Client Settings
The Administrator can control various behaviour of the client through configuration settings on this page. These settings can be configured by navigating to Settings > Global > Client.
Note
The client settings options are for all the clients logging in to the HySecure gateway and is not for a specific domain.
General Settings
| Options | Description | Win | Linux | MAC | Android | iOS | HyLite |
|---|---|---|---|---|---|---|---|
| Keep Alive Interval for TCP from client to gateway(in milliseconds) | Configure the time interval at which Keep Alive messages will need to be sent to the Gateway to keep the connection with the Gateway alive. | Y | N | N | N | N | N |
| Keep Alive Time for TCP from client to gateway(in milliseconds) | Time till the connection is alive. | Y | N | N | N | N | N |
| Use HySecure Client as service. | Check this option to use the HySecure client as a Windows service. Note: On checking this option, the user will not be able to logout and will always be connected to the HySecure server. Login credentials are to be provided for the first time after launching the client. Post this, the client will run as a service |
Y | Y | N | N | N | N |
| Disable login Internet proxy is used | When proxy is set on user's machine and user tries to login then it wont be able to login. If unchecked, user able to login into HySecure Client. | Y | N | N | N | N | N |
| UPN support user name in client | Check this option if the User Principal Name (upn) is to be entered by the user for logging in. Note: The AD needs to be configured with upn as the User Search Attribute. By default, it is samAccountName. |
Y | Y | Y | Y | Y | Y |
| Enable AutoLogin in HySecure Client. | Check this option to enable auto-login of user, on the client launch. Note: This option will be effective only if Username and Password are saved on the local device. |
Y | Y (Only without HyID) | N | N | N | N |
| Specify comma separated list of alternate HySecure gateways that HySecure client can connect to. | Admin have to give gateway list. When user tries to login and found gateway unreachable then with the list it will tries to connect. | Y | N | N | N | N | N |
| Force the client to randomly choose an alternate gateway from the list. | When user tries to login and found gateway unreachable then it will randomly choose gateway which is running. | Y | N | N | N | N | N |
| Enable Hybrid mode | If checked, user is able to login into Hybrid mode. Hybrid mode, when user is able to login through web portal and if client is not installed on user's machine then it will download client. | ||||||
| Time Interval for Portal Status Check (in seconds, this setting is applicable for hybrid mode only, Maximum 3600 seconds are allowed) | When user is logged into the Gateway through hybrid mode, it will keep on checking the status whether the portal is running or not with the specified time interval. If portal gets closed then client will automatically exit. By Default, status check time interval is 20 sec. | ||||||
| Specify domain name for endpoint detection | User machine should be in domain which is specified by admin to login into HySecure Client. | Y | N | N | N | N | |
| Specify specific file path for endpoint detection | Y | N | N | N | N | ||
| Enable admin client as default client for Portal HyBrid Mode (If unchecked, On-Demand client will be default client) | If this option is checked, then on user logon into web portal and with no HySecure Client installed on the user machine, the admin client will get installed. If it is unchecked then it will install on demand client. |
||||||
| Enable HyLite mode. | If checked, user able to login into HyLite mode. Hylite mode, when user is able to login through web portal and tries to access application. | ||||||
| HyLite Keep Alive Time Interval (in minutes, this setting is applicable for HyWorks only, Maximum 60 minutes are allowed) | When user logged into HyLite portal then it will check the reachability of HyWorks application at the specified interval | ||||||
| Enable plugins for DeviceID/EPS |
HySecure Client Settings
Define the settings related to user login/logout, start/stop and messages related to HySecure Client.
| Options | Description | Win | Linux | MAC | Android | iOS | HyLite |
|---|---|---|---|---|---|---|---|
| Time Interval for Client Status Check (in seconds, this setting is applicable for hybrid mode only, Maximum 3600 seconds are allowed) | When user is logged into the Gateway through hybrid mode, it will keep on checking the status whether the client is running or not with the specified time interval. By Default, status check time interval is 60 sec. | ||||||
| Enforce strong SSL Server Certificate check by HySecure Client. | This option enforces the HySecure Server certificate verification while logging in from the client. On enabling it, if the client attempts a login and the server certificate is not valid, then s/he will get a message indicating the invalid server certificate and will ask the user whether s/he wants to continue or not. Accordingly it will be allowed to login. This option is useful when the HySecure server is published using an IP only and the admin wants to avoid certificate error message on every client login. |
Y | N | N | N | N | N |
| Enable full width (Double-byte) characters check in username and password. | Check this option to allow double-byte characters in username and password while launching HyWorks applications. | ||||||
| Disable HyWorks desktop shortcut | Check this option to avoid creation of HyWorks Desktop shortcuts, when user logs in into HySecure Gateway | ||||||
| Server Address label | Enter the desired label name for HySecure Server IP address/hostname field on the client login page. In its absence, the default label is "HySecure Server". | Y | Y | Y | N | N | N |
| Start HySecure Client on Windows logon | Check this option, if the HySecure client is expected to start automatically on Windows logon. As a result, the HySecure login page will open immediately after the user is logged onto Windows. | Y | N | N | N | N | N |
| HySecure post login suffix message | The message configured will get suffixed to the default message, on login failure. This message will help user take specific action on login failure | Y | N | N | N | N | N |
| HySecure custom device approval pending message | Configure this message which gets displayed to the user when the manual approval is configured for Device ID policy and the user is trying to log in for the first time. | Y | Y | Y | N | N | N |
