white paper: sysaid's my desktop

5
What is My Desktop? It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs. Advantages of My Desktop So, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons: Always Secure My Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically rely on either a VPN or a 3rd party provider, each of which provides security challenges. While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise when end users connect from home, choosing to use their home computers which can have viruses, worms, or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and more. Once the VPN connection is established, any malware or hackers that compromise the end user’s computer at home have direct access to your entire network--putting everyone at risk. This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control their work computers without connecting to the corporate network. All communication is by secure SSL HTML 5, so both the user’s data and the corporate network are protected. Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop page 1 Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop http://www.SysAid.com

Upload: sysaid-technologies

Post on 24-Jun-2015

435 views

Category:

Technology


9 download

DESCRIPTION

SysAid's My Desktop provides end users access to their desktop computers from any device with an Internet connection, including from all mobile devices. This white paper describes how you can improve efficiency with this simple, convenient, fully auditable, and secure remote access solution.

TRANSCRIPT

Page 1: White Paper: SysAid's My Desktop

As an alternative to VPN, there are companies that offer hosted products that are similar in concept to My

Desktop. However, these products route all remote access sessions through a shared server that sits on

their network. With My Desktop, all connections are routed through your network, using your SysAid

server, so your corporate data is never exposed to any 3rd party.

Accessible Every TimeBecause My Desktop relies upon HTML 5 for communications between the end user and the SysAid

Server, the only thing an end user needs to begin the session is a compatible web browser. This means

that end users can use virtually any computer or smartphone to connect. Is one of your end users

away for the weekend and needs to make an emergency change to a PowerPoint presentation for

Monday? No problem—he can use any computer to connect to his data. End users access My Desktop

from the End User Portal using their normal SysAid credentials, so they already know everything they

need in order to get started.

Business OrientedMy Desktop was designed from the ground up with your business and IT needs in mind. First of all, My

Desktop is integrated directly with your help desk and asset management, giving you one tool that

can meet all of your IT needs. This is a huge advantage over having to manage an additional 3rd party

remote access tool. Second, My Desktop gives you complete, granular control over which users can

connect to which computers. End users will only see computers that you’ve specifically authorized

them to access.

To help you assign users to the appropriate computers, My Desktop includes an Auto-Match feature

that identifies the most common user for each computer and suggests that they be given access.

Finally, My Desktop includes a detailed audit log that shows you all activities in My Desktop:

assignments of computers to end users, all initialized My Desktop sessions, and any sessions

terminated by IT administrators. With My Desktop, your business needs come first.

Cost EffectiveUnlike other secure remote access tools such as Citrix based solutions, My Desktop is only a small

additional cost over your current SysAid license. With concurrent user licensing, it’s also very easy to

plan how many licenses you need. Furthermore, because it’s part of SysAid, there is no need to add a

budget for additional software products--making My Desktop a very simple acquisition.

What is My Desktop?It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs.

Advantages of My DesktopSo, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons:

Always SecureMy Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully

encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically

rely on either a VPN or a 3rd party provider, each of which provides security challenges.

While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise

when end users connect from home, choosing to use their home computers which can have viruses, worms,

or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the

advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and

more. Once the VPN connection is established, any malware or hackers that compromise the end user’s

computer at home have direct access to your entire network--putting everyone at risk.

This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control

their work computers without connecting to the corporate network. All communication is by secure SSL

HTML 5, so both the user’s data and the corporate network are protected.

Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop

How My Desktop WorksMy Desktop has three components that enable connections between end users and their computers:

The web browser that the end user uses to initiate My Desktop

The SysAid RCG (Remote Control Gateway) Server

The end user’s desktop computer

Web BrowserAn end user initiates Remote Desktop from any HTML 5 compatible web browser. This can include the

web browser on a smartphone. The end user controls My Desktop completely from within the web

browser.

