Configuration Secure Portable Office Client Avaya VPN Gateway

Transcription

1 Configuration Secure Portable Office Client Avaya VPN Gateway 9.0 NN , August 2012

2 2012 Avaya Inc. All Rights Reserved. Notice While reasonable efforts have been made to ensure that the information in this document is complete and accurate at the time of printing, Avaya assumes no liability for any errors. Avaya reserves the right to make changes and corrections to the information in this document without the obligation to notify any person or organization of such changes. Documentation disclaimer Avaya shall not be responsible for any modifications, additions, or deletions to the original published version of this documentation unless such modifications, additions, or deletions were performed by Avaya. End User agree to indemnify and hold harmless Avaya, Avaya's agents, servants and employees against all claims, lawsuits, demands and judgments arising out of, or in connection with, subsequent modifications, additions or deletions to this documentation, to the extent made by End User. Link disclaimer Avaya is not responsible for the contents or reliability of any linked Web sites referenced within this site or documentation(s) provided by Avaya. Avaya is not responsible for the accuracy of any information, statement or content provided on these sites and does not necessarily endorse the products, services, or information described or offered within them. Avaya does not guarantee that these links will work all the time and has no control over the availability of the linked pages. Warranty Avaya provides a limited warranty on this product. Refer to your sales agreement to establish the terms of the limited warranty. In addition, Avaya s standard warranty language, as well as information regarding support for this product, while under warranty, is available to Avaya customers and other parties through the Avaya Support Web site: Please note that if you acquired the product from an authorized Avaya reseller outside of the United States and Canada, the warranty is provided to you by said Avaya reseller and not by Avaya. Licenses THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA WEBSITE, ARE APPLICABLE TO ANYONE WHO DOWNLOADS, USES AND/OR INSTALLS AVAYA SOFTWARE, PURCHASED FROM AVAYA INC., ANY AVAYA AFFILIATE, OR AN AUTHORIZED AVAYA RESELLER (AS APPLICABLE) UNDER A COMMERCIAL AGREEMENT WITH AVAYA OR AN AUTHORIZED AVAYA RESELLER. UNLESS OTHERWISE AGREED TO BY AVAYA IN WRITING, AVAYA DOES NOT EXTEND THIS LICENSE IF THE SOFTWARE WAS OBTAINED FROM ANYONE OTHER THAN AVAYA, AN AVAYA AFFILIATE OR AN AVAYA AUTHORIZED RESELLER, AND AVAYA RESERVES THE RIGHT TO TAKE LEGAL ACTION AGAINST YOU AND ANYONE ELSE USING OR SELLING THE SOFTWARE WITHOUT A LICENSE. BY INSTALLING, DOWNLOADING OR USING THE SOFTWARE, OR AUTHORIZING OTHERS TO DO SO, YOU, ON BEHALF OF YOURSELF AND THE ENTITY FOR WHOM YOU ARE INSTALLING, DOWNLOADING OR USING THE SOFTWARE (HEREINAFTER REFERRED TO INTERCHANGEABLY AS YOU AND END USER ), AGREE TO THESE TERMS AND CONDITIONS AND CREATE A BINDING CONTRACT BETWEEN YOU AND AVAYA INC. OR THE APPLICABLE AVAYA AFFILIATE ( AVAYA ). protected by copyright and other intellectual property laws including the sui generis rights relating to the protection of databases. You may not modify, copy, reproduce, republish, upload, post, transmit or distribute in any way any content, in whole or in part, including any code and software. Unauthorized reproduction, transmission, dissemination, storage, and or use without the express written consent of Avaya can be a criminal, as well as a civil, offense under the applicable law. Third-party components Certain software programs or portions thereof included in the Product may contain software distributed under third party agreements ( Third Party Components ), which may contain terms that expand or limit rights to use certain portions of the Product ( Third Party Terms ). Information regarding distributed Linux OS source code (for those Products that have distributed the Linux OS source code), and identifying the copyright holders of the Third Party Components and the Third Party Terms that apply to them is available on the Avaya Support Web site: Trademarks The trademarks, logos and service marks ( Marks ) displayed in this site, the documentation(s) and product(s) provided by Avaya are the registered or unregistered Marks of Avaya, its affiliates, or other third parties. Users are not permitted to use such Marks without prior written consent from Avaya or such third party which may own the Mark. Nothing contained in this site, the documentation(s) and product(s) should be construed as granting, by implication, estoppel, or otherwise, any license or right in and to the Marks without the express written permission of Avaya or the applicable third party. Avaya is a registered trademark of Avaya Inc. All other trademarks are the property of their respective owners. Downloading documents For the most current versions of documentation, see the Avaya Support Web site: Contact Avaya Support Avaya provides a telephone number for you to use to report problems or to ask questions about your product. The support telephone number is in the United States. For additional support telephone numbers, see the Avaya Web site: support Copyright Except where expressly stated otherwise, no use should be made of materials on this site, the Documentation(s) and Product(s) provided by Avaya. All content on this site, the documentation(s) and the product(s) provided by Avaya including the selection, arrangement and design of the content is owned either by Avaya or its licensors and is 2 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

