connects to a PC-Duo Gateway, it establishes a connection to it. To view and/or edit the configuration settings of any PC-Duo Gateway, double-click any server listed under Remote Control Gateway Servers. When the PC-Duo Gateway Administrator is connected, a green icon will appear next to the Gateway; some connection properties and basic Gateway information will be presented.
PC-Duo Gateway Server Guide The Connection tab lets you view and/or edit the following parameters of the connection configuration settings: The user-editable Display Name used to describe this connection. Protocol and Port, the protocol and port used by PC-Duo Gateway Administrator in connecting to the PC-Duo Gateway. Choose protocols from UDP/IP, TCP/IP, SSL Select the standard port, or specify the port in the text area next to Port.
Gateway Configuration Select Use the following username and password to change the credentials used to connect. With this option, you can check Save this username and password for later to use it for all future connections to the PC-Duo Gateway. NOTE: You must also configure access rights on the PC-Duo Gateway for the credentials used.
PC-Duo Gateway Server Guide Gateway Server Settings From Gateway Server Settings, the following setting can be viewed and/or edited: "General Settings" - to set preferences for management, auditing, protocols, and encryption, and add licenses. "Poll for Hosts" - to search your network for computers running PC-Duo Host (either manually or on a schedule) and to list these under a selected PC-Duo Gateway in the PC-Duo Gateway Administrator window.
Gateway Configuration ―Licenses‖ - to view and add licenses for Gateway. ―Network‖ - to view and edit network polling ranges. ―Grouping‖ - to view and edit custom rules for automatically assigning Hosts to Gateway Groups. General tab PC-Duo Gateway provides options for the following managed Host management styles: Workstation-based managed Host management (default), where managed Hosts are displayed as workstations in the PC-Duo Gateway Administrator and PC-Duo Master.
PC-Duo Gateway Server Guide The following options can be set in the General tab: Setting Description Gateway station name View/edit the name of the Gateway Server Workstation-based Choose this option to have all Hosts that report to the Gateway to be Host management automatically moved from ―Unmanaged Hosts‖ to ―All Hosts‖ group (i.e. managed).
Gateway Configuration User-based Host management Status updates for managed Hosts Automatic Host Cleanup Choose this option to select hosts for management according to logged-in user Enable management of Hosts by logged-in user names Choose this option to have Hosts into which certain users log in automatically moved from ―Unmanaged Hosts‖ to ―All Hosts‖ Show logged-in users by username only (without domain names) Simplify the appearance of logged-in users by showing username only Automatically move
PC-Duo Gateway Server Guide Auditing tab The PC-Duo Gateway auditing feature creates log entries for the following events: PC-Duo Gateway startup and shutdown Polling and discovery of new Host computers Attempts to update Host computer status (either from the PC-Duo Gateway to the Host computer or from the Host computer to the PC-Duo Gateway) Connections and disconnections Attempts to access Hosts managed by the PC-Duo Gateway, including which services, such as remote control or file transfer,
Gateway Configuration Severity Number indicating the severity of the event: • 0 = Event Log Success • 1 = Event Log Information • 2 = Event Log Warning • 3 = Event Log Error 6 Event Message ID number, for example, ‗100‘, which corresponds to the message: ‗Gateway service started successfully.‘ For a thorough listing of the Message IDs and their messages, see ―Gateway Messages.‖ 7 ClientAppID Internal network connection identifier, for example, 1C637D8E9B434DC.
PC-Duo Gateway Server Guide Five columns that contain Target specific information, usually a 64 or 128-bit key, for example. 13-17 TargetInfo1 TargetInfo5 NOTE: For TargetType = host, user, or workstation, the TargetInfo(1-5) columns will contain the following information: machine, workstationid, station, protocol, and address. NOTE: For TargetType = session, the TargetInfo(1-5) columns will contain the following information: sessionid, workstationid, user, time-local, and elapsed.
Gateway Configuration Logging options can be configured from the Auditing tab of the General Settings Properties window: If you do not want to log Gateway-managed remote connection activity, do not check either Audit Logging Location box. To send log events to the system Event viewer, check Create entries in Event Viewer Application Log. To send log events to a text (.csv) file, check Create entries in text file in the directory, and type the directory path in the box provided.
PC-Duo Gateway Server Guide hours, once daily, or once weekly (default value). If you set this parameter to once weekly, the rollover will occur at midnight on a Saturday night. Automatically delete log files older than (days) - Use this field to specify how many days you want to save the log files. Enter the number of days. 40 days is the default value. This ensures that all activity, for at least over the past 30 days, has been logged for accounting purposes.