SysAid RCG ServerThe SysAid RCG Server acts as a gateway between end users and their workstations. It converts between

the HTML 5 used by the end user’s web browser and the RFB used to communicate with the end user’s

workstation. This allows you to manage all My Desktop sessions centrally from within SysAid, and also

greatly simplifies the network configurations required to allow end users to connect from outside the

company network. Your SysAid Server hosts the RCG Server, and you can optionally install an additional

RCG server onto another computer that is more easily accessible or that offers better performance.

End User’s DesktopWhen an end user initiates a My Desktop session, the SysAid RCG Server sends a UDP message to the

SysAid Agent installed on the end user’s workstation, beginning the session. If UDP is blocked, then the

My Desktop session is initiated the next time the end user’s computer contacts the SysAid Server

(typically 30 seconds or less). A computer being controlled by My Desktop shows the lock screen on the

local console.

Data TransferDuring a My Desktop session, the web browser sends and receives data from the RCG Server using SSL

HTML5. The end user’s workstation sends and receives data from the RCG Server using SSL RFB. The RCG

Server translates between the HTML 5 and RFB protocols. By default, all data is transferred over port 443.

If port 443 is in use, the RCG Server will use 8443. If neither 443 nor 8443 are available, a random port will

be used. You can also manually configure the desired port.

My Desktop Connection ScenariosThere are three My Desktop connection scenarios:

Questions About My DesktopWhat ports do I have to open in order to use My Desktop?By default, My Desktop connections use SSL over port 443. Port 443 is open in most organizations, so if you are using this port, there is no need to open additional ports to use My Desktop. If you are using a port other than 443 (such as 8443, or any other port you’ve chosen), then you need to ensure that the chosen port is open.

What software do I need to install in order to use My Desktop?The end user’s workstation must have the SysAid Agent installed and the end user must have an HTML 5 compatible web browser. You should have already installed the SysAid Agent throughout your network for asset management, and all computers and smartphones come with a web browser. Therefore, unless your end users are using very old browsers, there is no additional software to install.

How do I enable My Desktop?My Desktop is automatically included in your SysAid installation. All you need to do to enable it is to add the appropriate license file. Please contact your account manager for further information.

page 1

Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop

http://www.SysAid.com

Page 2: White Paper: SysAid's My Desktop

As an alternative to VPN, there are companies that offer hosted products that are similar in concept to My

Desktop. However, these products route all remote access sessions through a shared server that sits on

their network. With My Desktop, all connections are routed through your network, using your SysAid

server, so your corporate data is never exposed to any 3rd party.

Accessible Every TimeBecause My Desktop relies upon HTML 5 for communications between the end user and the SysAid

Server, the only thing an end user needs to begin the session is a compatible web browser. This means

that end users can use virtually any computer or smartphone to connect. Is one of your end users

away for the weekend and needs to make an emergency change to a PowerPoint presentation for

Monday? No problem—he can use any computer to connect to his data. End users access My Desktop

from the End User Portal using their normal SysAid credentials, so they already know everything they

need in order to get started.

Business OrientedMy Desktop was designed from the ground up with your business and IT needs in mind. First of all, My

Desktop is integrated directly with your help desk and asset management, giving you one tool that

can meet all of your IT needs. This is a huge advantage over having to manage an additional 3rd party

remote access tool. Second, My Desktop gives you complete, granular control over which users can

connect to which computers. End users will only see computers that you’ve specifically authorized

them to access.

To help you assign users to the appropriate computers, My Desktop includes an Auto-Match feature

that identifies the most common user for each computer and suggests that they be given access.

Finally, My Desktop includes a detailed audit log that shows you all activities in My Desktop:

assignments of computers to end users, all initialized My Desktop sessions, and any sessions

terminated by IT administrators. With My Desktop, your business needs come first.

Cost EffectiveUnlike other secure remote access tools such as Citrix based solutions, My Desktop is only a small

additional cost over your current SysAid license. With concurrent user licensing, it’s also very easy to

plan how many licenses you need. Furthermore, because it’s part of SysAid, there is no need to add a

budget for additional software products--making My Desktop a very simple acquisition.

What is My Desktop?It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs.

