Virtual Desktop Application Control - Fortinet FortiGate Series Administration Manual

SSL VPN enhancements

Virtual Desktop Application Control

42
Allow printing
Quit the virtual desktop and
logout session when
browser is closed
Application Control List
To configure virtual desktop - CLI
conf vpn ssl web portal
edit "portal-name"
set virtual-desktop {enable | disable}
set virtual-desktop-desktop-switch {enable | disable}
set virtual-desktop-clipboard-share {enable | disable}
set virtual-desktop-removable-media-access
{enable | disable}
set virtual-desktop-network-share-access {enable | disable}
set virtual-desktop-printing {enable | disable}
set virutal-desktop-logout-when-browser-close
{enable | disable}
set virtual-desktop-app-list <applist_name>
end
All options are disabled by default, except virtual-desktop-desktop-switch.
You can control which applications users can run on their virtual desktop. To do this, you
create a list of either allowed or blocked applications which you then select when you
configure the virtual desktop.
To create an application control list - web-based manager
1 Go to VPN > SSL > Virtual Desktop Application Control.
2 Select Create New.
3 Enter a Name for the list.
4 Select either Allow the applications on this list and block all others or Block the
applications on this list and allow all others.
5 Select Add.
6 In the Application Signatures window, enter the Name of the application and its
MD5 Signature.
There are utilities you can use to calculate the MD5 signature of the executable file.
You can enter multiple signatures to support multiple versions of the application.
7 Select OK.
8 Repeat steps 5 through
9 Select OK.
To create an application control list - CLI
config vpn ssl web virtual-desktop-app-list
edit <applist_name>
set action {allow | block}
Enable to allow the user to use printers from the virtual
desktop.
By default, the virtual desktop remains in effect even if the user
closes the browser. Enable to automatically close the virtual
desktop and logout if the user closes the browser.
Optionally, select an application control list. This controls which
applications the user can run on the virtual desktop. See
"Virtual Desktop Application
7 to add additional applications to the list.
FortiGate Version 4.0 MR1 Administration Guide
What's new in FortiOS Version 4.0 MR1
Control".
01-410-89802-20090903
http://docs.fortinet.com/ • Feedback