Gateway Configuration If you set the Automatically start a new log file field to once weekly, the log files are named as follows: Audit Log File - Weekly Time Period Log File Name March 4, 2006 MACHINE-Gateway-200603-04-00.CSV March 11, 2006 MACHINE-Gateway-200603-11-00.CSV March 18, 2006 MACHINE-Gateway-200603-18-00.
PC-Duo Gateway Server Guide From the Port drop-down list box, type the port or select the standard port (default), and then check the Enabled checkbox to enable any of the following protocols: UDP/IP TCP/IP SSL Address Bindings For the TCP/IP or SSL protocol, click Bindings to select addresses to which the selected protocol should bind. By default, all possible addresses are selected but the user can use this option to restrict binding to selected addresses or to no addresses.
Gateway Configuration Address Restrictions For the TCP/IP or SSL protocol, click Host to configure address restrictions on connections to Host computers. Click Other Clients to configure address restrictions on connections to client computers running PC-Duo Master or PC-Duo Gateway Administrator. The windows that appear after clicking Host and Other Clients are similar to the one shown below for TCP Host Address Restrictions.
PC-Duo Gateway Server Guide If you are using SSL, you can also click the View Cert button to see the currently installed certificate; see the Gateway Certificate Manager section in the Installation chapter to manage the SSL certificate the server uses. Click Add to add an address to your TCP/IP or SSL policy exception list. Depending on your policy, either the Grant Access On window or the Deny Access On window appears.
Gateway Configuration Encryption tab Encryption options can be enabled under the Encryption tab of the General Settings Properties window. Select the following encryption options if you want to enable encryption. Check Gateway Data Services to encrypt all connections to the PC-Duo Gateway for data services, such as those used to present lists of Hosts or configuration information, in the PC-Duo Master or the PC-Duo Gateway Administrator.
PC-Duo Gateway Server Guide encryption key length (256-, 192- or 128-bit), and hashing algorithm (SHA1). Use the Up and Down keys to change the order of preference (used when negotiating encryption options with another PC-Duo application), or to enable/disable encryption options. Check Master Connection Services to encrypt the connections between PC-Duo Master and the PC-Duo Gateway which are used to transmit remote control, remote clipboard, file transfer, chat and remote printing data.
Gateway Configuration attempt to access a Host or play a recording on it is delayed until the server finishes compacting. To set the Periodic Tasks Schedule, choose one of the following options: Once a day, on selected days of the week - Specify the Starting at time by selecting the Hour and Minute from the drop-down lists. Check one or more day checkboxes to specify the day(s) on which the tasks should be performed.
PC-Duo Gateway Server Guide According to an Advanced schedule - Specify the most specific dates and times by typing comma-separated values for the following settings: Set of Months - Acceptable values are the month abbreviation or number of a month. For example, the ninth month could be specified as Sep or 9. If you leave this field blank, the schedule runs every month. Set of Days - Acceptable values range from 1 to 31.
Gateway Configuration Set of Hours in the day - Acceptable values are 0 to 23. For example, the values 0, 6, 12, 18 indicate 12 AM, 6 AM, 12 PM, and 6 PM. If you leave this field blank, the schedule runs every hour. Set of Minutes past the hour - Acceptable values are 0 to 59. This setting works in conjunction with the previous one. If Set of Hours in the day is 0, 6, 12, 18 and you type 0, 15, 30, 45 in this field, the schedule will run at 12:00 AM, 6:15 AM, 12:30 PM and 6:45 PM.
PC-Duo Gateway Server Guide Use the Recordings tab of the General Settings Properties window to specify the following parameters: The directory where the PC-Duo Gateway saves Host recordings. When a checkpoint is generated during a recording. The limits for how large, long, and old a recorded session can be. To specify the location where the PC-Duo Gateway saves recorded sessions, type a full path in the Recording File Directory text box.
Gateway Configuration complete picture of the Host screen. The more checkpoints you have within a recording, the quicker it is to locate a particular point within the recording. However, adding too many checkpoints can drastically increase network traffic and cause the recording files to become very large.
PC-Duo Gateway Server Guide Each "user mode profile‖ consists of the following information: Description string Image type (enumeration, current default is JPEG) Color depth (numeric value 6-24 bits per pixel (bpp) for Hextile; percentage of highest quality for JPEG) Polling frequencies (three values -- Capture, Foreground, and Background, in milliseconds).