| HySecure custom device policy failed message | Configure this message which gets displayed to the user when the user's login fails the Device ID policy. If nothing is configured, then the default message is displayed. | Y | Y | Y | N | N | N |
| HySecure custom device policy already pending message | Configure this message which gets displayed when the user tries to log in but s/he has not been approved by the Security Officer / Administrator, as yet. | Y | Y | Y | N | N | N |
| Enable collection of device fingerprint details from user device. | Check this option if the device details (fingerprint) are to be shared with the Gateway. This is mandatory if Device ID Access Control Policy is configured. Otherwise the Device ID policy does not get applied. | Y | Y | Y | Y | Y | Y |
| Detect real WAN IP address of the user if the user is working through an Internet proxy server | When proxy is set on user's machine and user logged into HySecure Client, then will give WAN IP of machine in active user. If unchecked, it will give proxy server IP as WAN IP in active user. | Y | N | N | N | N | N |
| Do not allow user to remember password on local device | On checking this option, the "Remember Password" option on the client login page will be greyed out and unchecked. As a result, the user will not have an option to save password, which is used to login to the Gateway, on the local device. The "Remember Password" option can be enabled by unchecking this checkbox and allowing the user an option to save the password. |
Y | Y | Y | Y | Y | N |
| Do not allow user to remember username on local device | On checking this option, the "Remember Me" option on the client login page, will be greyed out and unchecked. As a result, the user will not have an option to save Username, which is used to login to the Gateway, on the local device. The "Remember Me" option can be enabled by unchecking this checkbox and allowing the user an option to save the Username. |
Y | Y | Y | N | N | N |
| Broadcast message warning | Specify a message here which gets displayed to the user along with "Ok" and "Cancel" buttons, on providing credentials to login to the Gateway and before s/he gets actually logged in to the Gateway. If user clicks on OK then the login into HySecure Gateway will proceed with normal authentication process, and if the user clicks on cancel then user will get the login screen back. The intent of this message is to primarily warn the user of any illegal and undesired login attempts. |
Y | Y | Y | N | N | N |
| Broadcast pre login message | On entering the HySecure server address to which login is to be attempted, the realm is fetched which primarily involves details of all HySecure domains. At this point, the message configured in this field, gets displayed. This message will be an informative message and hence is displayed with an "Ok" button only. |
Y | Y | Y | N | N | N |
HyWorks Client Settings
Note
All the settings indicated below are for Windows HyWorks client only.
| Options | Description |
|---|---|
| Pre Launch HyWorks Client | Set the value to: Enable: If the HyWorks client need to be launched along with the HySecure client Disable: If the HyWorks client should be explicitly launched Not Set: |
| Enable Hyworks Client Upgrade. | Check this option to enable HyWorks client upgrade from the Gateway |
| Enable Hyworks client download (If unchecked, HyWorks On-Demand Client will be downloaded) | Check this option to enable download of HyWorks client. If unchecked, it will download on-demand client. |
| Enable Eltima installation with HyWorks Client. | If enabled, Eltima client, which is the free USB redirection module with HyWorks is also installed on user PC. Eltima client is included in all HyWorks client installers |
| Enable SEP installation with HyWorks Client. | If enabled, SEP client for USB redirection is also installed along with HyWorks client. Admin must upload HyWorks client installer which has SEP client |
| installer also built-in. The installer available on HySecure server by default do not include SEP client due to high size reasons. Admin can change the HyWorks client download URL to point it to Accops website to the latest integrated HyWorks client installer with SEP client. |
Upgrade Settings
These settings are not relevant for HyLite
| Options | Description | Win | Linux | MAC | Android | iOS |
|---|---|---|---|---|---|---|
| Allow upgrade with absolute url | Y | N | N | N | N | |
| Windows client upgrade with absolute URL | Y | N | N | N | N | |
| Windows client upgrade with absolute URL(non-admin) | Y | N | N | N | N | |
| HySecure Linux Client Download URL. | To download Linux Client, URL is specified. This is applicable for web portal only |
N | N | N | N | N |
| HySecure Mac Client Download URL | To download MAC Client, URL is specified. This is applicable for web portal only |
N | N | N | N | N |
| Hyworks Client Installer Download URL. | URL to download HyWorks Admin Client. | |||||
| Hyworks On-Demand Client Installer Download URL. | URL to download HyWorks On-demand Client. | |||||
| Forcefully update HySecure client if the user's client version is equal to or below this version (format a.b.c.d, like 3.7.1.5). To forcefully update all the HySecure client enter "*" and leave blank to disable forcefully update. | Specify the HySecure client version which is uploaded on the HySecure Gateway. If the client version is lower than the specified version, then the client application will get upgraded with the version on the HySecure Gateway. If all the clients are to be upgraded forcefully, enter "*" in this field. Keep the field empty if forceful upgrade is to be disabled. |
Y | Y (But with other method) | N | N | N |
| Enable HySecure Client upgrade notification to users. | Check this option if a notification needs to be given to the user to upgrade the client application, with an option to proceed further or cancel for the time being. | Y | Y | N | N | N |
| Enable Hyworks Client Force Upgrade. | Check this option to forcefully upgrade HyWorks Client if the version is lower than Client version set in "Hyworks Client Version" settings. |
Upload Clients
These settings are applicable only for Windows Client
| Options | Description |
|---|---|
| Select client setup type which you want to upload | Admin have to select the client type i.e. on-demand or admin client, HyWorks or HySecure Client. |
| HySecure/HyWorks Windows Client Version(Current version is 5.1.6.3 ) | Version of the client which admin want to upload is specified in this field. |
| Choose client setup file | Client setup file is selected from this field. (Admin can check file is present in /home/fes/public/VPNClientSetup.exe) |