Vector PC-Duo User manual

PC-Duo Gateway Server Guide
Release 12.0
February 2012
Vector Networks Technologies
541 Tenth Street, Unit 123
Atlanta, GA 30318
[phone]
http://www.vector-networks.com
© Copyright 2012 Vector Networks Technologies and Proxy Networks, Inc. All rights reserved.
PC-Duo is a trademark of Vector Networks Technologies, and PROXY is a trademark of Proxy
Networks, Inc. Microsoft, Windows, Windows NT, Windows Server, and other Microsoft products
referenced herein are either trademarks or registered trademarks of the Microsoft Corporation in the
United States and other countries. Novell and NetWare are registered trademarks of Novell, Inc. All
other trademarks are the property of their respective owners.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit
(http://www.openssl.org), cryptographic software written by Eric Young ([email protected]), and
compression software from the ZLIB project (http://www.zlib.net/).

PC-Duo Gateway Server Guide
2
Table of Contents
PC-Duo overview ..........................................................................................................................................5
What‘s New in PC-Duo 12.0......................................................................................................................6
What‘s New in PC-Duo 11.6..................................................................................................................6
What‘s New in PC-Duo 11.3..................................................................................................................7
What's New in PC-Duo 11.2..................................................................................................................7
PC-Duo solutions.......................................................................................................................................8
PC-Duo Express ....................................................................................................................................8
PC-Duo Enterprise.................................................................................................................................8
PC-Duo applications..................................................................................................................................9
PC-Duo Host........................................................................................................................................10
PC-Duo Master ....................................................................................................................................11
PC-Duo Gateway.................................................................................................................................12
PC-Duo Web Console..........................................................................................................................13
PC-Duo Deployment Tool....................................................................................................................14
PC-Duo technologies...............................................................................................................................15
PC-Duo services......................................................................................................................................16
PC-Duo connection types........................................................................................................................17
RDP compatibility: Follow the active session ......................................................................................17
Wake-on-LAN support .........................................................................................................................17
Peer-to-peer connections....................................................................................................................18
Gateway-managed connections ..........................................................................................................19
Firewall-friendly connections ...............................................................................................................20
Terminal services connections ............................................................................................................20
VNC connections .................................................................................................................................22
PC-Duo security features ........................................................................................................................23
Authentication ......................................................................................................................................23
Authorization........................................................................................................................................26
Auditing................................................................................................................................................26
Encryption............................................................................................................................................26
PC-Duo networking features ...................................................................................................................28
Network protocols................................................................................................................................28
Network addressing schemas..............................................................................................................28
PC-Duo documentation and technical support........................................................................................29

PC-Duo Overview
3
Typographical conventions in documentation .....................................................................................29
Technical support options....................................................................................................................30
Gateway Installation....................................................................................................................................31
Requirements ..........................................................................................................................................32
Operating system requirements...........................................................................................................32
Hardware requirements .......................................................................................................................32
Installation requirements......................................................................................................................32
Screen recording requirements ...........................................................................................................32
Network requirements..........................................................................................................................33
Configuration options...............................................................................................................................34
Installation notes......................................................................................................................................35
Install via internet download ................................................................................................................35
Windows Firewall exceptions...............................................................................................................35
Gateway service accounts.......................................................................................................................36
Use the default service account...........................................................................................................36
Use a different service account ...........................................................................................................36
Use shared screen password authentication.......................................................................................36
SSL certificates........................................................................................................................................38
Select a previously installed certificate................................................................................................39
Create and install a self-signed server certificate................................................................................39
Create a certificate request for a certificate authority..........................................................................40
Cancel pending request to a certificate authority ................................................................................40
Install a certificate created by a certificate authority............................................................................40
Remove selected certificate from Gateway.........................................................................................41
View Certificate....................................................................................................................................41
Licensing..................................................................................................................................................44
Add a license key before your trial period expires...............................................................................44
Add a license key after your trial period expires..................................................................................45
Upgrade a license key .........................................................................................................................45
Gateway Operation.....................................................................................................................................46
Start the Gateway....................................................................................................................................47
Run the Gateway Administrator ..............................................................................................................48
Configure security through the Gateway.................................................................................................49
Configure the Gateway............................................................................................................................50
Gateway Configuration................................................................................................................................52
Remote Control Gateway servers ...........................................................................................................53
Add a Gateway ....................................................................................................................................53