Advantages of My DesktopSo, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons:

Always SecureMy Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully

encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically

rely on either a VPN or a 3rd party provider, each of which provides security challenges.

While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise

when end users connect from home, choosing to use their home computers which can have viruses, worms,

or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the

advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and

more. Once the VPN connection is established, any malware or hackers that compromise the end user’s

computer at home have direct access to your entire network--putting everyone at risk.

This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control

their work computers without connecting to the corporate network. All communication is by secure SSL

HTML 5, so both the user’s data and the corporate network are protected.

How My Desktop WorksMy Desktop has three components that enable connections between end users and their computers:

The web browser that the end user uses to initiate My Desktop

The SysAid RCG (Remote Control Gateway) Server

The end user’s desktop computer

Web BrowserAn end user initiates Remote Desktop from any HTML 5 compatible web browser. This can include the

web browser on a smartphone. The end user controls My Desktop completely from within the web

browser.

SysAid RCG ServerThe SysAid RCG Server acts as a gateway between end users and their workstations. It converts between

the HTML 5 used by the end user’s web browser and the RFB used to communicate with the end user’s

workstation. This allows you to manage all My Desktop sessions centrally from within SysAid, and also

greatly simplifies the network configurations required to allow end users to connect from outside the

company network. Your SysAid Server hosts the RCG Server, and you can optionally install an additional

RCG server onto another computer that is more easily accessible or that offers better performance.

End User’s DesktopWhen an end user initiates a My Desktop session, the SysAid RCG Server sends a UDP message to the

SysAid Agent installed on the end user’s workstation, beginning the session. If UDP is blocked, then the

My Desktop session is initiated the next time the end user’s computer contacts the SysAid Server

(typically 30 seconds or less). A computer being controlled by My Desktop shows the lock screen on the

local console.

Data TransferDuring a My Desktop session, the web browser sends and receives data from the RCG Server using SSL

HTML5. The end user’s workstation sends and receives data from the RCG Server using SSL RFB. The RCG

Server translates between the HTML 5 and RFB protocols. By default, all data is transferred over port 443.

If port 443 is in use, the RCG Server will use 8443. If neither 443 nor 8443 are available, a random port will

be used. You can also manually configure the desired port.

My Desktop Connection ScenariosThere are three My Desktop connection scenarios:

Questions About My DesktopWhat ports do I have to open in order to use My Desktop?By default, My Desktop connections use SSL over port 443. Port 443 is open in most organizations, so if you are using this port, there is no need to open additional ports to use My Desktop. If you are using a port other than 443 (such as 8443, or any other port you’ve chosen), then you need to ensure that the chosen port is open.

What software do I need to install in order to use My Desktop?The end user’s workstation must have the SysAid Agent installed and the end user must have an HTML 5 compatible web browser. You should have already installed the SysAid Agent throughout your network for asset management, and all computers and smartphones come with a web browser. Therefore, unless your end users are using very old browsers, there is no additional software to install.

How do I enable My Desktop?My Desktop is automatically included in your SysAid installation. All you need to do to enable it is to add the appropriate license file. Please contact your account manager for further information.

page 2

Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop

http://www.SysAid.com

Page 3: White Paper: SysAid's My Desktop

As an alternative to VPN, there are companies that offer hosted products that are similar in concept to My

Desktop. However, these products route all remote access sessions through a shared server that sits on

their network. With My Desktop, all connections are routed through your network, using your SysAid

server, so your corporate data is never exposed to any 3rd party.

Accessible Every TimeBecause My Desktop relies upon HTML 5 for communications between the end user and the SysAid

Server, the only thing an end user needs to begin the session is a compatible web browser. This means

that end users can use virtually any computer or smartphone to connect. Is one of your end users

away for the weekend and needs to make an emergency change to a PowerPoint presentation for

Monday? No problem—he can use any computer to connect to his data. End users access My Desktop

from the End User Portal using their normal SysAid credentials, so they already know everything they

need in order to get started.