3 Contents Chapter 1: Preface... 5 Who should use this book... 5 Related documentation... 5 Product names... 6 Avaya SPO technical support... 6 Chapter 2: New in this release... 7 Features... 7 Secure Portable Office support... 7 Other changes... 8 Tunnel Guard... 8 Chapter 3: Introduction... 9 Features... 9 Hardware requirements Secure Portable Office Client compatible devices Portable media only deployment CD-ROM and DVD deployment Supported operating systems Accessing applications using the Secure Portable Office Client Chapter 4: Downloading and installing Secure Portable Office Client Downloading SPO Client SPO Client installation Installing MSI image Installing U3P image Installing CD-ROM, CD-R, CD-RW, or DVD Portable applications installation Installing portable applications from public websites Chapter 5: Configure Secure Portable Office Client Configuring SPO Dashboard File menu View menu Tools menu Help menu User preferences System tray Enabling auto-start application for U3P Removing Secure Portable Office from U3 USB Chapter 6: Ceedo licensing SPO application virtualization license Ceedo license basic SPO application virtualization Activating Ceedo enterprise from within the Ceedo environment Importing the Ceedo license Chapter 7: Authenticating Secure Portable Office Client Authentication with Avaya VPN Gateway server Configuration Secure Portable Office Client August

4 Authentication methods Software upgrade and package Configuration Secure Portable Office Client August 2012

5 Chapter 1: Preface This document provides information about configuring and deploying the Avaya Secure Portable Office (SPO) Client. Who should use this book This book is for Secure Potable Office (SPO) Client users and administrators who deploy or maintain the SPO feature, and configure the Avaya VPN Gateway. Related documentation For full documentation on installing and using the features available in the VPN Gateway software, see the following manuals: Avaya VPN Gateway Command Reference (NN ). Describes each command in detail. The commands are listed for each menu, according to the order they appear in the Command Line Interface (CLI). Avaya VPN Gateway Application Guide for SSL Acceleration (NN ). Provides examples on how to configure Secure Socket Layer (SSL) Acceleration through the CLI. Avaya VPN Gateway CLI Application Guide (NN ). Provides examples on how to configure VPN deployment through the CLI. Avaya VPN Gateway BBI Application Guide (NN ). Provides examples on how to configure VPN deployment through the Browser-Based Interface (BBI). Avaya VPN Gateway User Guide (NN ). Describes the initial setup procedure, upgrades, operator user management, certificate management, troubleshooting and other general operations that apply to both SSL Acceleration and VPN. Avaya VPN Gateway Administrator Guide (NN ). VPN management guide intended for end-customers in a Secure Service Partitioning configuration. Avaya VPN Gateway Configuration - Secure Portable Office Client (NN ). Gives the feature list and provides general information about Secure Portable Office (SPO) based VPN client. Avaya VPN Gateway VMware Getting Started Guide (NN ). Describes how to install, configure, and deploy the Avaya VPN Gateway VMware appliances. Configuration Secure Portable Office Client August

6 Preface Avaya VPN Gateway Release Notes (NN ). Lists new features available in version and provides up-to-date product information. Avaya VPN Gateway Troubleshooting Guide (NN ). Describes the prerequisites and various tools used to troubleshoot the Avaya VPN Gateway (AVG). The preceding manuals are available for download. Product names The software described in this manual operates on several different hardware models. The terms, Avaya VPN Gateway, VPN gateway, or AVG, refer to the following hardware models: Avaya VPN Gateway 3050 VM (AVG 3050 VM) Avaya VPN Gateway 3070 VM (AVG 3070 VM) Avaya VPN Gateway 3090 VM (AVG 3090 VM) All references to the old product names, isd-ssl or isd, in commands or screen outputs, also apply to the preceding hardware models. Avaya SPO technical support Contact your IT support help desk or VPN administrator for additional help with implementation of the Secure Portable Office (SPO) feature. 6 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

7 Chapter 2: New in this release The following sections detail what s new in Avaya Configuration Secure Portable Office Client (NN ), for release 9.0. Features on page 7 Other changes on page 8 Features See the following sections for information about feature changes: Secure Portable Office support on page 7 Secure Portable Office support Release 9.0 adds Ceedo support on all Windows 64 bit platforms in virtualized mode. Beginning with Release 9.0, you can download one of the two versions of SPO: Avaya Basic contains basic software with Avaya 2050 IP Softphone and JRE 7. Avaya Contact Center (ACC) contains all the applications and software of Avaya Basic with the addition of Avaya Contact Center Express Desktop 5.0 and Avaya One-X Client. Both SPO version (Basic and ACC) use security restrictions on Ceedo environment. Next host resources are blocked inside Ceedo: Access to network shares and drives Access to printing Drag and drop Clipboard access For more information on the Release 9.0 support, refer to Configuration Secure Portable Office Client Avaya VPN Gateway (NN ). For more information about release 9.0 support, see the following sections: Supported operating systems on page 10 Accessing applications using the Secure Portable Office Client on page 11 Configuration Secure Portable Office Client August

