Monitoring File Transfer
File Transfer Monitoring Overview
Hosted applications or desktop delivery in HyWorks supports controlled file transfer using session server extensions. The feature can be used to upload/download files to/from endpoint to virtual desktop, providing following features:
- Allow only upload/ download options
- Block specific type of files to be transferred based on extensions
Though the feature is very handy for the users to upload and download files, but it is required to monitor upload and download activities by end-users on virtual desktops. In this section, information to enable file transfer monitoring will be provided.
How to Enable File Transfer Monitoring
The feature to monitor file transfer is currently configured from registry:
Registry Location:
HKLM\SOFTWARE\Accops\Controller\EDC\EXTERNAL LOG SETTINGS
The administrator needs to configure the session monitoring via updating the registry entries.
Note
- If registry entries are not found, it can be created.
Details about the registry key values are as follows.
| Key Name | Default Value | Type | Value Range |
|---|---|---|---|
| EventType | 0 | String | 0: Disabled 1: User Session Monitoring 2: Process Monitoring 3: Both Keep as 3 |
| LogType | 0 | String | Set as 2 to enable SyLog server logging |
| SyslogHost | 0.0.0.0 | String | Syslog server or Accops ARS Server IP address or Hostname |
| SyslogPort | 514 | String | Syslog server or Accops ARS Server Port number |
Sample Logs
-
File Download Allowed:
HyFR:[ Date: 25-08-2021 Time:21:09:36 ]: User [qa3] having session ID [6] has downloaded file [C:\Users\qa3\Desktop\DC-DR.md] having size [4132 KB] from this session to local computer.
-
File Download Blocked:
HyFR:[ Date: 25-08-2021 Time:21:35:35 ]: User [qa3] having session ID [7] has been blocked to download file [C:\Users\qa3\Desktop\DC-DR.md] from this session to local computer.