TightGate-Pro

Dediziertes Remote-Controlled Browser System
zum Schutz vor Gefahren aus dem Internet

Automatisch generierter Auszug aus dem Administrationshandbuch

Datum: 11.04.2019

Herausgeber:

m-privacy GmbH

Technische Redaktion

Werner-Voß-Damm 62

12101 Berlin

Fon: +49 30 243423-34

support@m-privacy.de

www.help.m-privacy.de

Allgemeine Hinweise zu diesem Handbuch

Alle Materialien und Ausführungen wurden mit Sorgfalt erarbeitet und zusammengestellt. Den­noch sind Fehler nicht auszuschließen. Die m-privacy GmbH übernimmt keine Haftung für Schäden, die aus Unrichtigkeit einzelner Angaben entstehen.

Im Sinne einer raschen Orientierung und zur Vermeidung von Sicherheitsrisiken werden besonders wichtige Aspekte durch wiederkehrende Stichworte gekennzeichnet. Diese sind:

Hinweis
Unter diesem Stichwort werden nützliche Details zur rationellen Verwendung von TightGate-Pro er­läutert.

Achtung
Unter diesem Stichwort erfolgen Hinweise zur Problemvermeidung bzw. zur Vorbeugung von Betriebs­störungen bei TightGate-Pro.

Warnung
Unter diesem Stichwort erfolgen Hinweise auf mögliche Fehler bei der Konfiguration und Verwendung von TightGate-Pro, die weitreichende Sicherheitsrisiken bergen oder zu schwerwiegenden Betriebs­störungen führen können.

Inhaltsverzeichnis

TightGate-Schleuse for Microsoft Windows

General information

The TightGate-Schleuse is a programme that is used to exchange files between the local workstation PC and TightGate-Pro. It is based on the WinSCP application, which is installed when the gateway is installed.

The MSI package for the TightGate-Schleuse can be found in the Download centre of m-privacy GmbH .

Installation

The MSI package for the TightGate-Schleuse requires administration rights and can be installed by double-clicking or via software distribution. During installation, all TightGate-Schleuse files are copied to the directory C:\Programme\TightGate-Pro and a desktop shortcut and a start menu shortcut are created. If the associated TightGate-Viewer has already been configured and can establish a connection to TightGate-Pro, no further configurations are necessary for the TightGate-Schleuse and it can be started by double-clicking on the lock icon .
The use of the TightGate-Schleuse from the user's point of view is described in the user manual under the chapter Using the file transfer.

When installing the TightGate-Schleuse, a central registry key is set so that an entry is created in the context menu extension for uploading. If errors occur in this regard, please contact the technical customer service department at m-privacy GmbH.

For cluster systems, the file transfer can only be used after a waiting time of up to 10 minutes after the first login via TightGate-Viewer. The waiting time does not apply to all subsequent logins as long as the certificate used remains the same.

Configuration

In order for the TightGate-Schleuse to work, the functionality and the corresponding authorisations must be configured at TightGate-Pro. This is done according to the following instructions.

This is required:

→ Installed TightGate-Schleuse.

This is how it works:

Login as administrator config

Select the menu item System defaults > File transfer. Global activation of the file transfer by selecting Yes.

Select the menu item User preferences > File transfer: Default. Selection of whether the file transfer should be automatically activated for newly created users.

Select the menu item User preferences > Transfer types Download: Default.
Selection of the permitted MIME types (file types) for the download (from TightGate-Pro to the workstation PC). The setting is the default for newly created users when using the file transfer.

Select the menu item User defaults > Transfer types Upload: Default.
Selection of the permitted MIME types (file types) for the upload (from the workstation PC to TightGate-Pro). The setting is the default for newly created users when using the file transfer.

Via the menu items Save and Applyto apply the settings.

Using the file transfer with the file transfer administrator

There is a separate administrator for centralised use of the file transfer with the user ID transfer. This administrator has extended rights and can access the transfer directories of all other users as well as the administrator config administrator.

In order for the file transfer administrator to have full access, the following setting must be made in the TightGate-Schleuse (WinSCP):

Activation of the display of foreign directories
As the transfer directories belong to the individual users, they are not visible to the transfer administrator and are normally hidden. To show them, use the menu bar of the programme Settings > Settings and in the window that appears, select the menu item List window > Remote station in the window that appears. There, tick the box next to Show inaccessible folders should be ticked.

Activate display of hidden files
Hidden files can be displayed via the list window level.

The number of available transfer-administrators is set by the administrator config via the menu item System defaults > Multiple transfer users menu item. Up to 99 transfer users can be created. For transfer-administrators, passwords are created as administrators maint via the menu item User administration > Change user > transfer menu item.

Customising the TightGate-Schleuse interface

By default, the lock is opened in the Commander view. The window is split in two and shows the directory tree of the local computer in the left half and that of TightGate-Pro in the right half. Optionally, the Explorer view can also be used instead, in which the window is undivided and only shows TightGate-Pro. To customise the view, you can use the menu bar of the lock Settings > Settings and in the window that appears under Environment > Interface the desired selection can be made.

Optional use of the automatic lock

TightGate-Pro offers the option of automating file transfer from TightGate-Pro to the workstation PC in addition to manual file transfer. The automated lock is not used via the TightGate-Schleuse, but via TightGate-Viewer. Details on how to use it can be found here.