8 New in this release Other changes See the following sections for information about changes that are not feature-related. Tunnel Guard on page 8 Tunnel Guard Please note, while the Avaya Endpoint Access Control Agent (formerly Tunnel Guard) can be configured through both the BBI and CLI, the CLI configuration is performed under the former Tunnel Guard context. 8 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

9 Chapter 3: Introduction This chapter provides the feature list for, and general information about, the Secure Portable Office (SPO) Client. The SPO Client provides VPN access from portable storages such as USB compliant flash memory, and CD ROM. The SPO Client provides enhanced mobility, portability, and security compared to traditional VPN access methods. To simplify SPO Client maintenance and updates, you can deploy and manage the SPO Client from the AVG server. Note: SPO for the group must be enabled on the AVG server before users can log in with an SPO Client. Features The SPO Client supports the following features: Layer 3 access using Net Direct. Client-side logging for remote troubleshooting. Status monitoring to provide real time information of connection status. Application portability to add your applications to the USB flash drive and to the SPO menu. Removal of information from the browser cache after you exit, logout, or remove the USB flash drive. Access list for the applications authorized by the IT administrator; based on extended profiles. Automatic update of the SPO Client to the latest version, after you connect to the AVG. Server-side logging for SPO VPN users. Link to Net Direct for applications that require layer 3 network access; permits Net Direct to auto launch after you start the application. Software management menu The AVG server maintains software applications and portable applications required by the SPO Client. The software is stored in a special directory, per VPN, in the AVG server. Configuration Secure Portable Office Client August

10 Introduction Hardware requirements The following are the minimum hardware requirements for using SPO 9.0 in virtualized mode. Windows XP Minimum 512 MB of RAM Avaya recommends 2-4 GB Minimum Intel P4 processor 800 Mhz or AMD equivalent Avaya recommends Dual- Core/Core2Duo 2 GB USB flash drive Secure Portable Office Client compatible devices The Secure Portable Office (SPO) Client can run from any portable media, including a generic USB compatible flash memory drive, and CD ROM. Portable media only deployment In the portable media only deployment mode, the SPO Client is installed on a compatible USB flash memory drive that is compliant with USB V1.1, or higher. If the format option is chosen, all data resident on the device can be overwritten during the SPO Client installation. A compatible USB flash memory drive can be obtained by any third party vendor, and initialized. CD-ROM and DVD deployment You can deploy the SPO Client on CD-ROM and DVD only in native mode. Supported operating systems The SPO Client supports the following 32 bit and 64 bit operating systems in virtualized and native environments: Windows 2000 Windows XP 10 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

11 Accessing applications using the Secure Portable Office Client Windows Vista Windows 7 Accessing applications using the Secure Portable Office Client After the SPO software client and the AVG server exchange user credentials, you receive a configuration file from the AVG server. Beginning with Release 9.0, you can request for download one of the two versions of SPO: Avaya Basic contains basic software with Avaya 2050 IP Softphone and JRE 7. Avaya Contact Center (ACC) contains all the applications and software of Avaya Basic with the addition of Avaya Contact Center Express Desktop 5.0 and Avaya One-X Client. Both SPO version (Basic and ACC) are using security restrictions on Ceedo environment. Next host resources are blocked inside Ceedo: Access to network shares and drives Access to printing Drag and drop Clipboard access Secure Portable Office Client Release 9.0, in virtual mode, supports the following software in Windows 32 bit and 64 bit platforms. Software released with Avaya Contact Center: - Microsoft Data Access Jet Database Endine Microsoft.Net Framework Avaya Contact Center Express Desktop Avaya One-X Agent 2.0 Oracle Java Runtime Environment 1.7 Avaya 2050 IP Softphone 4.2 Avaya customized Ceedo 4.x Net Direct x64 bit support for Release 9.0 Microsoft IE9 Mozilla Firefox 7.x The following figure shows an Avaya customized Ceedo (SPO Basic). Configuration Secure Portable Office Client August

12 Introduction Figure 1: Example of an Avaya customized Ceedo (SPO Basic) The following figure shows an Avaya customized Ceedo (SPO ACC). 12 Configuration Secure Portable Office Client August 2012 Comments?

