User Manual

Chapter 9

Configuring PC-Duo

---

The behavior of both Clients and Controls in PC-Duo is determined by profiles. These give administrators a high degree of control over the actions that users can take, and the security measures employed on both Clients and Controls. Furthermore, because the system can support multiple profiles, they also give administrators the flexibility to define individual and group profiles, and so place restrictions only where they are needed. This first section in this chapter describes how to create and work with profiles for Clients; the following section describes how to create and apply profiles for Controls.

Client profiles always take precedence over Control profiles. This enables PC-Duo to support users who handle sensitive information, without compromising their ability to maintain data security.

Configuring Clients

PC-Duo Clients use a configuration file, called CLIENT32.INI, to store their settings. Use the PC-Duo Client Configurator application to specify the Client settings.

Using the Configurator, you can specify the following Security features:

Use NT Security

Windows NT4, 2000, XP and 2003 Clients can be configured to ensure that Control users that want to connect to the Clients are valid users.

Security Keys

Given a compatible network transport, and the correct user name and password, a Control user may be able to access Clients on your network. However, a Security Key prevents any unauthorized Control from connecting to Clients. In its simplest form, the Client allows connections only from Controls that have a matching license serial number. Arbitrary Security Keys can also be applied.

Audit Trailing

All Clients can use the Client log file to record operations performed on them by Controls. On Windows NT, 2000, XP and 2003, Clients can also record Control operations in the Application Event Log.

User Acknowledgement

The User Acknowledgement option enables Clients to approve attempted connections by Controls. This enables Client users to refuse connections when they are busy or working on sensitive data. Normally, this option also prevents Control users from accessing Client PCs when no user is present. However, it can be disabled when a Windows NT4, 2000, XP or 2003 Client is logged off.

Customizable Restrictions

You can customize Client Profiles to implement a wide variety of restrictions on the actions that Control users are allowed to perform. These include Disable Watch, Share, or Control of the Client, Blank Client Screen, Disable file transfer (while still allowing connecting and viewing), Restrict Drive / Directory / File Access, Keep connection indicator on top (ensures the connected indicator does not become obscured on the Client desktop) and Force Compression and Encryption to ensure connection security.

When you start the Client Configurator, you are prompted to use either the Basic Configurator or the Advanced Configurator:

The Basic Configurator

enables you to specify the Client's Connectivity, Security and Audio settings. Use this method if you are new to PC-Duo, or if you want to specify only the network transports or basic security settings for a Client.

The Advanced Configurator

Provides full access to the Client configuration. Use the Advanced Configurator to create multiple Client Profiles, to set up access restrictions, or to configure advanced security options. You can also use the Advanced Configurator to specify the individual Client Parameters for a PC.

Starting the Client Configurator

If you have just installed the PC-Duo Control application, you can start the Client Configurator at the end of the Installation Process (see "Completing the Installation"). Alternatively, you can start the Configurator at any time from the Start menu.

To Start the Client Configurator:

1. In the Windows Start menu, choose Programs, PC-Duo, Tools, Client Configurator. The Client Configurator Welcome dialog is displayed.
2. Read the information in the dialog and click the Basic button or the Advanced button.

   Do not use the Basic Configurator when the Client is using multiple Client Profiles. A warning message is displayed if you start the Basic Configurator when the Client has multiple Profiles.

Using the Basic Configurator

The Basic Configurator allows you to view and amend the basic configuration settings for the Client. The information in the Basic Configurator dialog is contained in three folders:

Connectivity

Specifies the network transports on which Clients can communicate with Controls. When you specify the network transports, click the Test buttons to check the information is correct.

Security

Specifies passwords and other security options for the Clients using this configuration.

Audio

enables you to configure microphone and speaker volume levels for use in Audio Chats.

To Configure Clients using the Basic Configurator:

1. Choose Client Configurator in the PC-Duo Program Folder.
2. In the PC-Duo Client Configurator dialog, click the Basic button to open the Basic Configurator dialog.
3. Specify the options and settings in the Connectivity, Security and Audio pages of the dialog.
4. When you have finished, click the OK button to save your settings and close the dialog.