Gateway Configuration Bandwidth Description High Quality Medium Medium-Low (for screen recording) Low (for screen recording) Image Type Hextile Hextile JPEG JPEG Color Depth 24 bpp 15 bpp 85% 75% Capture Rate 8 8 8 8 Foreground 10 8 6 4 Background 6 4 2 1 Bandwidth Limit Unlimited 100 KB/sec 60 Kbyte/sec 30 Kbyte/sec The Medium-Low and Low profiles are appropriate for high volume screen recording environments, when screen quality can be traded off for lower screen captur
PC-Duo Gateway Server Guide Group specifically for terminal services session recordings). A Terminal Services instance license slot will automatically be freed up when the session ends. Transient VDI Hosts are transitory instances of the Host application that are loaded and executed into virtual desktop images created from profiles defined in virtual desktop environments such as Citrix XenDesktop.
Gateway Configuration A ―user‖ is uniquely defined by the following parameters: Windows account credentials Local machine Browser (e.g. Internet Explorer) and browser session Any change to one or more of these parameters will essentially create a new ‗user‘; for example, same Windows account credentials on the same local machine but different browser will be a new user. Note: This model is enforced when one or more Concurrent User licenses are present.
PC-Duo Gateway Server Guide . Incremental Licenses In each license model, the licensed Gateway capacity can be increased by adding one or more licenses through the Add License field. Note that the total number of allowed licenses for Managed Hosts or Concurrent Users will be the aggregate of one or more of the respective licenses. There is no limit to the number of incremental licenses that can be added. Any licenses from the license model not being enforced will be ignored.
Gateway Configuration The default list of local network address ranges consists of a few well-known private address ranges.
PC-Duo Gateway Server Guide Select Single Computer (at one IPv4 address) and enter an IP address in the Address field. Select Group of computers (by IPv4 subnet mask) and enter the appropriate values into Address and Mask. Select Group of computers (by IPv4 start address & count), enter the first address in a range in the Address field, and enter the number of addresses in the range in the Number of addresses field.
Gateway Configuration Custom Grouping Rules Below is a description of each of the custom rule types: Add Active Directory Rule: Select the domain name that should be searched for the computer machine name, and optionally enter a prefix string to pre-pend to the OU found. If found, the Host is put into a group named for the OU to which it belongs. In the example below, if the computer name of the Host machine is found in the vectornetworks.
PC-Duo Gateway Server Guide Add IPv4 Address Rule: Specify an IPv4 address and the number of sequential addresses that should be searched after that, and select the group(s) to which the Hosts should be assigned. In the example below, if any Host machines report to the Gateway with an IPv4 address between 192.168.1.1 and 192.169.1.50, the will automatically be assigned to the custom Gateway group named ―test‖.
Gateway Configuration Generic Grouping Rules If no custom Grouping rules are specified, Hosts can be automatically assigned to a group according to one of the following generic Grouping rules: Put Host in “All Hosts” group only: Specify this option to have the Host assigned only to the ―All Hosts‖ group when it reports to the Gateway; similar in function to the Automatically move newly discovered workstations from “Unmanaged Hosts” to the “All Hosts” group option on the General tab..
PC-Duo Gateway Server Guide Polling for Hosts PC-Duo Gateway can periodically search the network for computers running PC-Duo Host according to a schedule you create. Schedule your PC-Duo Gateway to search for Host computers based on network address, protocol, and port. Each search you create and save is called a polling schedule. Create as many polling schedules as you require, however to avoid network bandwidth issues, you may want to use polling judiciously.
Gateway Configuration Edit a polling schedule To edit a polling schedule, double-click the schedule in the Polling for Hosts folder. The Polling Schedule Properties window opens. Remove a polling schedule To remove a polling schedule, right-click the schedule in the Polling for Hosts folder, and select Delete. View polling schedule properties You can poll for network computers running PC-Duo Host by specifying the port, protocol, and address on the General tab of the Polling Schedule Properties window.
PC-Duo Gateway Server Guide Select Scan address range to poll for a set of Host computers by specifying a range of network IP addresses. To specify the range, type an address in the First Address text box and a number in the Number of Addresses text box. A polling schedule can be specified in three ways from the Schedule tab: Once a day, on selected days of the week: Check the days of the week for which you would like to schedule a poll. Select the hour and five-minute interval (05, 10, 15, etc.