13 Accessing applications using the Secure Portable Office Client Figure 2: Example of an Avaya customized Ceedo (SPO ACC) The following list shows examples of applications and types of links, enabled for secure access. Note: The availability of the applications and types of links is dependent upon whether or not you have connected to the Avaya SPO client. The USB SPO device can be used to access the different programs on the local USB stick, such as Mozilla, but you must connect to the Avaya SPO client to use the customized application links, the dashboard and the full list menu. Web-based applications - Web , such as Outlook Web Access, and Lotus inotes - Intranet server access - Business application, such as BizSphere Corporate policy enforcement applications, such as Avaya Endpoint Access Control Agent Configuration Secure Portable Office Client August

14 Introduction Thin clients, such as WTS and Citrix Virtual Desktop Full Network, such as Layer 3, access using Net Direct - Business applications, such as SAP, Oracle, and PeopleSoft - Voice over IP applications, such as MCS and LCS Applications supported by port forwarding Portable applications support - Portable Firefox - ClamWin Portable: antivirus to go - Example portable applications from Web browsers - Internet Explorer - Mozilla Firefox version 3.0, and later The access list menu can appear in either a system tray icon, as shown in Figure 3: System tray on page 15, or in a window dashboard, as shown in Figure 4: Dashboard on page 16. If the access list menu is displayed as a system tray icon, a temporary balloon appears from the icon that shows the user status as connected or disconnected, and the list of available applications. The system tray icon contains links to verify the connection status, disconnect the service, and close the application. The following figure is an example of the system tray. 14 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

15 Accessing applications using the Secure Portable Office Client Figure 3: System tray The following figure is an example of the window dashboard. Configuration Secure Portable Office Client August

16 Introduction Figure 4: Dashboard 16 Configuration Secure Portable Office Client August 2012 Comments?

17 Chapter 4: Downloading and installing Secure Portable Office Client This chapter explains the downloading and installation processes for the Secure Portable Office (SPO) Client. You can download and install the SPO Client from a web server, or AVG portal. Note: Before you install SPO software images on a USB flash drive, U3P device, or CD-ROM, you must download the SPO software images from the portal or server. With release 9.0, you can download one of the following versions of SPO: Avaya Basic. For more information about applications and software support, see Accessing applications using the Secure Portable Office Client on page 11. Avaya Contact Center (ACC). Includes the applications and software of Avaya Basic, Avaya Contact Center Express Desktop and Avaya One-X Client. The two SPO Client versions available (native and virtualized) that support different forms of portable storage include the following: MSI image for use on USB 1.1 or higher flash memory devices U3P image for use on U3 type flash memory ISO image for use on CD ROM Note: In this document the term CD-ROM refers to CD-ROM, DVD, CD-R, and CD-RW as appropriate. Downloading SPO Client Use the following procedure to download the MSI, ISO, or U3P images software from the portal. Procedure 1. In the available web browser, enter the domain address. Example: 2. To log in, the Username and Password fields, enter your user name and password, respectively. 3. Click Login. Configuration Secure Portable Office Client August

18 Downloading and installing Secure Portable Office Client 4. From the portal, click the Download tab. Note: The Download tab is only available in the portal when the System Administrator has enabled the SPO access. For more information about how to enable the SPO in groups using CLI, see Avaya VPN Gateway CLI Application Guide (NN ). For more information about how to enable the SPO in groups using BBI, see Avaya VPN Gateway BBI Application Guide (NN ). 5. Click the software image that matches the USB flash drive (MSI), U3P USB, or CD- ROM (ISO) image. 6. Download MSI and u3p files directly to the appropriate USB flash drive. SPO Client installation This section describes the steps to install the SPO Client software in the USB flash drive, CD- ROM, and U3P USB device. Installing MSI image Use the following procedure to install the MSI image onto a generic USB flash drive. Prerequisites Use a USB flash drive with 256 MB. Avaya recommends that you use 2 GB or larger. 18 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

19 SPO Client installation 1. Double-click Download MSI Image : MSI. The SPO Client Setup Wizard appears. 2. Click Next. The SPO Client Setup Wizard with banner text appears. 3. Select I accept the terms in the License Agreement, and click Next. The SPO Client Wizard with installation folder location appears. 4. Select the USB flash drive for installation, and click Next. The SPO Client Setup Wizard with installation mode appears. 5. Select the SPO Client software installation mode. To install the SPO Client software without formatting, select Fresh install. A new folder is created for installation. To format the device before installation, select Format and Install. 6. Click Next. The format option will remove all previously installed files and data from the target device. The SPO Client Setup Wizard with installation ready message appears. 7. To install the SPO application on the USB flash drive, click Install. The SPO Client application Setup Wizard with installation complete message appears after a successful installation. 8. To complete the MSI installation, click Finish. Installing U3P image Use the following procedure to install a U3P image in a U3 USB device. Procedure 1. From the system tray, click U3 Launchpad. Configuration Secure Portable Office Client August

20 Downloading and installing Secure Portable Office Client Figure 5: U3 Launchpad 2. Click Add Programs. 3. Click Install from my Computer. 4. Navigate to the downloaded U3P file. The U3 Add graphic wizard appears. 5. Click Next. The installation process begins. 6. Click Next. 7. To exit the Add Program Wizard, click Done. The Installation process completes. 8. Go to the U3 launch pad. 20 Configuration Secure Portable Office Client August 2012 Comments?