   A message dialog is displayed asking if you want to restart the Client application on the PC. Click the Yes button to restart the application and apply the changes immediately. Click the No button to continue with the current settings.

Using the Advanced Configurator

The Advanced Configurator allows you to create multiple Client Profiles, set up Client access restrictions and configure advanced security options for Clients. Use the Toolbar of the Advanced Configurator window to create new configuration files, to open existing configuration files, and to save the current configuration file.

Clients can be set up with pointers to more than one configuration file. For example, they can reference a configuration file stored on a server by default, and access a local configuration file when the remote file is unavailable. This enables multiple Clients to share the same configuration file.

To specify which configuration files are referenced by Client PCs, use the Advanced Configurator to edit the Client Parameters. For more information, see "Selecting Configuration Files".

CLIENT32.INI configuration files are usually stored in the directory in which PC-Duo was installed.

Working with Client Profiles:

• A configuration file consists of one or more sections known as Profiles. Each Profile contains configuration information for the Clients that use the configuration file.
• The Master Profile at the top of the list cannot be moved, as it contains the general settings for the Client. (The Master Profile contains more settings than other Profiles.)
• Other Profiles can be created, which contain different settings for specified Control users. By default, most editable settings are inherited from the Master Profile (for example, inherited check box settings are shown as a check with a gray background) so you need update only the settings you want to change.
• The Advanced Configurator window lists Client Profiles in priority order, with Profiles at the top having the highest priority. When a Control tries to connect to the Client, the Client starts from the top of the list and tests each Profile until it finds a Profile that permits access to that Control, or until it reaches the end of the list. (If the Client does not find a suitable Profile, the connection is denied.)
• To change the order of Client Profiles in the Advanced Configurator window, select a Profile and click the Move Up or Move Down button in the Toolbar.

Viewing and Editing Client Profiles

Use the Advanced Configurator to view and edit the individual Profiles that make up a configuration file.

For more information on Client settings and the folders and pages in the Client Configurator, see Appendix A, "Client Configuration Settings".

To View or Edit a Client Profile:

1. In the Advanced Configurator window, select the Client Profile you want to work with, then click the Edit button in the Toolbar.

   The Profile dialog is displayed. Its title contains the path of the current CLIENT32.INI file, and the name of the Profile you are currently viewing. The dialog enables you to view and edit the various settings for this Client Profile.

2. Select the User Validation page in the User Validation folder.

3. If you want all Control users to be able to access Clients that use this profile, enter an asterisk ( * ) in the Usernames field.

   If you want to use Windows NT Security to control Client access, enter an asterisk ( * ) in the Usernames field, and select the Authenticate User and Password with NT check box. Any Control users attempting to connect to Clients using this profile must enter a valid NT username and password.

   Alternatively, to enter the names of NT groups, use the Restrict Access to Members of the following Groups field. Click the Browse button to select the groups.

   If you want to restrict the Profile to specific Control users, click the Change button to open the Valid Usernames dialog, and enter the names of users who can access Clients that use this Profile.

4. Use the other pages in the Profile dialog to control the features available when the specified Controls connect to the Client.
5. When you have finished editing the Profile, click the OK button to return to the Advanced Configurator window.

The Copy button in the Toolbar enables you to create a copy of the currently selected Client Profile.

You can use the Rename button in the Toolbar to rename the currently selected Client Profile.

Configuring Clients for ActiveX Connections

In addition to communicating with Clients from the PC-Duo Control, you can connect to them and control them through a Web page using ActiveX. You can connect to any PC running the PC-Duo Client application using Internet Explorer 4.0 or later. You do not need to install the PC-Duo Control application to connect to a Client using this method.

To enable Web Extensions on a Client:

1. Choose the Client Configurator command from the PC-Duo Program folder, then click the Advanced button to open the Client Configurator dialog.
2. Double-click the Master Profile to open the settings dialog.
3. Click the Web Extensions page in the Connectivity folder and select the Enable Web Extensions check box.
4. By default, the ActiveX connection uses Server Port 80. If you are already using port 80 to run a personal Web server or IIS, type the next available port number in the Server Port field.
5. Click the OK button to close the dialog.
6. Save the Master Profile and close the Client Configurator window.
7. Restart all the Clients that you want to access using ActiveX.

