HOB WebSecureProxy Universal Client. Installation Guide for Mobile Devices. HOB GmbH & Co. KG Schwadermuehlstrasse Cadolzburg

Size: px

Start display at page:

Download "HOB WebSecureProxy Universal Client. Installation Guide for Mobile Devices. HOB GmbH & Co. KG Schwadermuehlstrasse Cadolzburg"

Chastity Harris
6 years ago
Views:

1 HOB GmbH & Co. KG Schwadermuehlstrasse Cadolzburg Germany mailto:support@hobsoft.com Internet: HOB WebSecureProxy Universal Client Installation Guide for Mobile Devices

3 HOB WebSecureProxy Universal Client Software and Documentation 2006 Telephone: / Fax: / All information in this document is subject to change without notice, and does not represent a commitment on the part of HOB. All rights are reserved. Reproduction of editorial or pictorial contents without express permission is prohibited. HOBLink RD VPN software and documentation have been tested and reviewed. Nevertheless, HOB will not be liable for any loss or damage whatsoever arising from the use of any information or particulars in, or any error or omission in, this document. Sun Microsystems, HotJava and Java are trademarks or registered trademarks of Sun Microsystems, Inc. Microsoft and Microsoft Internet Explorer are registered trademarks of Microsoft Corporation. All other product names are trademarks or registered trademarks of their respective corporations. Issued: May 2, 2006 Symbols and Conventions This manual uses certain symbols and conventions, the meaning of which is defined below: This symbol is used to mark useful tips that can make your work easier. This symbol indicates text of an especially informative nature. This symbol indicates an important tip or procedure that may have far-reaching effects. Please consider carefully the consequences of settings you make here. This symbol indicates there is additional information on this topic in the online help. This symbol indicates procedural steps. This symbol indicates interactive cross-references to internal or external content. Keys or key combinations are displayed in square brackets, e.g. [Space]. References to program commands and dialog boxes are printed in bold type, e.g., Select the command Open. Options and buttons that can be selected in dialog boxes are printed in bold type, e.g., user defined.

4 Purpose of this Installation Guide HOB WebSecureProxy Universal Client Cross-references to chapter headings with page numbers are marked in color as follows: Overview, page 1 Text, screen displays and file names you enter yourself are displayed in the font Courier New. This input is case sensitive! In this documentation, the product name HOB WebSecureProxy is abbreviated as WSP. In this documentation, the product name HOB WebSecureProxy Universal Client is abbreviated as WSP US. Purpose of this Installation Guide This installation guide contains step-by-step instructions on installing the HOB WebSecureProxy Universal Client, as well as information on the requirements (system, PC, mobile device, etc.). ii

5 HOB WebSecureProxy Universal Client Contents Contents Symbols and Conventions i Purpose of this Installation Guide ii 1. Overview General Requirements System Requirements PC Requirements Mobile Device Requirements 2 2. Server-Side Preparations Install HOB RD VPN Configure the Client Application with WSP Create a WSP UC User Configuration Create a Startup Options File for WSP UC 7 3. Install WSP UC on a Mobile Device Information and Support 13 iii

6 Purpose of this Installation Guide HOB WebSecureProxy Universal Client iv

7 HOB WebSecureProxy Universal Client Overview 1. Overview HOB WebSecureProxy Universal Client enables mobile devices to connect to enterprise application servers over the HOB WebSecureProxy (WSP). In other words, you can redirect client applications over the WSP. The WSP is a server component and acts as a central collection point for client queries arriving over the Internet. Placed preferably in the DMZ (Demilitarized Zone), the WSP forwards the queries to the appropriate server. SSL-encryption and client authentication security standards are, of course, implemented when making these Internet connections. The scenario below illustrates this kind of connection: Fig. 1: Sample scenario for the HOB WebSecureProxy Universal Client WSP UC doesn t support browsing in an Intranet! 1.1. General Requirements To establish a connection from MS Outlook to an Exchange Mail Server as described in the sample scenario, the IP address configured in MS Outlook must be set to the entry localhost. This will automatically redirect the connection over the WSP UC. The same is also true for other client applications. To achieve a clear organization, it is recommended to configure the same incoming ports in WSP UC as those that listen for servers or hosts, e.g. port 23 for Telnet, 3270, and 5250 protocols (see Fig. 1). Security solutions by 1

