Issue 2

Tips & Tricks is our regular technical bulletin designed to help you get the most out your AppGate
system. This issue looks at how to access files & folders. In the next edition we'll focus on the use of
mobile deices. If there are topics that you would like us to coer! send us your comments ia the
AppGate "orum! or drop us an email to# feedback$appgate.com.
Focus on ... Accessing Files & Folders
With the recent launch of version 9, AppGate introduced a new way
to connect users with their files and folders.
The new File Access component makes
file access straightforward for users,
providing a web view that looks and works
like a browser. And with the ! module,
you can use it on mobile devices such as
i"hones and #lackberries.
There are a number of other mechanisms
in the AppGate ecurity erver for
connecting users to network shares and below we look at three
different methods, providing setup tips for Windows, $% and !inu&.
At the end we look at the new File Access component which is
designed to work on any platform.
Method 1: Using an IP Access component in port forward mode
'etwork shares are normally accessed using 'et#($ and )#
protocols on port *+9 ,and --./. (t may be possible to mount shares
through the security server in this way also. An (" access component
needs to be configured using port *+9 or --. ,or both/ pointing to the
file server. This opens up the re0uired connectivity between the client
and the server. A client command then has to be used to instruct the
client machine to mount the share. The client commands for
Windows can be comple& and depend on whether it is a domain "1
or not. For )ac and !inu& it is simpler 2 have a look at3
http344www.appgate.com4inde&4support40a4answer5667-5html
% &indows '( )(* and earlier# &orks out of the box using port *+,
% &indows '( )(-.+# /se port *+, and set )mb0eice1nabled23 in the
registry 45 completely deinstall the "ile and (rinter )haring for 6icrosoft
7etworks8 serice from the network stack.
% &indows 9ista and later# /se port ::; only and completely deinstall the
"ile and (rinter )haring for 6icrosoft 7etworks8 serice from the network
stack.
% 6ac 4)' Tiger and earlier# &orks out of the box using port *+,
% 6ac 4)' <eopard and later# not supported
% <inux# &orks out of the box using port *+,.
Bits & Bytes
USB Client v1.5
The new version of the 8#
client features 8buntu 9.6-,
providing a totally closed and
secure environment for users
to access resources from an
insecure device. )ore
information is on the website.
Secring SAP
(mplementing 9:" solutions
such as A" can result in data
security issues and corporate
assets vulnerable to attack.
AppGate has ;ust published a
new paper on securing A"
systems < you can download it
from the website.
!ew "eatres Coming Soon
The ne&t AppGate release will
include some interesting new
features such as3
1hained Authentication < if you
want to streamline the process
for users to complete multiple
authentication steps, for
instance "ublic =ey and
"assword, then this new
feature makes it possible with
the user entering all the
re0uired data in the first dialog>
$ with :adius 2 this feature
will let you use any password
from a :adius e&change for
single sign on.
!ook out for more information
soon.
Method #: Using the Share Access component
The AppGate ecurity erver has a specific component which was developed for mounting shares on
Windows clients. The hare Access component needs to be configured and pointing to the file server.
This opens up the re0uired connectivity between the client and the server. The AppGate 1lient then
mounts the share locally. To use this component it is recommended you look at3
http344www.appgate.com4inde&4support40a4answer566765html
% &indows '( )(* and earlier# &orks out of the box
% &indows '( )(-.+# )et )mb0eice1nabled23 in the registry 45 completely deinstall the "ile and (rinter
)haring for 6icrosoft 7etworks8 serice from the network stack.
% &indows 9ista and later# not supported
% 6ac 4)'# not supported
% <inux# not supported.
Method $: Using IP %nnelling driver
(f the (" Tunnelling ?river is installed then the client machine can behave as if it was on the home
network. An (" access component needs to be configured using port *+9 or --. ,or both/ pointing to
the file server. This opens up the re0uired connectivity between the client and the server. A client
command then has to be used to instruct the client machine to mount the share. This will vary
according to circumstances but below are some suggestions which work in different situations3
% &indows '( )(* and earlier# &orks out of the box using port *+,
% &indows '( )(-.+! 9ista and later# &orks out of the box using port ::;
% 6ac 4)'# &orks out of the box using port ::; or *+,
% <inux# &orks out of the box using port ::; or *+,
If more ports are opened up then it is een possible to run the &indows login script using the AppGate =lient
and mount multiple shares in the usual way.
"ile Access component & !ew in version '.(
The File Access component works in a different way from the previous + methods. @ere, the share is
mounted on the AppGate erver itself and a view of this share is presented to the user.
The File Access component needs to be
configured and pointed to the file server.
The AppGate 1lient then provides a
viewer window which looks and works
much the same as Windows 9&plorer. (f
the ! module is enabled then users
will also be able to benefit from a
browser based view of their files and
folders. This component works on all
versions of the mainstream operating
systems.
What are the advantages of the new File Access component over the traditional share mount
mechanismsA
Speed < the client machine no longer has to download and inde& the share.
Universalit) < the BviewersB are designed to work on any platform so the set2up for Cista is the same
as for !eopard or 8buntu.
Secrit) < the AppGate erver now acts as a true pro&y between a 1lient and the erver making it
impossible for any worms to propagate from a dirty Windows client to a Windows file server.
Happy Midsummer!
(n weden, )idsummer in the middle of Dune is one of the most important
celebrations of the year. o from all of us at AppGate we wish you a very Eglad
midsommarFG
For more information:
www.appgate.com +46 31 774 43 50 info@appgate.com