Gateway Configuration Select the number of times each day to repeat the polling schedule. Select the frequency of repetition and starting time.
PC-Duo Gateway Server Guide For more information about the type of data to enter, see According to an Advanced Schedule description. Run a polling schedule manually Once you have created a polling schedule, you can run it manually to locate new computers running PC-Duo Host. To manually run a polling schedule, right-click a selected schedule and select Poll Now.
Gateway Configuration Gateway Security Users can be granted the right to access and administer Gateway Security under Gateway Server Settings in the PC-Duo Gateway Administrator window. There are three different areas under Gateway Security: "Data Services Security" governs the right to make connections to the PC-Duo Gateway, the right to manage Hosts and create groups, and the right to view active status information.
PC-Duo Gateway Server Guide In the Data Services Security tab, the following tasks can be performed: Click Add to add a user or group for which you will specify permissions. Select an existing user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
Gateway Configuration In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit. The Permission Entry window opens. Each advanced permission is treated individually; click Allow or Deny for any of the them. The following permissions exist: Connect to Gateway Server: Determines if you can connect to the PC-Duo Gateway. This permission ultimately determines access to the server.
PC-Duo Gateway Server Guide Access control and security permissions for PC-Duo Gateway settings can be granted from the Settings Security tab of the Gateway Security window. In the Settings Security tab, you can perform the following tasks: Click Add to add a user or group for which you will specify permissions. Select an existing user or group that has permissions and click Remove to remove it.
Gateway Configuration In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit. The Permission Entry window opens: Each advanced permission is treated individually; you can click Allow or Deny for any permission in the list. The following permissions apply: View General Settings: Determines if you can view settings on the General tab.
PC-Duo Gateway Server Guide View Protocols: Determines if you can view settings on the Protocols tab. Modify Protocols: Determines if you can modify settings on the Protocols tab. View Audit Settings: Determines if you can view settings on the Auditing tab. Modify Audit Settings: Determines if you can modify settings on the Auditing tab. View Encryption Settings: Determines if you can view settings on the Encryption tab.
Gateway Configuration In the Operation Security tab, you can perform the following tasks: Click Add to add a user or group for which you will specify permissions. Select an existing user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of which is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
PC-Duo Gateway Server Guide Edit Security: Includes permission to change Operation Security. Special Permissions: Indicates a non-standard grouping of permissions. Click Advanced to specify advanced permissions and open the Advanced Security Settings window. In the Permissions tab of the Advanced Security Settings window, select an entry for which you want to assign advanced permissions and click Edit.
Gateway Configuration Gateway database to import a specific file of a recorded session. This can be accessed only by writing an application with the PC-Duo SDK. View Diagnostics: Determines if you can see additional diagnostic information in the Active Status section of the PC-Duo Gateway Administrator. Read Permissions: Determines if you can read the permissions. Change Permissions: Determines if you can modify the permissions.
PC-Duo Gateway Server Guide Managed Hosts PC-Duo Gateway Administrator can be used to manage and control access to managed Hosts that are listed in the Managed Hosts folder. NOTE: Hosts must first be configured to report to the PC-Duo Gateway. See Host Administrator guide for more information. By default, all Host computers that are configured to report to the PC-Duo Gateway are initially listed in the Unmanaged Hosts folder.
Gateway Configuration Menu options The following section includes descriptions of commands available from the context menu when a Managed Host is highlighted and Action is selected from the Gateway Administrator tool bar or the user right-clicks on the highlighted Host: Menu Action Command Description Move to Unmanaged Hosts Remove selected Host from Managed Hosts (delete from All Hosts group as well as any other custom groups) and move to Unmanaged Hosts list Delete from Gateway Remove selected Ho
PC-Duo Gateway Server Guide LAN signal (based on its MAC address and last known IP address). If the Gateway doesn‘t think the Host is offline, this step is skipped. If the remote computer was asleep, and wakes up in a timely manner, the Master connection attempt will be successful (although it may take longer than if the computer were already awake).
Gateway Configuration When you right-click a workstation in the All Hosts folder, you can select Move to Unmanaged Hosts if the workstation is no longer a managed host. View and edit security and other group properties for these Gateway Hosts by rightclicking All Hosts and selecting Properties. To remove all knowledge of one or more managed Hosts in the All Hosts folder, rightclick a selected group of managed Hosts and select Delete from Gateway.