PC-Duo Gateway Server Guide
4
Connect/Disconnect.............................................................................................................................54
About the product.................................................................................................................................54
Web menu............................................................................................................................................54
View .....................................................................................................................................................54
Export List............................................................................................................................................54
Gateway connection properties ...........................................................................................................54
Gateway Server Settings.........................................................................................................................58
General Settings..................................................................................................................................58
Polling for Hosts...................................................................................................................................82
Gateway Security.................................................................................................................................87
Managed Hosts .......................................................................................................................................95
Menu options .......................................................................................................................................95
Send Wake-on-LAN Signal..................................................................................................................97
All Hosts group.....................................................................................................................................97
Manage groups....................................................................................................................................98
Manage Hosts....................................................................................................................................109
Terminal Services group....................................................................................................................124
System group.....................................................................................................................................125
Unmanaged Hosts.................................................................................................................................129
Active Status..........................................................................................................................................130
Active Users.......................................................................................................................................130
Active Gateway Data Services ..........................................................................................................130
Active Master Connection Services...................................................................................................131
Active Hosts.......................................................................................................................................131
Active Recordings..............................................................................................................................132
Reverse Connections.........................................................................................................................132
Pending Host Status Updates............................................................................................................133
Help .......................................................................................................................................................134
About PC-Duo Gateway.....................................................................................................................134
Gateway Event Messages ........................................................................................................................135

PC-Duo Overview
5
PC-Duo overview
Thank you for selecting PC-Duo remote desktop solutions.
PC-Duo remote desktop solutions provide professional features that enable helpdesk
technicians, network administrators, IT managers, and software trainers to deliver
professional remote support for a fraction of the cost of hosted solutions.
Some selected features include:
Remote Access: Reach anyone, anywhere, anytime using firewall- and NAT-friendly
remote control connections.
Remote Control: Diagnose and resolve support issues without having to physically
visit remote computer.
Remote Management: Repair remote computers and make configuration changes in
real-time and without disturbing currently logged-on user.
Collaboration: Enable two or more technicians to work on the same remote computer
at the same time using chat, screen-sharing and easy-to-pass remote support.
NOTE: Before you use PC-Duo remote desktop solutions, you should be familiar with
basic network concepts, such as protocols, encryption, IP addresses, ports, and subnets.
To learn more about PC-Duo remote desktop solutions, see:
"What's New"
"PC-Duo solutions"
"PC-Duo applications"
"PC-Duo technologies"
"PC-Duo services"
"PC-Duo connection types"
"PC-Duo security features"
"PC-Duo networking features"
"PC-Duo documentation and technical support"

PC-Duo Gateway Server Guide
6
What’s New in PC-Duo 12.0
PC-Duo 12.0 introduces the following new features and capabilities:
Web Console: A new server-side application that enables browser-based access to
the Gateway Server (see PC-Duo Web Console Operating Guide)
“Click Once” Remote Desktop Window: Ability to launch a Remote Desktop
Window to a remote desktop through the Web Console without a Master. No
administrative rights needed and no reboot required (see PC-Duo Web Console
Operating Guide)
Citrix XenApp support: Option to restrict injection of Terminal Services Host
instances into ―desktop‖ sessions only, and not into ―application‖ sessions (see PC-Duo
Host Guide)
Kernel-mode Screen Capture driver: The kernel-mode screen capture driver is now
available for Windows 7, Vista and Windows 2008 Server. In many situations, the kernel-
mode screen capture driver will outperform the default user-mode screen capture driver
(see PC-Duo Host Guide)
Input Suppression: Ability to turn off keyboard and mouse input on the remote
desktop machine for Windows 7, Vista and Windows 2008 Server (see PC-Duo Master
Guide)
Assignment of Hosts: Ability to automate the assignment of Hosts to custom
Gateway Groups using Windows Powershell scripting (see PC-Duo Host Guide)
Address Bindings: Ability to bind the SSL and TCP network protocols to all
addresses or to select specific addresses on the Gateway Server (see Address Bindings)
What’s New in PC-Duo 11.6
Windows 7 support: PC-Duo 11.6 provides full support (remote access, remote
control, remote management) for Windows 7 computers, including 32- and 64-bit
platforms.
Windows Server 2008 R2 support: PC-Duo 11.6 provides full support (remote
access, remote control, remote management) for Windows Server 2008 R2 computers
(64-bit platforms only).
Mac, Linux support: PC-Duo 11.6 provides support (remote access, remote control)
for Macintosh and Linux computers running VNC server software (standard on Macs).
Wake-on-LAN support: PC-Duo 11.6 includes ability to turn on remote computers
that are configured to listen for Wake-on-LAN signal.
Remote Power Scheme management: PC-Duo 11.6 includes new remote
management tools that allows Master user to view and change power scheme settings on
remote computers.
Screen Recording Playback via URL: PC-Duo 11.6 includes ability for Master to
playback a PC-Duo screen recording from a standard web server over HTTP or HTTPS.
RDP compatibility: If a remote computer is hosting an active RDP session, PC-Duo
11.6 Host will capture and provide input control to the RDP session.