For information on how to connect to a Client using ActiveX, see "Connecting to Clients using ActiveX".

Linking Clients to Problem Reporting Systems

In the standard PC-Duo installation, user requests for help are sent to the first Control to connect to the Client PC. However, if your organization also has a Web-based problem reporting system, such as PC-Duo Enterprise HelpDesk, you can configure Clients to connect to this directly when users choose the Request Help option from the Client's Command menu. This enables support departments to create a single, consistent method for reporting and tracking problems and helps maintain a standard database of user problems.

To configure a Client profile to link to a Help Desk system:

1. Open the Client Configurator, select Advanced and double-click the Master profile to open the settings dialog.
2. Click the Help Requests page in the Client Interface folder.
3. Select the Use URL (Uniform Resource Locator) check box and enter the address of your problem reporting system in the adjacent field. For example, to create a link to PC-Duo Enterprise HelpDesk, enter:

    http://server/helpdesk/logon.asp?View=HelpDesk%2FReport%20Issue

Configuring Clients for Gateway Connections

Gateways enable Controls to access multiple Clients across the Internet. Each Gateway provides a single IP address through which Controls connect to Clients on an internal network, and a configurable port to listen for Client-Control communications. If you want to enable Controls to communicate with your Clients across a Gateway, the Client profile must specify the port that the Gateway is using, and a Gateway Key to identify which Controls are allowed to access the Clients.

To configure a Client profile for a Gateway connection:

1. Open the Client Configurator, and double-click the Master profile to open the settings dialog.
2. Click the HTTP page in the Connectivity folder and select the Use HTTP check box.
3. By default, PC-Duo uses port 3085 for communications between Controls and Clients. If you want to use a different port to transmit and receive data, enter the new port number in the Gateway Port field.
4. In the Gateway Address field, enter the domain name or IP address of the Gateway you want to use.
5. Click the Set button to display the Security dialog. Enter the key. The key must be from 8 to 15 characters long and can contain any alphanumeric characters. Click the OK button to validate the key and save it.

   Gateway Keys control access to Clients. Any Control attempting to access a Client through a Gateway must be configured with a Gateway Key that matches the Gateway Key of the Client and one of the Keys defined for the Gateway itself.

6. Click the OK button to close the dialog.
7. Save the Master Profile and close the Client Configurator window.

   You can specify different Gateway Keys for different Clients by using separate CLIENT32.INI files. This enables you to create different Internet-Client groups and to assign different Controls to them.

Adding New Client Profiles

To Add a New Profile:

1. Open the Client Configurator from the Windows Start menu, then click the Advanced button to open the Client Configurator window.
2. In the Client Configurator window, select the entry in the profiles list below which you want to add the new Profile.
3. Click the Add button in the Toolbar.
4. In the Add New Profile or Include File dialog, ensure the Profile Name option is selected, then enter a name for the Client Profile in the text field.

5. Click the OK button to close the dialog and add the Profile to the Client Configurator window. Double-click the Profile to edit its settings.

   You can also add a new Client Profile by selecting an existing Profile and choosing the Profiles, Add menu command.

Deleting Client Profiles

To Delete a Client Profile:

1. Select the Client Profile you want to delete from the Client Configurator window.
2. Click the Delete button in the Toolbar.
3. In the confirmation dialog, click the Yes button to delete the Client Profile.

   You can also delete a Client Profile by selecting the Profile and choosing the Profiles, Delete menu command.

Selecting Configuration Files

By default, a separate CLIENT32.INI configuration file is stored on each PC when you install the Client kit. However, to reduce the maintenance overhead, you can use central configuration files to ensure that Clients use the same configuration parameters.

To create a centrally stored configuration file:

1. Create a share that can be accessed by all Clients that will use the central configuration file.
2. Save the configuration file (CLIENT32.INI) to the share.