21 Portable applications installation Installing CD-ROM, CD-R, CD-RW, or DVD Use the following procedure to install SPO Client software on CD-R, CD-RW, or DVD. Procedure 1. Insert an empty CD-ROM, CD-R, CD-RW, or DVD into the CD-ROM, CD-R, CD- RW, or DVD drive. 2. Open the web browser, and login to the AVG. 3. Download the ISO image from the portal, and write onto the CD-R, CD-RW, DVD. The client application runs after writing the ISO image into the CD-ROM, CD-R, CD- RW, or DVD disk. 4. Reinsert the CD-ROM. The SPO Client application automatically runs. For more information about installing SPO Client software on CD-R, CD-RW, or DVD, see Downloading and installing Secure Portable Office Client on page 17. Portable applications installation Portable applications are the software programs that you can store on any storage device such as a USB flash drive; generic or U3P format. You can add your favorite software applications, such as web browser, client, office suite, calendar or scheduler, instant messaging client, and antivirus, on a USB flash drive to use on multiple computers. If you have a U3 capable USB flash drive, you can download the portable applications on the USB flash drive from portable application websites such as and You can download portable applications to the USB flash drive using the following: Public website AVG Server Note: For more information about downloading portable applications on an AVG server, see Avaya VPN Gateway Administrator Guide, (NN ). Installing portable applications from public websites Use the following procedure to download the portable application on a USB flash drive. You can use up to 10 MB to install portable applications. Configuration Secure Portable Office Client August

22 Downloading and installing Secure Portable Office Client After you download the portable application, you can create a link in the User Links section of the Dashboard. For more information about creating user links, see Application Links on page 39. Procedure 1. Open the Web browser. 2. Enter the protocol and IP address to install the portable application. 3. Press Enter. 4. Click Download. 5. Download the application into the USB flash drive. Figure 6: Portable application setup 6. Click Install. Figure 7: Installing portable application The software is installed on the USB flash drive. Note: To view the list of installed applications, click the Status tab on Dashboard. 22 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

23 Chapter 5: Configure Secure Portable Office Client This section explains the configuration processes for the Secure Portable Office (SPO) Client. There are two options for configuring the SPO feature: Configuration by the end user after the client is installed. Pre-configuration by the AVG administrator. There are also SPO Client customizing options that the AVG administrator can use. This chapter contains the following topics: Configuring SPO on page 23 Dashboard on page 27 System tray on page 44 Enabling auto-start application for U3P on page 45 Removing Secure Portable Office from U3 USB on page 45 Configuring SPO If the SPO Client is not preconfigured, it must be configured by the end user after installation. When choosing the virtualized environment, ensure that the application images are created with a tool while installing the application on a computer before the virtualization takes place. Use the following procedure to configure the SPO Client. Procedure 1. Double-click the executable file in the following location: <usbdevice>:// AutoRun.exe or <usbdevice>://spoclient/startspo.exe. The Start SPO Client In dialog box appears. Configuration Secure Portable Office Client August

24 Configure Secure Portable Office Client Figure 8: Start SPO Client Note: The SPO Client launches in native mode if you access the executable file directly from the following location: <usbdevice>://spoclient/spo Client.exe. 2. If you want to work within a virtual workplace from the USB, click Virtualized Environment. Or, to run applications from the web server, click Native Environment. You can launch the SPO Client from a read-only media only in native mode. If you want to save this environment to open automatically the next time you run SPO, click Set as default. 3. Click Start. 4. If you are logging on to SPO for the first time, the Avaya SPO VPN dialog box appears. Figure 9: Avaya SPO VPN 24 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

25 Configuring SPO 5. To create a new profile for the SPO Client, enter the profile name, user name, port, and destination information. The profile name and the user name are alphanumeric fields with limits of 30 characters. Note: The Destination can be domain name or the IP address of the VPN Gateway provided by your system administrator. 6. Click Add. The Login splash screen appears. Figure 10: Login splash screen Note: The security warning messages appear if the server certificate is invalid. To hide the security warning messages, in the SPO user interface, select Preferences > Autohide warning messages. 7. Click Yes. Configuration Secure Portable Office Client August

26 Configure Secure Portable Office Client Figure 11: Login connect 8. Enter the password, and click Connect. 9. In the Login Service list, select the authentication method to connect to the server. If the default value is selected, all the authentication methods that are defined for the user are selected one after the other. 10. Click Connect. When the authentication method is successful, the banner text appears. 26 Configuration Secure Portable Office Client August 2012 Comments?

