TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

Description of the user defaults

The users of TightGate-Pro can be extended or restricted in their functionality. Various options are available for this purpose, which can be assigned to the individual user accounts depending on the user administration. The following table only lists the options and describes their functionality:

Menu item	Description
Name	Change the user name for the selected identifier. The identifier itself cannot be changed.
Profile	Selection between the standard user template and a customised user template. Note: The menu item only appears if a customised user profile is available.
Menu options	Settings for the available options of the menu bar for existing users. Note: The menu options for newly created users via user certificate or Active Directory are set according to the user specifications by the administrator config . It should be noted that the display in the menu bar for optionally installable packages must be specified for user administration via Active Directory via the respective membership in the AD security group.
User Language	Selection of the user language. Only languages that already exist in the system can be selected. New languages are provided by the administrator update .
File transfer	Authorisation to use the file lock. The transfer can be restricted to certain file types for upload and download.
Auto-Download	Authorisation to use the automated file lock. Note: If the add-on product OPSWAT is used for the file lock, the automatic lock function is disabled.
Filtered Web	If Yes is selected, Internet traffic is always routed through the Web content filter. If No is selected, the content filter is bypassed at TightGate-Pro. Note: The content filter defaults are set by the administrator config .
Proxy Filter Group	Assign users to proxy filter groups. This menu item only appears if the selection in the menu item Filtered Web is set to Yes. Note: The administrator is responsible for defining the proxy filter groups config .
Auto clipboard	Authorisation to use the clipboard. The clipboard can be used to transfer text in Unicode format. Images and formatting cannot be transferred via the clipboard. Note: If the use of the clipboard is switched off system-wide by config , this option has no effect.
Privileged	Select whether the user ID should have privileged access to TightGate-Pro. Note: TightGate-Pro distinguishes between two limits up to which user logins are permitted. These are defined in the licence. The first limit designates the number of regular users, the second limit designates the number of additional (privileged) users. Once the number of regular users is reached, only privileged users are allowed. After reaching the second limit, any further connection attempt is rejected with an error message. Privileged identifiers additionally receive a larger share of working and mass memory as well as CPU time on TightGate-Pro.
Inactive session receive	Selection of whether the identifier is excluded from the Forced disconnection on inactivity. Disconnection on reaching the Maximum Session Duration is not removed.
Save bandwidth	This value is set to No by default. This means that the compression of the image data is done in JPEG standard. With the default setting, the user gets a very good image quality, but this requires sufficient bandwidth. By setting the setting to Yes, a different compression method is used, which requires slightly more CPU resources at TightGate-Pro and reduces the image quality somewhat, but saves about 2/3 of the bandwidth. This setting should be used if the connection from TightGate-Viewer is not working due to insufficient bandwidth (e.g. branch offices, home office, etc.).
Audio	Authorisation for audio transmission from TightGate-Pro to the client. With the setting Yes the sound is transmitted via the VNC protocol, with the setting "Separate" the sound is transmitted as a separate audio track to the workstation. Attention: If Separate is selected as the connection method, a network connection from TightGate-Pro to the workstation via port 4713 (protocol TCP) must be enabled!
Print	Defines whether a user may use the print method to the local workplace printer.
Max. File size to 4GB	Specify whether the maximum file size should be limited to 4 GB. The m-privacy GmbH recommends not limiting the file size.