To configure Clients to use a central configuration file:

1. Open the Client Configurator from the Windows Start menu, and click Advanced.
2. In the Client Configurator window, choose Client Parameters in the Profiles menu to open the Client Parameters for this Machine dialog.
3. If the central file is located on a PC running Windows NT4, 2000, XP or 2003:
   1. Click Add to open the Add/Edit Client Parameter dialog.
   2. Select the User Credentials option, then enter the Username and Password details of the user account which this PC can use to access the central configuration file.
   3. Click the OK button to save your changes and close the dialog. The user details are displayed in the Client Parameters for this Machine dialog.

You do not need to supply user credentials when the configuration file is located on a PC running Windows 95, 98 or Me.

4. Click Add to open the Add/Edit Client Parameter dialog again.
5. Select the Configuration File option and enter the location and name of the configuration file, or click Browse to search for the file.
6. Click OK to save your changes and close the dialog. The location details are displayed in the Client Parameters for this Machine dialog.

7. Click the OK button to save your changes and close the dialog.

You can specify more than one configuration file parameter. This enables a networked Client to use a shared CLIENT32.INI file by default, and to use a local file if the server is not available when it starts.

Because the Client must open a session on the server before it can locate the configuration file, the user credentials parameter must always precede the associated location parameter if it is required. To reorder the list, select a parameter and click Move Up or Move Down.

Disconnecting Controls from Clients

If Clients need the ability to disconnect from connected Controls, you can remap the Client's Request Help hot key combination to disconnect it without warning. This removes the need to use the Client's Commands Disconnect menu command, which can be prevented by Control users.

This procedure removes the Client's ability to use a hot key combination (ALT+LSHIFT+RSHIFT, by default) to request help from a Control.

To enable the Hot Key disconnect:

1. Open the CLIENT32.INI file and locate the [Client] section of the configuration file.
2. Add the following line to the [Client] section:

    DisconnectHotkey=1

3. To reset the configuration file's checksum, open the Client Configurator in Advanced Mode, then open and save the file.
4. Restart the Client32 Service to apply the change using the Restart Client shortcut, or RESTART.BAT.

To Exit the Advanced Configurator:

1. Choose the File, Exit menu command, or click the close button in the top right corner of the Advanced Configurator window.
2. If a message dialog is displayed, asking if you want to save the changes to the Configuration file, click the appropriate button.
3. If you have made any changes, a warning message is displayed. Select the Restart option to apply your changes.

Configuring Clients to Record Control Sessions

An important part of PC-Duo Remote Control security is the ability to monitor Control sessions. PC-Duo Clients can be configured to automatically record all the actions performed during a Control session. The recording can then be played by authorized users as part of a regular auditing process.

For information on configuring Control PCs to record Control sessions, see "Configuring Controls to Record Control Sessions".

To Configure a Client to Record Control Sessions:

1. In the Windows Start menu, choose Programs, PC-Duo, Tools, Client Configurator.
2. In the PC-Duo Client Configurator dialog, click the Advanced button.
3. In the Client Configurator window, choose the File, Open menu command, and select the CLIENT32.INI file.
4. Select Master Profile in the list, then click the Edit button in the Toolbar.
5. In the Master Profile dialog, select the Replay Files page in the Security folder.

6. Select the Record Replay Files check box, and use the In Directory text box to specify where the files are saved. Alternatively, click the Browse button to select the directory.
7. If you want to restrict access to the recordings, click the Set button to enter a user name and password for the recordings directory.

   For example, you can use this option to store recorded Control sessions in a secure area on a server.

8. Click the OK button to return to the Configurator window. Click the Save button in the Configurator Toolbar, then exit the Configurator application.

   If the CLIENT32.INI file is used by more than one Client, click the Set button and use the Add/Edit User dialog to specify the Clients for which you want to record Control sessions.

9. Restart the Clients to enable Control recording. Control sessions recordings are stored in the specified directory with an extension of .RPF.

   For information on replaying recordings, see "Record and Replay".