27 Dashboard Figure 12: SPO Client banner Note: The banner text can be customized by the System Administrator as per the requirements. 11. Click OK. The dashboard and system tray applications are displayed containing all the linksets you can access. Dashboard This section explains the various menu options and tabs available on the dashboard. You use the internal URL navigation bar to navigate any internal URL that the administrator did not configure in the linksets links. Configuration Secure Portable Office Client August

28 Configure Secure Portable Office Client Following menu options are available on the dashboard: File menu on page 29 View menu on page 30 Tools menu on page 31 Help menu on page 32 The following tabs are available on the dashboard: Linksets User Links Status About The following figure is an example of a dashboard with menu options. Figure 13: Example of a dashboard 28 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

29 Dashboard File menu This section explains the following functions of the File menu: Minimize Minimizes the application in the system tray and removes it from the window taskbar. Exit Logs out from the AVG server by closing all open windows that were started by the SPO application. Logout Logs out from the AVG server and closes all the open applications and windows, and goes back to initial login screen. The following figure show the File menu. Figure 14: File menu Configuration Secure Portable Office Client August

30 Configure Secure Portable Office Client View menu This section explains the following functions of the View menu. Toggle Icons Hides or shows the icons on the dashboard links. Sort Icons Sorts the icons alphabetically within the linkset. Clicking this option displays the icons in the original format. Banner Navigates to the SPO Client banner screen. Logs Navigates to the SPO Client log file. The following figure shows the View menu. Figure 15: View menu 30 Configuration Secure Portable Office Client August 2012 Comments?

31 Dashboard Tools menu This section explains the following functions of the Tools menu. Preferences This option has multiple user preferences. The preferences are stored on the local USB flash drive. For more information about preferences, see User preferences on page 33. Change Password This option displays a dialog for changing the password for the current user. This option is only available if the login service is local. Figure 16: Change password The following figure shows the Tools menu. Configuration Secure Portable Office Client August

32 Configure Secure Portable Office Client Figure 17: Tools menu Help menu This section explains the following functions of the Help menu. Content Opens the SPO Client windows help file. The Help file is also accessible by using the F1 shortcut. About Opens the About tab in the left panel. The following figure shows the Help menu. 32 Configuration Secure Portable Office Client August 2012 Comments?

33 Dashboard Figure 18: Help menu User preferences This section describes the user preferences. To access the user preferences, select Tools->Preferences. The following user preferences are available: General on page 33 Logs on page 35 Profile on page 37 Application Links on page 39 Web browser on page 42 Language on page 43 General This section describes the general user preferences. Configuration Secure Portable Office Client August

34 Configure Secure Portable Office Client You can select the following check boxes to configure the general user preferences. Save user profile Saves the user changes on the profile. For example, when you create a profile with the username test, this option saves the profile and connects to the server. On the login screen, if you change the username to testuser, then testuser is saved in the configuration file. When you connect the next time, the username appears as testuser. Suppress security warning dialog Causes the application to attempt to auto click the security warning dialogs if there are untrusted SSL certificates that cannot be verified by the host from the AVG server. Allow multiple web instance If there is one link for OWA - outlook web access, and you click the OWA link, a new web browser opens and shows the content. If you disable Allow multiple web instance, and you click the same link again while the previous opened web browser for that link is still active, the old window appears in the foreground. If you enable Allow multiple web instance, every time you click the link, a new web browser window opens for the link. Automatically connect to the server Causes the SPO Client to automatically attempt to connect to the previously connected AVG server. This simplifies the connection process for the end user. Rotate log files Causes the log file to start deleting the old entries and adding new entries after the log file has reached 500 KB in size. Note: Do not use this option if there is more than one connection profile configured on the SPO Client. Autofill RSA soft token for RSA authentication When this option is configured, if the authentication method is RSA, and you use the RSA soft token, you are prompted to enter a PIN, instead of a passcode. Reset the SPO startup environment settings Removes the user selected default settings for either Virtualized Environment or Native Environment as selected in the Set SPO Client window. Reset the SPO startup environment settings Will not appear if the default settings is not selected during startup. The following figure is an example of the General user preferences window. 34 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

35 Dashboard Figure 19: General user preferences Logs This section explains how you can change log levels. The following log levels are available: Info Warning Error Fatal For information on client log messages, see Appendix Syslog Messages in Avaya VPN Gateway Troubleshooting Guide (NN ). The following screen shows the criticality of the log files. Configuration Secure Portable Office Client August

36 Configure Secure Portable Office Client Figure 20: Logs window From the Options window you can select the View Log button, which opens the log file with the default text editor, or the Clear Log button, which clears the log file. The following figure is an example of the Options window. 36 Configuration Secure Portable Office Client August 2012 Comments?