Business OrientedMy Desktop was designed from the ground up with your business and IT needs in mind. First of all, My

Desktop is integrated directly with your help desk and asset management, giving you one tool that

can meet all of your IT needs. This is a huge advantage over having to manage an additional 3rd party

remote access tool. Second, My Desktop gives you complete, granular control over which users can

connect to which computers. End users will only see computers that you’ve specifically authorized

them to access.

To help you assign users to the appropriate computers, My Desktop includes an Auto-Match feature

that identifies the most common user for each computer and suggests that they be given access.

Finally, My Desktop includes a detailed audit log that shows you all activities in My Desktop:

assignments of computers to end users, all initialized My Desktop sessions, and any sessions

terminated by IT administrators. With My Desktop, your business needs come first.

Cost EffectiveUnlike other secure remote access tools such as Citrix based solutions, My Desktop is only a small

additional cost over your current SysAid license. With concurrent user licensing, it’s also very easy to

plan how many licenses you need. Furthermore, because it’s part of SysAid, there is no need to add a

budget for additional software products--making My Desktop a very simple acquisition.

What is My Desktop?It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs.

Advantages of My DesktopSo, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons:

Always SecureMy Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully

encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically

rely on either a VPN or a 3rd party provider, each of which provides security challenges.

While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise

when end users connect from home, choosing to use their home computers which can have viruses, worms,

or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the

advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and

more. Once the VPN connection is established, any malware or hackers that compromise the end user’s

computer at home have direct access to your entire network--putting everyone at risk.

This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control

their work computers without connecting to the corporate network. All communication is by secure SSL

HTML 5, so both the user’s data and the corporate network are protected.

How My Desktop WorksMy Desktop has three components that enable connections between end users and their computers:

The web browser that the end user uses to initiate My Desktop

The SysAid RCG (Remote Control Gateway) Server

The end user’s desktop computer

Web BrowserAn end user initiates Remote Desktop from any HTML 5 compatible web browser. This can include the

web browser on a smartphone. The end user controls My Desktop completely from within the web

browser.

SysAid RCG ServerThe SysAid RCG Server acts as a gateway between end users and their workstations. It converts between

the HTML 5 used by the end user’s web browser and the RFB used to communicate with the end user’s

workstation. This allows you to manage all My Desktop sessions centrally from within SysAid, and also

greatly simplifies the network configurations required to allow end users to connect from outside the

company network. Your SysAid Server hosts the RCG Server, and you can optionally install an additional

RCG server onto another computer that is more easily accessible or that offers better performance.

End User’s DesktopWhen an end user initiates a My Desktop session, the SysAid RCG Server sends a UDP message to the

SysAid Agent installed on the end user’s workstation, beginning the session. If UDP is blocked, then the

My Desktop session is initiated the next time the end user’s computer contacts the SysAid Server

(typically 30 seconds or less). A computer being controlled by My Desktop shows the lock screen on the

local console.

Data TransferDuring a My Desktop session, the web browser sends and receives data from the RCG Server using SSL

HTML5. The end user’s workstation sends and receives data from the RCG Server using SSL RFB. The RCG

Server translates between the HTML 5 and RFB protocols. By default, all data is transferred over port 443.

If port 443 is in use, the RCG Server will use 8443. If neither 443 nor 8443 are available, a random port will

be used. You can also manually configure the desired port.

My Desktop Connection ScenariosThere are three My Desktop connection scenarios:

Questions About My DesktopWhat ports do I have to open in order to use My Desktop?By default, My Desktop connections use SSL over port 443. Port 443 is open in most organizations, so if you are using this port, there is no need to open additional ports to use My Desktop. If you are using a port other than 443 (such as 8443, or any other port you’ve chosen), then you need to ensure that the chosen port is open.

What software do I need to install in order to use My Desktop?The end user’s workstation must have the SysAid Agent installed and the end user must have an HTML 5 compatible web browser. You should have already installed the SysAid Agent throughout your network for asset management, and all computers and smartphones come with a web browser. Therefore, unless your end users are using very old browsers, there is no additional software to install.