Managing Client Configurations using Active Directory

Active Directory is a directory service that enables organizations to share and manage information about their network resources from a central point. In PC-Duo 8.5 and later, the Client application can provide support for the Active Directory management of Client configuration settings using an Administrative Template supplied as part of the PC-Duo installation kit. This makes the Client settings available through the Active Directory Console.

Settings configured in the Active Directory Console are stored in the registry of the selected Clients. When the Client starts, it checks its registry for settings defined through the Active Directory Console, and these take priority over the settings defined in the Client's configuration file.

This section describes how to integrate PC-Duo with your Active Directory system and how to update your Client Configuration settings from the Active Directory Console.

Integrating PC-Duo with Active Directory

Before you can manage Client settings through Active Directory, you must customize your Active Directory Server to use the Administrative Template included in the PC-Duo Control installation. This defines the Client configuration settings that users are allowed to change in the Active Directory Console and specifies how the settings modify the Client PC's registry.

To Integrate PC-Duo with Active Directory:

1. In the Windows Control Panel, Administrative Tools, double-click Active Directory Users and Computers. The Users and Computers View is displayed.
2. Group policies can be applied to domains or to the organizational units, such as groups, users and computers. Right-click the organizational unit or the domain you want to configure and choose Properties from the shortcut menu. The Properties dialog is opened.
3. In the Properties dialog, select the Group Policy tab and double-click the policy to which you want to apply the PC-Duo Administrative Template. The Groups Policy window is displayed.
4. Expand the Computer Configuration folder in the tree, right-click Administrative Templates and select Add/Remove Templates. The Add/Remove Templates dialog is displayed.

   A PC-Duo Administrative Template can only be applied to Computer Configurations.

5. In the Add/Remove Templates dialog, click the Add button. The Policy Templates dialog is displayed.
6. In the Policy Templates dialog, select PCDPOLICY.ADM in the PC-Duo Control's installation directory and click the Open button. The PC-Duo Administrative Template is displayed in the Add/ Remove Templates dialog.
7. Close the Add/Remove Templates dialog. The template is added to the policy you selected in the Group Policy window.

Repeat steps 3 through 7 for each policy in which you want to configure PC-Duo Clients.

Configuring Clients using Active Directory

When you first install the PC-Duo Administrative Template, all the settings are undefined. This ensures that the Clients will continue to use the settings specified in their CLIENT32.INI files until they are overridden from the Active Directory Console.

To configure Clients from the Active Directory Console:

1. Open the Active Directory Console and select the Group Policy that contains the Clients you want to configure.

2. In the Computer Configuration, Administrative Templates, PC-Duo Client Settings folder, select the folder that contains the settings you want to configure.

   For example, to prevent Control users from rebooting the Clients in a group policy, select Security, Access Privileges and double-click the Disable Reboot policy. In the Disable Reboot Properties dialog, select Disabled and click the OK button.

3. When you have finished, close the Active Directory Console.

Using Control Profiles

Control Profiles are named configurations used by the Control application. They store security settings as well as additional settings, such as the network transports required to access Clients. They also enable a Control user with PC-Duo administrator rights to set up profiles for other Control users. These profiles contain permissions that determine the level of access which Control users can have to Client PCs.

The Control profiles are stored as registry entries under Windows. Normally, they can be amended only by a PC-Duo Administrator with the required access levels. Under Windows NT, 2000, XP and 2003, Administrator privilege is required to amend the User Profiles.

Control users are able to access only the PC-Duo functions permitted by their profile; users without Administrator rights cannot change their profile. As a result, you can create secure, password-protected Control Profiles which determine the levels of access Control users can have to Client PCs. For example, one Control user may be profiled to have Connect and Watch functionality only, whereas another Control user may have full functionality.

Client profiles always take precedence over Control profiles. This enables PC-Duo to support users who handle sensitive information without compromising their ability to maintain confidentiality.

To Select a Control Profile:

1. Disconnect the Control from all Clients.
2. In the Control window, choose the Tools, Configurations menu command. The Configurations dialog is displayed. It lists the available Control Profiles. (Your current Profile is displayed above the list.)
   