37 Dashboard Figure 21: Options window Profile This section explains how to add and edit the profiles for the SPO Client. The following screen shows a sample profile. Configuration Secure Portable Office Client August

38 Configure Secure Portable Office Client Figure 22: Sample profile In the preceding figure, the current profile is greyed out, therefore you cannot make any changes to the profile. However, you can edit other profiles. You can also add a new profile by clicking the New option. The following figure is an example of the New window. 38 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

39 Dashboard Figure 23: New profile For more information about creating a user profile, see Configuring SPO on page 23. Application Links This section explains the Application Links option. The application links are local links that are not from the server. These are customizable links that are available only for the SPO user. You can copy any application in the USB flash drive and create a link for it. These links are shown in the Application Links tab in the Dashboard application. With the application links, you can create a link. This link can be a shortcut to the Windowsinstalled application on the local machine, or portable application available in the USB flash drive. The application links are validated after you load them in the USB flash drive. The links are shown in the application under the application links only if they are valid; otherwise, the links are not loaded in the SPO Client. In virtualized mode, you can add shortcuts to the virtualized applications. The shortcuts to the virtualized applications are visible on the SPO interface if they are running in the virtualized mode. Configuration Secure Portable Office Client August

40 Configure Secure Portable Office Client Adding a new link Use the following procedure to add a new link. Procedure 1. From the Navigation tree, select Application Links > New. The Links screen is appears. Figure 24: Application links 2. Enter the name for the link that you want to create. 3. Enter, or browse for, the destination file, and select the application for which you need to add shortcut in user linksets. 4. Select Auto Run if you want to navigate to the dashboard screen during authentication. 5. Select NetDirect, or PortForward as a prerequisite if you require to start Netdirect or PortForward. Note: NetDirect or PortForward starts if you make it a prerequisite. 40 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

41 Dashboard When you select PortForward as a prerequisite, the following dialog box appears for the PortForward configuration. Figure 25: PortForward configuration a. In the Source section, enter information in the following fields: IP Port Alias b. In the Destination section, enter information in the following fields: IP Port c. Select the TCP or UDP mode. d. Click OK. 6. Click Add to add a new link. 7. Click OK and Apply to apply the changes. Configuration Secure Portable Office Client August

42 Configure Secure Portable Office Client Web browser You can add or edit a default web browser by either copying the link, or by clicking Browse and searching for the executive file. If you are accessing the web browser in native mode, the following dialog appears: Figure 26: Default Web browser for SPO window native mode If you are accessing the web browser in virtualized mode, the following dialog appears: 42 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

43 Dashboard Figure 27: Default Web browser for SPO window virtualized mode Language Currently, the SPO Client supports the English, German, and French languages. However, you can add another language by copying a language file in the path <usbdrive>/spoclient/ Lang, and changing the caption text. The following figure shows the Language window. Configuration Secure Portable Office Client August

44 Configure Secure Portable Office Client Figure 28: Language window System tray The system tray menus are similar to the dashboard links and menus, with the exception of the ExploreDrive and eject options. ExploreDrive opens an explorer window with the USB flash drive with the browse option. The eject option ejects the USB flash drive from the windows after performing logout, and closing all open windows and the SPO Client application. Note: Even though many links are available in the linksets, only the first 16 links are shown in the system tray menu. 44 Configuration Secure Portable Office Client August 2012 Comments?

45 Enabling auto-start application for U3P Enabling auto-start application for U3P Use the following procedure to enable the auto-start SPO application when the U3 USB device is plugged into your computer. Procedure 1. Select U3 Launchpad. 2. Click Settings at the right hand side of the launchpad. 3. Select Program Settings. 4. Select the U3 SPO Client. 5. Select the Start on Insertion check box to enable the SPO auto-start application when U3 USB is plugged into the computer. When you unplug the U3 USB and plug it into the computer again, the SPO application automatically starts. Removing Secure Portable Office from U3 USB Use the following procedure to remove the SPO application from the U3 USB device. 1. Select U3 Launchpad. 2. Click Settings at the right hand side of the launchpad. 3. Select Program Settings. 4. Click Remove Program to remove the SPO Client from the U3 USB device. Figure 29: Remove program 5. Click Yes to remove the SPO application. 6. After the application is removed, click Close to exit the window. Configuration Secure Portable Office Client August

46 Configure Secure Portable Office Client 46 Configuration Secure Portable Office Client August 2012 Comments?

47 Chapter 6: Ceedo licensing The Avaya VPN Gateway (AVG) Secure Portable Office (SPO) Application requires a Ceedo license. This chapter provides general information about the Ceedo license, and explains how to import and activate the Ceedo license. The AVG SPO Application Virtualization mode includes a 45-day Ceedo temporary license. The license is activated only after the first use of the SPO Application Virtualization mode. Note: To activate AVG SPO Application Virtualization mode, you must have an AVG SPO license and a Ceedo license. If you use the Native SPO mode, you require only an AVG SPO license. SPO application virtualization license You can get the SPO application virtualization license in the following ways: Request that your administrator contact Ceedo to acquire a pool of activation code, and to provide you with the activation code. Contact Ceedo directly to acquire the license. Ceedo license basic SPO application virtualization The Ceedo license mechanism binds the Ceedo license to the hardware identifiers of the USB drive on which Ceedo is installed. If the Ceedo is installed on a USB drive, the hardware identifiers are the Vendor ID, Product ID, and serial number of the drive. Each Ceedo license is unique to the drive for which it is issued. Starting from Ceedo version 3.0, Ceedo introduces automatic activation mechanism. You can purchase a Ceedo license either from within Ceedo software or without the hardware identifiers are not transmitted to Ceedo servers. After making a complete payment for the purchased license, you automatically receive an activation code. With the activation code, you can activate your Ceedo installation immediately. Configuration Secure Portable Office Client August