How do I enable My Desktop?My Desktop is automatically included in your SysAid installation. All you need to do to enable it is to add the appropriate license file. Please contact your account manager for further information.

page 3

Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop

http://www.SysAid.com

Page 4: White Paper: SysAid's My Desktop

As an alternative to VPN, there are companies that offer hosted products that are similar in concept to My

Desktop. However, these products route all remote access sessions through a shared server that sits on

their network. With My Desktop, all connections are routed through your network, using your SysAid

server, so your corporate data is never exposed to any 3rd party.

Accessible Every TimeBecause My Desktop relies upon HTML 5 for communications between the end user and the SysAid

Server, the only thing an end user needs to begin the session is a compatible web browser. This means

that end users can use virtually any computer or smartphone to connect. Is one of your end users

away for the weekend and needs to make an emergency change to a PowerPoint presentation for

Monday? No problem—he can use any computer to connect to his data. End users access My Desktop

from the End User Portal using their normal SysAid credentials, so they already know everything they

need in order to get started.

Business OrientedMy Desktop was designed from the ground up with your business and IT needs in mind. First of all, My

Desktop is integrated directly with your help desk and asset management, giving you one tool that

can meet all of your IT needs. This is a huge advantage over having to manage an additional 3rd party

remote access tool. Second, My Desktop gives you complete, granular control over which users can

connect to which computers. End users will only see computers that you’ve specifically authorized

them to access.

To help you assign users to the appropriate computers, My Desktop includes an Auto-Match feature

that identifies the most common user for each computer and suggests that they be given access.

Finally, My Desktop includes a detailed audit log that shows you all activities in My Desktop:

assignments of computers to end users, all initialized My Desktop sessions, and any sessions

terminated by IT administrators. With My Desktop, your business needs come first.

Cost EffectiveUnlike other secure remote access tools such as Citrix based solutions, My Desktop is only a small

additional cost over your current SysAid license. With concurrent user licensing, it’s also very easy to

plan how many licenses you need. Furthermore, because it’s part of SysAid, there is no need to add a

budget for additional software products--making My Desktop a very simple acquisition.

What is My Desktop?It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs.

Advantages of My DesktopSo, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons:

Always SecureMy Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully

encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically

rely on either a VPN or a 3rd party provider, each of which provides security challenges.

While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise

when end users connect from home, choosing to use their home computers which can have viruses, worms,

or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the

advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and

more. Once the VPN connection is established, any malware or hackers that compromise the end user’s

computer at home have direct access to your entire network--putting everyone at risk.

This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control

their work computers without connecting to the corporate network. All communication is by secure SSL

HTML 5, so both the user’s data and the corporate network are protected.

How My Desktop WorksMy Desktop has three components that enable connections between end users and their computers:

The web browser that the end user uses to initiate My Desktop

The SysAid RCG (Remote Control Gateway) Server

The end user’s desktop computer

Web BrowserAn end user initiates Remote Desktop from any HTML 5 compatible web browser. This can include the

web browser on a smartphone. The end user controls My Desktop completely from within the web

browser.

SysAid RCG ServerThe SysAid RCG Server acts as a gateway between end users and their workstations. It converts between

the HTML 5 used by the end user’s web browser and the RFB used to communicate with the end user’s

workstation. This allows you to manage all My Desktop sessions centrally from within SysAid, and also

greatly simplifies the network configurations required to allow end users to connect from outside the

company network. Your SysAid Server hosts the RCG Server, and you can optionally install an additional

RCG server onto another computer that is more easily accessible or that offers better performance.

End User’s DesktopWhen an end user initiates a My Desktop session, the SysAid RCG Server sends a UDP message to the

SysAid Agent installed on the end user’s workstation, beginning the session. If UDP is blocked, then the

My Desktop session is initiated the next time the end user’s computer contacts the SysAid Server

(typically 30 seconds or less). A computer being controlled by My Desktop shows the lock screen on the

local console.