8 Overview HOB WebSecureProxy Universal Client 1.2. System Requirements Certain software on the PC and mobile device is prerequisite to installing the WSP UC. The following sections describe these prerequisites PC Requirements The following requirements relate to communication between the PC and mobile device. MS ActiveSync for synchronization of data with the mobile device, e.g., e- mail addresses. You can find the versions of MS ActiveSync your mobile device supports in the device s documentation Mobile Device Requirements The mobile device must have a Java Virtual Machine, Version 1.18 or higher installed, e.g., CrEme from NSIcom. How to install CrEme 1. Please look in the Internet at for a CrEme software installation package suitable for your mobile device and download it. The installation package must be compatible with the device s PDA/MDA operating system and processor type. 2. Launch the downloaded.exe file and install the program in accordance with the instructions in the install routine. 2 Security solutions by

9 HOB WebSecureProxy Universal Client Server-Side Preparations 2. Server-Side Preparations 2.1. Install HOB RD VPN As the WSP UC s SSL-encrypted communications between the mobile device and the server within the enterprise network all go exclusively over the WSP, the product HOB Remote Desktop VPN must be installed on this server. The WSP is an essential component of HOB RD VPN. Detailed information on installing HOB Remote Desktop VPN can be found in the HOB RD VPN Administrator Guide, included in the scope of delivery of that software Configure the Client Application with WSP After HOB RD VPN is installed, you have to configure the client application on the mobile device for communication with the WSP. In the following example, we will configure an program. Two independent configurations, one for sending, one for receiving, have to be made. How to configure a client application 1. Open the HOB WebSecureProxy configuration dialog (Start > Program Files > HOB RD VPN > Administration > Configure HOB WebSecureProxy). 2. Open the scheme Socks Server Lists in the tree structure at the left. 3. Open the desired scheme or click the Add button to create a new one. If you are creating a new scheme, either use the name in the Socks Server List tab at the right of the window or enter a new one there. 4. Click the Add button again. 5. Use the configuration name in the Socks Server Configuration tab or enter a new one there, e.g., IMAP (for receiving ) (Fig. 5, page 6). You can enter here any name you like; it should, however, reflect the nature of the configuration. 6. For Predefined protocol, select the setting Mail IMAP. 7. For Host IP Address, enter the IP-address or domain name of the IMAP server. Security solutions by 3

Server-Side Preparations HOB WebSecureProxy Universal Client Fig. 2: Socks Server Lists scheme: Socks Server configuration for IMAP 8. Click the Add button again. 9.

10 Server-Side Preparations HOB WebSecureProxy Universal Client Fig. 2: Socks Server Lists scheme: Socks Server configuration for IMAP 8. Click the Add button again. 9. Use the configuration name in the Socks Server Configuration tab or enter a new one there, e.g. SMTP (for sending ) (Fig. 6, page 7). You can enter here any name you like; the name should, however, reflect the nature of the configuration. 10. For Predefined protocol, select the setting Mail SEND. 11. For Host IP Address, enter the IP-address or domain name of the sending server. Fig. 3: Socks Server Lists scheme: Socks Server configuration for SMTP 4 Security solutions by

HOB WebSecureProxy Universal Client Server-Side Preparations 12. Save your settings and close the HOB WebSecureProxy configuration dialog. 2.3.