48 Ceedo licensing Activating Ceedo enterprise from within the Ceedo environment Use the following procedure to activate Ceedo from within the Ceedo environment. Procedure 1. To initiate the license purchase process, click Get a License. The Get a License button is available in both the Ceedo easy-access menu and the License section of the Ceedo Options panel, as shown in the following figures. 48 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

49 Activating Ceedo enterprise from within the Ceedo environment Figure 30: Get a License easy-access menu Figure 31: Get a License Options panel Configuration Secure Portable Office Client August

50 Ceedo licensing 2. After receiving the activation code, open Ceedo Option > License. 3. Click Activate. The License Activation dialog box appears, as shown in the following figure. Figure 32: License Activation 4. In the Activation Code field, enter the activation code you received. The system sends the hardware information on the drive to the server where the license for the drive is generated, and automatically imported into Ceedo. You can use the activation code for any number of times on the drive for which the license was purchased. Even if you format the drive, the license code still activates Ceedo as long as it is installed on the drive for which the license was purchased. You can use the license to activate multiple images installed on the same drive simultaneously. Importing the Ceedo license A Ceedo trial version license reminder appears if you are logging on SPO for the first time. You can import the Ceedo license from the Invalid License dialog. Use the following procedure to import the Ceedo license. 1. Click Import License. 50 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com

51 Importing the Ceedo license The Import License dialog box appears. Figure 33: Import License 2. Select Import license file. 3. In the License File field, enter the location of the Ceedo license file, or click Browse to locate the file. Configuration Secure Portable Office Client August

52 Ceedo licensing Figure 34: Locating the file 4. Click Open. The Import License dialog box appears. 5. Click Import License. The license is imported. 52 Configuration Secure Portable Office Client August 2012 Comments?

53 Chapter 7: Authenticating Secure Portable Office Client The Secure Portable Office (SPO) Client requires authentication with the AVG server. This chapter explains the various authentication options available with the SPO Client. Authentication with Avaya VPN Gateway server Use the following procedure to authenticate the Secure Portable Office (SPO) with the Avaya VPN Gateway server. Procedure 1. Insert the USB flash drive into the drive. 2. If the authentication method is not with the Client Certificate, the Splash screen appears. 3. In the Username field, enter the username. The username is the profile username that you receive during the creation of the profile. This is an alphanumeric field that contains no more than 30 characters. 4. In the Password field, enter the password. The password is provided by your system administrator. 5. Click Login. After the SSL link is established between the SPO Client and the AVG, your login credentials, username and password, are sent for authentication. Authentication methods The SPO Client can authenticate with all the methods supported by the AVG. The authentication system supports the following methods: Username and password to the local AVG directory Username and password to LDAP, and RADIUS Dual authentication Configuration Secure Portable Office Client August

54 Authenticating Secure Portable Office Client Secure ID Client Certificate authentication Password change support For more information about authentication methods, see chapter Authentication Methods in Avaya VPN Gateway BBI Application Guide (NN ). After the authentication is complete, the SPO must be authorized. The SPO Client also supports the authorization mechanisms provided by the AVG. The linksets displayed on the SPO Client are based on how authorization is configured on the AVG and back end directories. For more information, see chapter Groups, Access, and Profiles in Avaya VPN Gateway BBI Application Guide (NN ). The SPO solution provides the following authorizations: Network control over the applications that you can access based on the end-user identity. Display restrictions on applications that appear in the system tray and launch pad on the Windows client, based upon the current access privileges for the user. Client filter based on SPO. The administrator can configure extended profiles based on client filter access method as SPO. Software upgrade and package You can upgrade the existing SPO software version to the new software version. The following steps describe the process involved in this upgrade. 1. After the SPO software client authenticates with the AVG server, the AVG server sends an XML configuration file to the SPO Client. The XML file contains the current software version and the MD5 checksum available in the AVG server. 2. The SPO software client validates with the existing software version, and initiates the software upgrade. Note: The upgrade takes place if there is a mismatch in the software version. 3. After the upgrade is complete, the current running client restarts using the new code. Note: After the upgrade, you must log in to the client again. 54 Configuration Secure Portable Office Client August 2012 Comments? infodev@avaya.com