You cannot change your Control Profile if you are not an Administrator, or your User Permissions do not allow you to change your Control settings.

3. Select the Profile you want to use, and click the Select button.
4. In the message dialog, read the information, then click the Yes button to use this Profile. You may also be required to enter a password to use this Profile.
5. To return to the Control window, click the Close button.

   For more information on Control Profile settings, see Appendix B, "Control Configuration Settings".

Amending Control Profile Settings

You can amend the settings for a Profile using the Settings for Configuration dialog.

To Amend a Control Profile's Settings:

1. In the Configurations dialog, select the Profile you want to work with, and click the Settings button.
2. In the Settings for Configuration dialog, amend the options.

3. Click the OK button to save your changes and return to the Configurations dialog.

   You can also display the current Profile settings directly from the Control window by clicking the Settings button in the Control window Toolbar.

Connectivity And Startup Settings

A separate dialog is used to display the Control's Connectivity and Startup settings. Like other Control configuration information, this information is specific to each Profile. Use it to specify the network transports with which the Control can access Clients. You can also use it to configure the Control to automatically perform the following actions when it is started:

• Connect to a specified Client.
• Connect to a specified Group.
• Perform a Browse operation.
• Dial a Remote Network.
• Begin viewing the specified Client or Group.

To specify Connectivity and Startup Settings:

1. In the Configurations dialog, select the Profile you want to work with, and click the Connectivity and Startup Settings button.

2. In the Settings for Configuration dialog, amend the options.
3. Click the OK button to save your changes and return to the Configurations dialog.

   The Control initializes more quickly if its profile is configured to use only those transports that are used by Clients.
   
   To display the current Profile's Connectivity and Startup options, choose the Network, Configure menu command in the Control window.

Resetting Control Profiles

You can return a Profile's settings to their original, default values.

To Reset a Profile:

1. In the Configurations dialog, select the Profile you want to work with.
2. Click the Reset button. A warning message is displayed.
3. Click the Yes button to reset the Profile settings to their original values.

Creating Control Profiles

PC-Duo enables you to create your own custom Profiles.

To Create a New Control Profile:

1. Display the Configurations dialog, then click the New button on the right of the dialog.
2. In the Create New Configuration dialog, enter a name for this New Profile in the Name box, then use the Copy From list to select the Profile on which you want to base the new Profile.

3. Click the OK button to create the Profile. The Profile is displayed in the Configurations dialog.

Configuring Controls to Record Control Sessions

As an aid to security and auditing, you can record the actions taken by Controls when they Share or Control a Client.

For information on configuring Clients to record Control sessions, see "Configuring Clients to Record Control Sessions".

To Modify a Control Profile to Record Control Sessions:

1. In the Control Window, choose the Tools, Configurations menu command to open the Configurations dialog.
2. In the Configurations dialog, select the profile you want to edit and click the Settings button.
3. In the Settings for Configuration dialog, select the Replay Files page in the Security folder.
4. Select the Record Replay Files check box, and enter the location of the Control session recording.
5. To automatically add the Client name to the file name of each recording, click the Prefix Files with Client Name option. For example, you can use this option when you want to save all Client recordings to a central location, such as a file server.

6. To restrict access to the recordings, click the Set button to enter a user name and password for the recordings directory.
7. Click the OK button to save your changes.
8. In the Configurations dialog, click the Select button to apply the updated profile to the current Client, then click the Close button to close the dialog.

   For information on replaying recordings, see "Record and Replay".

Creating Shortcut Icons for Profiles

Once you have created a Profile, you can use PC-Duo to create a shortcut icon that can be used to start the Control application using this Profile.

To Create a Shortcut Icon for a Control Profile:

1. In the Configurations dialog, click the Icons button.
2. In the Icon Maintenance dialog, position the mouse pointer over a blank part of the Icon Maintenance dialog, left-click and hold the mouse button, then drag the mouse pointer to where you want the shortcut icon to appear:
   • If you want the icon to appear on the Windows desktop, drag the mouse pointer to an empty part of the desktop and release the mouse button.
   • If you want to add the icon to the Start menu, drag the mouse pointer over the Start button to display the Start menu, then navigate to the submenu and release the button.