11 HOB WebSecureProxy Universal Client Server-Side Preparations 12. Save your settings and close the HOB WebSecureProxy configuration dialog Create a WSP UC User Configuration Create a WSP UC configuration for users to send and receive from/on a mobile device. Two independent configurations, one for sending, one for receiving, have to be made. Configure WSP UC connections with HOB EA Administration 1. Open HOB EA Administration (Start > Program Files > HOB RD VPN > Administration > HOB EA Administration) and as login as administrator. 2. Select the desired user from the database. 3. In the dropdown list at the bottom right of the window, select HOB WSP Universal Client. 4. Click the Configure button or in the toolbar. Fig. 4: Create a WSP UC user configuration 5. The WSP UC Configuration window opens. 6. Click the New... button to create a new configuration. 7. The New Gateway Configuration dialog opens (Fig. 5). Security solutions by 5

Server-Side Preparations HOB WebSecureProxy Universal Client Fig. 5: WSP UC configuration for e-mail reception 8. Enter the Gateway Name for the connection to the IMAP server, e.g., Receive e-mail (for receiving e-mail).

12 Server-Side Preparations HOB WebSecureProxy Universal Client Fig. 5: WSP UC configuration for reception 8. Enter the Gateway Name for the connection to the IMAP server, e.g., Receive (for receiving ). You can enter here any name you like; the name should, however, reflect the nature of the configuration. 9. For the Predefined protocol, select MAIL IMAP. 10. Enter IMAP as Socks Server Name. This entry must agree with the entry made for the IMAP server in the WSP Socks Server Configuration (Socks Server Lists scheme) (see Fig. 2, page 4), otherwise the connection attempt will fail! 11. (Optional) Under Target IP, you can enter either the IP address or domain name of the IMAP server that is being used only for direct connections of the WSP UC to the IMAP server, i.e., without being redirected over the WSP. Direct connections should be used only if the client application is being run within the enterprise network, i.e., the connection to the target server is not being made over the Internet. In such a case, this connection doesn t require either authentication or SSLencryption. 12. Click OK to apply the settings and close the dialog. 13. Click the New... button again to create a configuration for sending The dialog New Gateway Configuration opens again (Fig. 6). 6 Security solutions by

13 HOB WebSecureProxy Universal Client Server-Side Preparations Fig. 6: WSP UC configuration for sending 15. Enter a Gateway Name for the connection to the SMTP server, e.g., Send (for sending ). You can enter here any name you like; the name should, however, reflect the nature of the configuration. 16. Repeat steps 9-12 for the SMTP server, whereby under Socks Server Name SMTP is to be entered and the Target IP (optional) corresponds to the SMTP server s IP address. 17. After the configuration is completed, close the dialog to return to HOB EA Administration Create a Startup Options File for WSP UC 1. Open HOB EA Administration (Start > Program Files > HOB RD VPN > Administration > HOB EA Administration). 2. Click the Utilities menu and select Startup options In the dialog Open file that now appears, select the option Local file and click Open. 4. The Startup Options Manager now opens. In it s File menu, select the option New. 5. In the Startup Options Manager s File menu, select the item Save as... and, under the name startup.xml, save the file in a folder exclusively for the intended user. Hereby you are creating a startup options file assigned to the user for which it is configured. When the WSP UC is installed (see 3. Install WSP UC on a Mobile Security solutions by 7

14 Server-Side Preparations HOB WebSecureProxy Universal Client Device, page 11), this file must be copied from the PC to the mobile device. While doing this, be careful not to overwrite any existing files on the local system! 6. On the tab Connection model, select the option via EA Server (Fig. 7). Fig. 7: Startup Options Manager: Connection model tab 7. On the Logon tab, deselect the checkbox Get user name from system. 8. Select the checkbox Default user context. 9. As an option, you can select the checkbox Save password, if the user password is to be stored locally. Choosing this setting is a potential security risk, as unauthorized persons could easily log on. Only use this option when you are sure that no unauthorized persons have access to the computer used for logging on! 10. If you want to set an automatic log on (Options tab), you will have to set this under User name, Password and Repeat password (the last two are only necessary when Save password had been activated). 11. All other checkboxes remain deselected. 12. On the tab Options, in the Logon dialog section, make the settings in conformance with your logon policy. 13. On the Connection tab, deselect the checkbox Connect to web. 14. Under EA Server Address, apply the name of the Socks Server from the WSP configuration (Socks Server Lists scheme > Socks Server List tab, Socks Server Configuration tab of the entry for the HOB Enterprise Access Server) (Fig. 8). 8 Security solutions by

HOB WebSecureProxy Universal Client Server-Side Preparations Fig. 8: WSP configuration: Socks Server configuration 15. For this configuration, the tab J-Term Options is irrelevant. 16.