PC-Duo Gateway Server Guide ―Session security for a group‖ to specify the security policy for all recordings made of Hosts in the selected group. ―Hosts in a group‖ to view all managed Hosts in the selected group. Add a group If you manage a large number of Host computers, it may be convenient for you to create groups of managed Hosts to which you apply the same security policies.
Gateway Configuration To remove a group listed in the Managed Hosts folder, right-click the group and select Delete. Rename a group To rename a group listed in the Managed Hosts folder, double-click the group, and change the name of the group on the General tab. General group properties View and/or edit the group name and description from the General tab on the Properties window for that group. The group name is the folder name in Managed Hosts.
PC-Duo Gateway Server Guide Set security permissions for a specific group by selecting the Group Security tab in the Properties window for that group. NOTE: The security policy you implement here applies to only group administration policies and does not apply to the managed Hosts in the group. To create a security policy that affects all managed Hosts in the group, see “Host security for a group”.
Gateway Configuration Edit Security: Determines if PC-Duo Master user can change the security settings for the selected group. Special Permissions: Indicates a non-standard grouping of permissions. Click Advanced to specify advanced permissions and open the Advanced Security Settings window. In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to assign advanced permissions and click Edit. The Permission Entry window opens.
PC-Duo Gateway Server Guide Read Permissions: Determines if PC-Duo Master user can read permissions in the Group Security tab. Change Permissions: Determines if PC-Duo Master user can allow or deny permissions in the Group Security tab. Take Ownership: Determines if PC-Duo Master user can take ownership of permissions in the Group Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them.
Gateway Configuration Click Add to add a user or group for which you will specify permissions. Select a user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of which is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page. The following common groupings exist: Full Control/Administration: Includes every permission in the Advanced list.
PC-Duo Gateway Server Guide Each advanced permission is treated individually, click Allow or Deny for any of the following permissions: Visible: Determines if PC-Duo Master user can see Hosts that are in the group. Some Hosts could be in the group, but not be visible to PC-Duo Master user, if blocked by individual Host permissions or other group permissions.
Gateway Configuration Clipboard Read: Determines if PC-Duo Master user can read the contents of the Host computer clipboard from the Remote Control tab of the PC-Duo Master Remote Desktop Window. Clipboard Write: Determines if PC-Duo Master user can write contents of the clipboard to a Host computer application from the Remote Control tab of the PC-Duo Master Remote Desktop Window.
PC-Duo Gateway Server Guide In the Session Security tab, the following tasks can be performed: Click Add to add a user or group for which you will specify permissions. Select a user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of which is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
Gateway Configuration In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to assign advanced permissions and click Edit. The Permission Entry window opens. Each advanced permission is treated individually; you can click Allow or Deny for any of the following permissions: Visible: Determines if PC-Duo Master user can see sessions that were recorded on any Host in the group.
PC-Duo Gateway Server Guide Take Ownership: Determines if PC-Duo Master user can take ownership of permissions in the Session Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them. Hosts in a group View the list of managed Hosts associated with a specific group by selecting the Hosts tab on the Properties window for that group.
Gateway Configuration To view the properties of any Host in a group, double-click on any Host listed in the group to bring up the Root Properties window For more detailed information, see the following topics: ―General‖ to review managed Host connection information. ―Host Security‖ to set security policy for a selected managed Host. ―Effective Security‖ to view the net effect of individual and group security policies on a specific managed Host.
PC-Duo Gateway Server Guide pull up the context menu, and select Remove to remove the Host(s) from the group. The Gateway will still try to maintain and check status of connections to the Host(s). Remove a Host from Managed Hosts list To remove one or more Hosts from the Managed Hosts list, select the Host(s) in any group (e.g. the All Hosts group), right-click on the selected Host(s) to pull up the context menu, and select Move to Unmanaged Hosts.
Gateway Configuration NOTE: The workstation’s Host key will be needed to connect to a Host through a PC-Duo Gateway from the PC-Duo Master command line. See the PC-Duo Master Guide for more information. Host security Set security permissions for access to a specific managed Host by editing the Host Security tab on the Properties window for that Host.. Select any Host under Managed Hosts in the Gateway Administrator navigation tree, right click on the Host and select Properties from the context menu.