3. The Create or Edit Icon dialog is displayed. Use this dialog to specify a Title for the icon, then select the Profile you want to use when starting the Control application from this icon.

4. If you want to prevent the user from accessing other Profiles, select the Prevent user from switching to another configuration check box.
5. Click the OK button to close the Create or Edit Icon dialog, then click the Close button in the Icon Maintenance dialog.

Deleting Control Profiles

To Delete a Control Profile:

1. Choose the Tools, Configuration menu command in the Control application to open the Configurations dialog.
2. Select the Profile you want to delete from the Configurations dialog.
3. Click the Delete button. A message dialog is displayed, asking you to confirm this action. Click the Yes button to delete the Profile.

   You cannot delete a Profile that is currently in use. If you want to delete that Profile, you must first select another Profile.

Security for Dial-Up Links

Dial-up support is provided by the PC-Duo Bridge programs. These enable access to Client PCs on which the Bridge utility is running, or to any PC on a network which has a Client loaded and Bridge utility running.

Because the PC-Duo Bridge claims the serial port, it is very secure. It has been tested with products that use the serial port as a back door to gain access to a PC, and has proven to effectively lock these out. The Bridge utility can be configured to support the following security functions:

Access Password

Requires the user at the Control PC to enter a password before access is permitted. The password is encrypted at the Client end. This feature is in addition to any Client password restrictions already in effect.

Dial-Back

This function causes the Dialin Bridge to dial-back the Control PC according to the password entered by the Control when attempting to connect. You can associate different telephone numbers to different passwords, enabling you to set multiple dial-back numbers.

Configuring Gateways

Gateways enable Controls to access multiple Clients on a private network through a single IP address. Use the Gateway Configuration Utility to define the settings of a Gateway, and to specify the Gateway Keys that can be used to access Clients through the Gateway PC.

To configure a Gateway:

1. Right-click the Gateway icon in the Windows system tray and choose Configure Gateway from the shortcut menu.

   Alternatively, if the Gateway is not running, click the Start button in the Windows Taskbar and choose PC-Duo, Tools, Gateway Configurator.

   The Gateway Configuration Utility dialog is displayed.

2. By default, PC-Duo Gateways use port 3085 to communicate with Controls and Clients. If you want to use a different port to transmit and receive data, enter the new port number in the Gateway Port field.

   If you change the port number of a Gateway, you must also specify the same port setting for all Controls and Clients using the Gateway. You must also allow access to the specified port in any firewalls protecting the Gateway.

3. When a Control is connected to a Client through a Gateway, the Client automatically sends a network packet to the Gateway at a specified interval to maintain the connection. To change the frequency at which Clients send a keep-alive packet to the Gateway, enter a new value in the CMPI field.
4. Each Gateway automatically records details of the Control sessions performed through it. If you want to change the directory in which the Gateway log file is stored, enter the directory path in the Location field.
5. If you want to specify a size limit for the Gateway log file, enter the limit in the Maximum file size field.
6. To define a key that can be used to access Clients through the Gateway:
   1. Click the Add button. The Gateway Configurator dialog is displayed. Enter a Description for how the key is used, and click the Set button.

      

   2. In the Gateway Key dialog, enter the key for this Gateway. The key must be from 8 to 15 characters long and can contain any alphanumeric characters. Click the OK button to validate the key and save it.

      Gateway Keys control access to Clients. To access a Client through a Gateway, the Control's Gateway Key must match the Gateway Key specified for the Client and one of the Keys defined for the Gateway.

   3. The key is displayed in the Gateway Configurator dialog. Click the OK button to add the key to the Gateway.

7. Click the OK button to apply your changes and close the Gateway Configuration Utility dialog.

   For more information on using Gateways, see "Gateways".

Vector Networks http://www.vector-networks.com Voice: +44 (0) 1827 67333 Fax: +44 (0) 1827 67068 info@vector-networks.co.uk