Data TransferDuring a My Desktop session, the web browser sends and receives data from the RCG Server using SSL

HTML5. The end user’s workstation sends and receives data from the RCG Server using SSL RFB. The RCG

Server translates between the HTML 5 and RFB protocols. By default, all data is transferred over port 443.

If port 443 is in use, the RCG Server will use 8443. If neither 443 nor 8443 are available, a random port will

be used. You can also manually configure the desired port.

My Desktop Connection ScenariosThere are three My Desktop connection scenarios:

Questions About My DesktopWhat ports do I have to open in order to use My Desktop?By default, My Desktop connections use SSL over port 443. Port 443 is open in most organizations, so if you are using this port, there is no need to open additional ports to use My Desktop. If you are using a port other than 443 (such as 8443, or any other port you’ve chosen), then you need to ensure that the chosen port is open.

What software do I need to install in order to use My Desktop?The end user’s workstation must have the SysAid Agent installed and the end user must have an HTML 5 compatible web browser. You should have already installed the SysAid Agent throughout your network for asset management, and all computers and smartphones come with a web browser. Therefore, unless your end users are using very old browsers, there is no additional software to install.

How do I enable My Desktop?My Desktop is automatically included in your SysAid installation. All you need to do to enable it is to add the appropriate license file. Please contact your account manager for further information.

page 4http://www.SysAid.com

SysAid Server

RCG

ssl RFB

ssl H

TML5

Desktop computer

SysAid Server

RCG

ssl RFB

INTERNETssl HTML5

Office PC

Office PC

INTERNET

ssl H

TML5 ssl RFB

SysAid Data Center

Scenario 1SysAid My Desktop(Cloud topology)The SysAid RCG Server, the end

user's workstation, and the end

user are all located on different

networks.

Scenario 2SysAid My Desktop(In-House external topology)The SysAid RCG Server and the

end user's workstation are on the

same network, but the end user is

located outside the network.

Scenario 3SysAid My Desktop(In-House internal topology)The SysAid RCG Server, the end

user's workstation, and the end

user are all located on the same

network.

Page 5: White Paper: SysAid's My Desktop

As an alternative to VPN, there are companies that offer hosted products that are similar in concept to My

Desktop. However, these products route all remote access sessions through a shared server that sits on

their network. With My Desktop, all connections are routed through your network, using your SysAid

server, so your corporate data is never exposed to any 3rd party.

Accessible Every TimeBecause My Desktop relies upon HTML 5 for communications between the end user and the SysAid

Server, the only thing an end user needs to begin the session is a compatible web browser. This means

that end users can use virtually any computer or smartphone to connect. Is one of your end users

away for the weekend and needs to make an emergency change to a PowerPoint presentation for

Monday? No problem—he can use any computer to connect to his data. End users access My Desktop

from the End User Portal using their normal SysAid credentials, so they already know everything they

need in order to get started.

Business OrientedMy Desktop was designed from the ground up with your business and IT needs in mind. First of all, My

Desktop is integrated directly with your help desk and asset management, giving you one tool that

can meet all of your IT needs. This is a huge advantage over having to manage an additional 3rd party

remote access tool. Second, My Desktop gives you complete, granular control over which users can

connect to which computers. End users will only see computers that you’ve specifically authorized

them to access.

To help you assign users to the appropriate computers, My Desktop includes an Auto-Match feature

that identifies the most common user for each computer and suggests that they be given access.

Finally, My Desktop includes a detailed audit log that shows you all activities in My Desktop:

assignments of computers to end users, all initialized My Desktop sessions, and any sessions

terminated by IT administrators. With My Desktop, your business needs come first.

Cost EffectiveUnlike other secure remote access tools such as Citrix based solutions, My Desktop is only a small

additional cost over your current SysAid license. With concurrent user licensing, it’s also very easy to

plan how many licenses you need. Furthermore, because it’s part of SysAid, there is no need to add a

budget for additional software products--making My Desktop a very simple acquisition.