PC-Duo Gateway Server Guide In the Host Security tab, the following tasks can be performed: Click Add to add a user or group for which you will specify permissions. Select a user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of which is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
Gateway Configuration Special Permissions: Indicates a non-standard grouping of permissions. Click Advanced to specify special permissions and advanced settings; the Advanced Security Settings window will appear. In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to assign advanced permissions and click Edit. The Permission Entry window opens.
PC-Duo Gateway Server Guide File Transfer Read: Determines if PC-Duo Master user can transfer a file from the Host to the local computer. File Transfer Write: Determines if PC-Duo Master user can transfer a file from the local computer to the Host. Remote Printing: Determines if PC-Duo Master user can print from an application on the Host to a printer that is accessible from the local computer.
Gateway Configuration Click Advanced to view special permissions and advanced settings; the Advanced Security Settings window will appear. In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to view advanced permissions and click View. The Permission Entry window opens. NOTE: Only View option is available, since Effective Security calculates the combined net effect of any individual and group security policies applicable to this Host.
PC-Duo Gateway Server Guide Visible: Determines if PC-Duo Master user can see this Host. Some Hosts may not otherwise be visible to PC-Duo Master user if blocked by permissions at the group level. Connect for Services: Determines if PC-Duo Master user can connect to all Hosts for Remote Control, File Transfer, and Remote Printing. Remote View: Determines if PC-Duo Master user can view activities of all Hosts.
Gateway Configuration Chat: Determines if a PC-Duo Master user can be added to a private chat room including the PC-Duo Host user, and any other PC-Duo Master users connected to the same Host. Remote Management: Determines if a PC-Duo Master user can issue WMI commands to a PC-Duo Host and process responses via the Remote Management tab in the Master Remote Desktop Window.
PC-Duo Gateway Server Guide 1 The user-specific security policy is applied first. 2 The group security policy for any group to which the user belongs is applied next. 3 The remote machine security policy is applied next. 4 The group security policy for any group to which the remote machine belongs is applied last. For each security policy, denied access to features takes precedence over allowed access.
Gateway Configuration In the Session Security tab, the following tasks can be performed: Click Add to add a user or group for which you will specify permissions. Select a user or group that has permissions and click Remove to remove it. Select a user or group and click Allow or Deny for the list of Permissions, each of which is a common grouping of individual permissions. The individual permissions can be seen on the Advanced page.
PC-Duo Gateway Server Guide In the Permissions tab of the Advanced Security Settings window, select a user or group of users for which you want to assign advanced permissions and click Edit. The Permission Entry window opens. Each advanced permission is treated individually; click Allow or Deny for any permission in the list. These permissions apply to the selected managed Host only. Visible: Determines if PC-Duo Master user can see sessions that were recorded on this Host.
Gateway Configuration Take Ownership: Determines if PC-Duo Master user can take ownership of permissions in the Session Security tab away from another user. If PC-Duo Master user takes ownership of permissions, PC-Duo Master user can change them. Sessions View a list of completed recording sessions for a specific Host by selecting Sessions tab on the Properties window for that Host.
PC-Duo Gateway Server Guide Start Time - Displays the time the recording began. Duration - Displays the length of the recording. Workstation ID - Displays the unique identifier for the copy of PC-Duo Host that is installed on the machine. User - Displays the name of the user who was logged into the Host computer when the session was recorded. Recording Key - Displays the unique identifier for the recording in the system.
Gateway Configuration Groups View all of the groups to which a managed Host belongs from the Groups tab on the Properties window for that Host.
PC-Duo Gateway Server Guide Terminal Services group A group called "Terminal Services on " appears when Hosts running in Terminal Services sessions on the Terminal Services server called are configured to report to the Gateway. This group only appears if there is at least one TS session Host reporting to the Gateway. All TS session Hosts that report to this Gateway will automatically be added to this group as well as to the All Hosts group.
Gateway Configuration In the example above, there is one VDI Host called ―MAPLE_VDI‖ reporting to the Gateway. Note: If there are any completed recordings for any VDI Hosts, they are stored under a special "internal" Host called "Recordings of Transient VDI Hosts". In this way, the Gateway can keep recordings of all VDI Hosts in one place.
PC-Duo Gateway Server Guide View statistics of the PC-Duo Gateway by connecting to either of these virtual Hosts from your Master: "Gateway Server 'At-A-Glance'" "Gateway Server Performance" Gateway Server 'At-A-Glance' Gateway Server At-A-Glance provides some server-specific statistics when you connect to it in the Systems Group on the Managed Hosts tab of the PC-Duo Master window.