15 HOB WebSecureProxy Universal Client Server-Side Preparations Fig. 8: WSP configuration: Socks Server configuration 15. For this configuration, the tab J-Term Options is irrelevant. 16. On the tab WSP/HTTP Proxies, select the checkbox Use the following WSP(s). 17. Click the Add... button. 18. In the dialog Add server, enter the WSP s address and port. 19. Click the Add & Close button, to apply the changes and close the dialog. 20. In the Startup Options Manager s File menu, select the option Save and close the Startup Options Manager or, beginning at step 4, create further user configurations. Security solutions by 9

16 Server-Side Preparations HOB WebSecureProxy Universal Client 10 Security solutions by

17 HOB WebSecureProxy Universal Client Install WSP UC on a Mobile Device 3. Install WSP UC on a Mobile Device The final step is to install the WSP UC program files on the mobile device. You can find these files on the HOB RD VPN software CD in the following folder:.\software\wspuc.pocketpc\instdata In the following, the folders and files contained in this folder are described: Folder / File.\www\lib\HOBssl-J2.jar Content Program files for WSP UC.\www\lib\wspuc-J2.jar run_wspuc.lnk run_wspuc.bat.\www\lib\sslpublic Files for starting WSP UC SSL certificates für secure connections These certificates enable SSL-encrypted connections for test purposes. These certificates are identical on all product CD s and in all installations (for server and clients). Thus, they do not provide any real security and are unsuitable for use in production. To create an SSL-encrypted connection suitable for your environment, you will have to replace the pre-installed test certificates and their settings with certificates created for your purposes. Use the SSL Security Manager, (in the HOB EA Administration Utilities menu) to do this..\www\lib\hob\props\startup.xml Contains the WSP UC start options. This file must first be created on the PC (use HOB EA Administration to do this, and see 2.4 Create a Startup Options File for WSP UC, page 7). How to install WSP UC 1. On the mobile device, create a folder into which you will copy the content of the following folder:.\software\wspuc.pocketpc\instdata, e.g., C:\Program Files\HOB\wspuc (depending on the mobile device). 2. Depending on the mobile device and its operating system, WSP UC must be started with either a batch file or a link file. Both start files run_wspuc.lnk and run_wspuc.bat are found in the installation folder. Then open the file run_wspuc.* in the folder \InstData with any text editor and, if necessary, adapt the stated installation path \Program Files\HOB\wspuc, if this is different than the actual installation path. 3. Save the changes and close the file. The other, unused start file may be deleted from the mobile device. Security solutions by 11

18 Install WSP UC on a Mobile Device HOB WebSecureProxy Universal Client 4. The file startup.xml (see above) must be copied from the PC to the mobile device in the path \Program Files\HOB\wspuc\www\lib\hob\props\. 5. Now run the start file to launch WSP UC. Explanations regarding the batch / link file Entry -classpath Meaning Java Virtual Machine parameter \Program Files\HOB\wspuc\ Installation path of WSP UC -v Indicates that the WSP status information window will be displayed startup.xml Name of the startup options file for WSP UC 12 Security solutions by

19 HOB WebSecureProxy Universal Client Information and Support 4. Information and Support If you would like further information, or if you need product support, you can contact us at: Worldwide Web: Support: Phone: Fax: Headquarters (US and Canada) Phone: Security solutions by 13

HOBLink JWT User Manual

HOBLink JWT User Manual Document version: 0.4 Software version: 3.3 Issue: December 2010 HOB GmbH & Co. KG Schwadermuehlstr. 3 90556 Cadolzburg Germany Phone +49 9103 715-0 Fax +49 9103 715-271 HOB, Inc.