What is My Desktop?It happens all the time: an end user needs to access to his office computer, but he's on the go, and you have to find a way to help him out. Well, those stressful days are over because SysAid’s My Desktop module allows end users to remotely connect to their work computers from wherever they are. At home, on vacation, or simply visiting a different company office, My Desktop ensures that end users can always connect to gain access to the files and programs that they need exactly as if they were sitting in front of their office PCs.

Advantages of My DesktopSo, why is My Desktop better than other remote access solutions you’ve seen on the market? Here are just a few reasons:

Always SecureMy Desktop is a fully secured solution that is integrated into your existing SysAid server and provides fully

encrypted remote access for your end users to their office computers. Alternatives to My Desktop t ypically

rely on either a VPN or a 3rd party provider, each of which provides security challenges.

While a VPN is great for ensuring that data transferred to and from end users is secure, a problem may arise

when end users connect from home, choosing to use their home computers which can have viruses, worms,

or Trojans installed. Even if the end user is using a work supplied laptop, the user’s home network lacks all the

advanced security measures of the workplace—an advanced firewall, content filtering systems, IPS/IDS, and

more. Once the VPN connection is established, any malware or hackers that compromise the end user’s

computer at home have direct access to your entire network--putting everyone at risk.

This security risk cannot happen with My Desktop: When you use My Desktop, end users remotely control

their work computers without connecting to the corporate network. All communication is by secure SSL

HTML 5, so both the user’s data and the corporate network are protected.

How My Desktop WorksMy Desktop has three components that enable connections between end users and their computers:

The web browser that the end user uses to initiate My Desktop

The SysAid RCG (Remote Control Gateway) Server

The end user’s desktop computer

Web BrowserAn end user initiates Remote Desktop from any HTML 5 compatible web browser. This can include the

web browser on a smartphone. The end user controls My Desktop completely from within the web

browser.

SysAid RCG ServerThe SysAid RCG Server acts as a gateway between end users and their workstations. It converts between

the HTML 5 used by the end user’s web browser and the RFB used to communicate with the end user’s

workstation. This allows you to manage all My Desktop sessions centrally from within SysAid, and also

greatly simplifies the network configurations required to allow end users to connect from outside the

company network. Your SysAid Server hosts the RCG Server, and you can optionally install an additional

RCG server onto another computer that is more easily accessible or that offers better performance.

End User’s DesktopWhen an end user initiates a My Desktop session, the SysAid RCG Server sends a UDP message to the

SysAid Agent installed on the end user’s workstation, beginning the session. If UDP is blocked, then the

My Desktop session is initiated the next time the end user’s computer contacts the SysAid Server

(typically 30 seconds or less). A computer being controlled by My Desktop shows the lock screen on the

local console.

Data TransferDuring a My Desktop session, the web browser sends and receives data from the RCG Server using SSL

HTML5. The end user’s workstation sends and receives data from the RCG Server using SSL RFB. The RCG

Server translates between the HTML 5 and RFB protocols. By default, all data is transferred over port 443.

If port 443 is in use, the RCG Server will use 8443. If neither 443 nor 8443 are available, a random port will

be used. You can also manually configure the desired port.

My Desktop Connection ScenariosThere are three My Desktop connection scenarios:

Questions About My DesktopWhat ports do I have to open in order to use My Desktop?By default, My Desktop connections use SSL over port 443. Port 443 is open in most organizations, so if you are using this port, there is no need to open additional ports to use My Desktop. If you are using a port other than 443 (such as 8443, or any other port you’ve chosen), then you need to ensure that the chosen port is open.

What software do I need to install in order to use My Desktop?The end user’s workstation must have the SysAid Agent installed and the end user must have an HTML 5 compatible web browser. You should have already installed the SysAid Agent throughout your network for asset management, and all computers and smartphones come with a web browser. Therefore, unless your end users are using very old browsers, there is no additional software to install.

How do I enable My Desktop?My Desktop is automatically included in your SysAid installation. All you need to do to enable it is to add the appropriate license file. Please contact your account manager for further information.

page 5

Make Life Easier - Let End Users Connect to Computers from Anywhere with My Desktop

http://www.SysAid.com