Gateway Configuration Gateway Server Performance Gateway Server Performance Monitor provides some process-specific statistics when you connect to it in the Systems Group on the Gateway Hosts tab of the PC-Duo Master window.
PC-Duo Gateway Server Guide 142
Gateway Configuration Unmanaged Hosts Unless the default settings for a PC-Duo Gateway are modified, all managed Hosts that are configured to report to a PC-Duo Gateway are initially listed under Unmanaged Hosts. PC-Duo Gateway cannot be used to control access to any unmanaged managed Hosts. Hosts must first be moved from Unmanaged Hosts to Managed Hosts. To add one or more managed Hosts from Unmanaged Hosts to Managed Hosts, right-click the selected group of managed Hosts, and select Move to All Hosts.
PC-Duo Gateway Server Guide Active Status View the status of the following types of active operations in the Active Status folder: ―Active Users‖ ―Active Gateway Data Services‖ ―Active Master Connection Services‖ ―Active Hosts‖ ―Active Recordings‖ ―Reverse Connections‖ ―Pending Host Status Updates‖ Active Users This folder shows a list of all the user accounts currently connected to the PC-Duo Gateway for services, including administration and remote desktops.
Gateway Configuration This folder shows a list of all the PC-Duo Master users with active remote desktop windows to Hosts open through the PC-Duo Gateway. Active Hosts This folder shows a list of all the PC-Duo Hosts that have one or more remote desktop windows open through the PC-Duo Gateway. Active Recordings This folder shows a list of all the PC-Duo Hosts that are currently being recorded through the PC-Duo Gateway.
PC-Duo Gateway Server Guide Help Get help on PC-Duo Gateway Administrator in any of the following ways: Select Help > Help on PC-Duo Gateway Administrator to display the help topics for this product. Right-click any node or item in the PC-Duo Gateway Administrator window and select Help. Help for the selected item displays. Press F1 on your keyboard when you have selected any node or item in the PC-Duo Gateway Administrator window to display Help for the selected item.
Gateway Event Messages Use this appendix as a reference to look up PC-Duo Gateway event messages that may appear in the System Event Viewer or PC-Duo Gateway log file, depending on your Gateway Audit Log settings.
PC-Duo Gateway Server Guide 109 The PC-Duo Gateway Server could not start because an error ([ERROR]) occurred accessing the recording directory: [LOCATION] 110 The PC-Duo Gateway Server could not start because an error ([ERROR]) occurred accessing the audit log directory: [LOCATION] Polling and Host Status Update Messages (200-299) Message ID Message Description 200 Started polling [PROTOCOL] at [ADDRESS] (count [NUMBER], 0=broadcast) 201 Completed polling [PROTOCOL], starting at [ADDRESS] (count
Gateway Event Messages 301 Gateway noted failure attempt to authenticate for Admin services from [ADDRESS] via [PROTOCOL] (error code:[ERROR]). 302 Gateway noted failure attempt to authenticate for Admin services from [ADDRESS] via [PROTOCOL] (error code:[ERROR]). 303 Gateway noted failure attempt to authenticate reverse connection from [ADDRESS] via [PROTOCOL] (error code:[ERROR]).
PC-Duo Gateway Server Guide address [ADDRESS]. Connection [APPID] was denied input control of Host [STATION] ([WORKSTATIONID]) due to license limitation. Maximum licensed number of [CATEGORY] users was [COUNT]. Connection was opened by [USERNAME] at address [ADDRESS]. 702 Connection [APPID] administration access was limited due to license limitation. Maximum licensed number of [CATEGORY] users was [COUNT]. Connection was opened by [USERNAME] at address [ADDRESS].
Gateway Event Messages 822 Connection [APPID] was denied access to Host [STATION] ([WORKSTATIONID]) for [SERVICE]. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 823 Connection [APPID] was granted access to Host [STATION] ([WORKSTATIONID]) for [SERVICE]. Connection was opened by [USERNAME] at address [ADDRESS]. 824 Connection [APPID] attempted connection to recently managed/unmanaged Host [STATION] ([WORKSTATIONID]).
PC-Duo Gateway Server Guide [DURATION]. Connection was opened by [USERNAME] at address [ADDRESS]. 850 Established recording file [FILENAME] for Host [WORKSTATIONID] 851 Closed recording file [FILENAME] for Host [WORKSTATIONID] 859 Recording [FILENAME] of Host [WORKSTATIONID] is receiving data from the Host Gateway Messages (1000-1999) Message ID 152 Message Description 1000 Connection [APPID] sent IPC to client [ACTIVECLIENTID]. Connection was opened by [USERNAME] at address [ADDRESS].
