Planning For Security Features; Understanding Client Connections - VMware VIEW 4.5 - ARCHITECTURE PLANNING EN-000350-01 Manual

Planning for Security Features

VMware View offers strong network security to protect sensitive corporate data. For added security, you can
integrate VMware View with certain third-party user-authentication solutions, use a security server, and
implement the restricted entitlements feature.
This chapter includes the following topics:

"Understanding Client Connections,"

n
"Choosing a User Authentication Method,"
n
"Restricting View Desktop Access,"
n
"Using Group Policy Settings to Secure View Desktops,"
n
"Implementing Best Practices to Secure Client Systems,"
n
"Assigning Administrator Roles,"
n
"Preparing to Use a Security Server,"
n
"Understanding VMware View Communications Protocols,"
n
Understanding Client Connections
View Client and View Administrator communicate with a View Connection Server host over secure HTTPS
connections.
The initial View Client connection, which is used for user authentication and View desktop selection, is created
when a user provides an IP address to View Client. The View Administrator connection is created when an
administrator types the View Administrator URL into a Web browser.
A default server SSL certificate is generated during View Connection Server installation. By default, clients are
presented with this certificate when they visit a secure page such as View Administrator.
You can use the default certificate for testing, but you should replace it with your own certificate as soon as
possible. The default certificate is not signed by a commercial Certificate Authority (CA). Use of noncertified
certificates can allow untrusted parties to intercept traffic by masquerading as your server.
Tunneled Client Connections with Microsoft RDP
n
When users connect to a View desktop with the Microsoft RDP display protocol, View Client makes a
second HTTPS connection to the View Connection Server host. This connection is called the tunnel
connection because it provides a tunnel for carrying RDP data.
VMware, Inc.
on page 49
on page 51
on page 53
on page 54
on page 55
on page 55
on page 55
on page 50
on page 60
5
49