PC-Duo Overview
7
Active Directory integration: PC-Duo 11.6 Deployment Tool can now be used to
discover computers and OUs in Active Directory domains, install new PC-Duo software,
upgrade existing software, and/or push configuration changes to existing software.
What’s New in PC-Duo 11.3
Remote Management service: PC-Duo 11.3 features a new service that allows
Master user to generate inventory of hardware and software assets on a remote Host.
Also allows Master user to query and change certain system settings.
Terminal Services support: PC-Duo 11.3 supports server-side Hosts for thin client,
terminal services sessions for Citrix XenApp (formerly Citrix Presentation Server) and
Windows Terminal Server.
User-Mode Screen Capture optimization: PC-Duo 11.3 includes significant
performance and reliability enhancements for user-mode screen capture technology
introduced in PC-Duo 11.2.
What's New in PC-Duo 11.2
PC-Duo 11.2 introduced the following new features and capabilities:
Windows Vista and Server 2008 support: PC-Duo 11.2 applications (Host, Master,
Gateway, Deployment Tool) now run on Windows Vista and Windows Server 2008
operating systems.
NOTE: PC-Duo 11.2 introduces a new screen capture technology (user-mode) for
Windows Vista and Windows Server 2008 platforms.
Bandwidth throttling: PC-Duo 11.2 allows screen capture settings to be modified in
order to reduce the amount of bandwidth used. Usually, this will reduce screen capture
quality but improve responsiveness and overall performance (see PC-Duo Host Guide for
more information).
Popup notifications: PC-Duo 11.2 supports popup "toast" notifications when
connections are established to remote computers (see PC-Duo Host Guide for more
information).
Send keystroke button: PC-Duo 11.2 now provides a new toolbar button on the
Master Remote Desktop Window, which can be configured to send Ctrl+Alt+Del or one of
the other available keyboard combinations to remote computer (see PC-Duo Master
Guide for more information).
Host-based chat: PC-Duo 11.2 introduces support for Host-based chat. This new
service automatically creates a private chat room including Host user and any technicians
connected to the Host. Technicians can see and participate in multiple chat rooms
simultaneously (see PC-Duo Master Guide for more information).
File transfer resume: Occasionally, a file transfer operation is interrupted when a
connection is lost. PC-Duo 11.2 introduces the ability to resume interrupted file transfers
exactly from the point of interruption (see PC-Duo Master Guide for more information).
Windows Media format support: PC-Duo screen recording files are produced in a
streamlined, proprietary format and play back in a viewer provided with PC-Duo Master.
PC-Duo 11.2 introduces a new utility to enable technicians to convert PC-Duo screen
recording files into Windows Media format for play back in WM-compatible players and
editing in off-the-shelf media tools (see PC-Duo Master Guide for more information).

PC-Duo Gateway Server Guide
8
PC-Duo solutions
Vector Networks provides two solutions for remote desktop support:
PC-Duo Express
PC-Duo Express is an easy-to-use remote desktop solution that uses simple peer-to-peer
connections between helpdesk technicians and end-user remote computers. It is ideally
suited for smaller companies and workgroups in which the number of remote computers
being supported is small and manageable.
PC-Duo Enterprise
PC-Duo Enterprise is an enterprise-class remote desktop solution that uses a robust,
scalable server to establish and maintain a secure network of connections to end-user
machines. It leverages centralized administration, security and network access to simplify
and automate the creation, management, and monitoring of this ―network within a
network‖. PC-Duo Enterprise is ideally suited for enterprises and corporate workgroups
with large numbers of remote computers, multiple domains and/or employees with
remote computers outside the network.
PC-Duo Features
PC-Duo Express
PC-Duo
Enterprise
Components
PC-Duo Host
Yes
Yes
PC-Duo Master
Yes
Yes
PC-Duo Gateway
No
Yes
PC-Duo Web Console
No
Yes
PC-Duo Deployment Tool
Yes
Yes
Connection Types
Peer-to-peer connections
Yes
Yes
Gateway-managed connections
No
Yes
Firewall-friendly connections
No
Yes
Terminal services connections
No
Yes
VNC connections
Yes
No

PC-Duo Overview
9
PC-Duo applications
The PC-Duo remote desktop solutions include some or all of the following applications:
PC-Duo Applications
PC-Duo Express
PC-Duo
Enterprise
PC-Duo Host
Yes
Yes
PC-Duo Master
Yes
Yes
PC-Duo Gateway
No
Yes
PC-Duo Web Console
No
Yes
PC-Duo Deployment Tool
Yes
Yes

PC-Duo Gateway Server Guide
10
PC-Duo Host
PC-Duo Host is an agent application that enables remote support connections to be
established to the machine on which it runs. By installing PC-Duo Host on a computer in
your network, you can:
Allow technicians to make peer-to-peer remote control connections to the machine,
whether someone is there or not. Each Host manages its own security settings and
access rights.
Allow or force technicians to make Gateway-managed remote support connections to
the machine through a central server (PC-Duo Gateway), which will automatically enforce
security settings and access rights according to policies set at the server.
PC-Duo Host can now be installed in server-side terminal sessions for application
virtualization solutions such as Citrix XenApp and Microsoft Terminal Server.
For more information about configuring and operating PC-Duo Host, please see the PC-
Duo Host Guide.