Gateway Event Messages [USERNAME] at address [ADDRESS]. 1012 Connection [APPID] queried (read) admin connection to [WORKSTATIONID]. Connection was opened by [USERNAME] at address [ADDRESS]. 1013 Connection [APPID] denied query of admin connection to [WORKSTATIONID]. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 1014 Connection [APPID] created Group [GROUPNAME] ([GROUPID]). Connection was opened by [USERNAME] at address [ADDRESS].
PC-Duo Gateway Server Guide 154 1022 Connection [APPID] disconnected Master [USERNAME] authenticated as [USERNAME] at [ADDRESS]. Connection was opened by [USERNAME] at address [ADDRESS]. 1023 Connection [APPID] denied right to disconnect Master [USERNAME] authenticated as [USERNAME] at [ADDRESS]. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 1024 Connection [APPID] started immediate poll ([POLLID]) of the network.
Gateway Event Messages 1032 Host screen RESUMED (Station:[STATION], Protocol:[PROTOCOL], Address:[ADDRESS], WorkstationID:[WORKSTATIONID], ActiveHostKey:[ACTIVEHOSTID]). Connection [APPID] was opened by [USERNAME] at address [ADDRESS]. 1033 Host screen RESUME denied (Station:[STATION], Protocol:[PROTOCOL], Address:[ADDRESS], WorkstationID:[WORKSTATIONID], ActiveHostKey:[ACTIVEHOSTID]). Connection [APPID] was opened by [USERNAME] at address [ADDRESS].
PC-Duo Gateway Server Guide address [ADDRESS]. 156 2007 Connection [APPID] denied query of input control for Host [STATION] ([WORKSTATIONID]). Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 2010 Connection [APPID] deleted record for Host [STATION] ([WORKSTATIONID]). Connection was opened by [USERNAME] at address [ADDRESS]. 2011 Connection [APPID] denied delete of Host [STATION] ([WORKSTATIONID]. Required rights [RIGHTS].
Gateway Event Messages 2019 Connection [APPID] denied add Host [USERKEY or WORKSTATIONKEY] from Group [GROUPID]. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 2020 Connection [APPID] sent a Wake-on-LAN signal to Host [STATION] ([WORKSTATIONID]). Connection was opened by [USERNAME] at address [ADDRESS]. 2021 Connection [APPID] denied a Wake-on-LAN signal to Host [STATION] ([WORKSTATIONID]). Connection was opened by [USERNAME] at address [ADDRESS].
PC-Duo Gateway Server Guide 158 3005 Connection [APPID] denied write access to diagnostic logging settings. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 3006 Connection [APPID] deleted (reset) gateway settings. Connection was opened by [USERNAME] at address [ADDRESS]. 3007 Connection [APPID] denied delete of gateway settings. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS].
Gateway Event Messages 3018 Connection [APPID] started an immediate poll ([POLLID]) of the network. Connection was opened by [USERNAME] at address [ADDRESS]. 3024 Connection [APPID] denied right to start an immediate poll ([POLLID]) of the network. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 3025 Connection [APPID] deleted polling schedule [POLLID] of the [PROTOCOL] network. Connection was opened by [USERNAME] at address [ADDRESS].
PC-Duo Gateway Server Guide [USERNAME] at address [ADDRESS]. 3035 Connection [APPID] queried (read) a host grouping rule. Connection was opened by [USERNAME] at address [ADDRESS]. 3036 Connection [APPID] denied right to query a host grouping rule. Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. Group Messages (4000-4999) Message ID Message Description 4000 Connection [APPID] modified Group [GROUPNAME] ([GROUPID]).
Gateway Event Messages 5004 Connection [APPID] modified SessionSecurity for ([WORKSTATIONID] X [USERNAME]). Connection was opened by [USERNAME] at address [ADDRESS]. 5005 Connection [APPID] denied modify of SessionSecurity for ([WORKSTATIONID] X [USERNAME]). Required rights [RIGHTS]. Connection was opened by [USERNAME] at address [ADDRESS]. 5006 Connection [APPID] deleted SessionSecurity for ([WORKSTATIONID] X [USERNAME]). Connection was opened by [USERNAME] at address [ADDRESS].
