Monitoring File Transfer
File Transfer Monitoring Overview
Hosted applications or desktop delivery in HyWorks supports controlled file transfer using session server extensions. The feature can be used to upload/download files to/from endpoint to virtual desktop, providing following features:
-
Allow only upload/ download options
-
Block specific type of files to be transferred based on extensions
Though the feature is very handy for the users to upload and download files, but it is required to monitor upload and download activities by end-users on virtual desktops. In this section, information to enable file transfer monitoring will be provided.
How to Enable File Transfer Monitoring
The feature to monitor file transfer is currently configured from registry:
-
Set DumpLogsToSyslog as true available at below registry location:
HKLM\SOFTWARE\Accops\Controller\EDC\EXTERNAL LOG SETTINGS
- The syslog server details are fetched from following registry entries:
Location: HKEY_LOCAL_MACHINE\SOFTWARE\Accops\DVMAgent\ADVANCE SETTINGS\EXTERNAL LOG SETTINGS
SyslogHost: Host address of Syslog server.
SyslogPort: Syslog server port.
- More details of Syslog server configurations and external log settings can be found here.
Now any file transfer activities will be logged and sent to syslog server.
Sample Logs
-
File Download Allowed:
HyFR:[ Date: 25-08-2021 Time:21:09:36 ]: User [qa3] having session ID [6] has downloaded file [C:\Users\qa3\Desktop\DC-DR.md] having size [4132 KB] from this session to local computer.
-
File Download Blocked:
HyFR:[ Date: 25-08-2021 Time:21:35:35 ]: User [qa3] having session ID [7] has been blocked to download file [C:\Users\qa3\Desktop\DC-DR.md] from this session to local computer.