VMware ACE Especificaciones Pagina 6

  • Descarga
  • Añadir a mis manuales
  • Imprimir
  • Pagina
    / 14
  • Tabla de contenidos
  • MARCADORES
  • Valorado. / 5. Basado en revisión del cliente
Vista de pagina 5
Copyright © 2007 VMware, Inc. All rights reserved. 6
Pocket ACE Guide
Creating the ACE Master Policy
BeforeyoubegindefiningthepolicyforyourACEMaster,considerthetargetuserswhowillusethePocket
ACEinstances.Somefactorsincludehowsecureorrestrictivetheenvironmentshouldbe,howremoteusers
willgetassistanceifthereisanissue,andwhetheranyrestrictionsshouldbeplacedon
accessingperipherals.
ThefollowingexampleshowsapolicythatcanbeusedbyanACEadministratorwhoisdeploying
Pocket ACEenableddevicestousersasasecureremoteaccesssolution.Inthiscase,theuserswillbeaccessing
theenterprisenetworkusinganunmanagedPersonalComputerfromtheirhomeor
otherremotelocation.
UsethefollowingrequirementstodefinetheACEpolicy:
ProvideanACEinstanceforsecureremoteaccesstoenterpriseresources.
Distributeasecureremoteaccesssolutionwithpreinstalledapplicationsensuringsoftwarecompliance.
RestrictaccesstocommunicationbetweentheenterprisenetworkandtheACEvirtualdesktop.
RestrictaccesstowhocaninitializethePocketACEinstance.
PreventthePocketACEinstancefrombeingcopiedormovedwhendeployed.
EnsurethePocketACEregularlychecksforpolicyupdates.
Creating the Pocket ACE Policy
Tostartthepolicyeditor,rightclicktheACEmasteryoucreatedandselectPolicies.
Access Control
To configure access control
1 SelectAccessControl.
2UnderActivationselectPassword.
3UnderAuthenticationselectUserspecificpassword.
Byconfiguringtheactivationpolicytouseeitherapasswordoractivationkey,youcanprotectthePocketACE
instancewhileitisintransittotheuser.Theactivationpasswordorkeyisknownonlyto
thePocketACE
administratorandenduser.SettinganauthenticationpolicyensuresthataPocketACEinstancewillprompt
theuserforanewauthenticationpasswordafterthePocketACEhasbeeninitialized.Thispasswordisalways
usedtopoweronthePocketACEinstance,andisknownonlyby
theenduser.Iftheuserforgetsthe
authenticationpassword,itcanberesetbyanadministratorfromtheACEmanagementserver.
Expiration
SetanexpirationtimeperiodifyouwantthePocketACEinstancetoexpireafteracertainperiodoftime.
Copy Protection
UnderCopyProtection,selectDonotallowmovingorcopyingtheinstancefiles.
ConfiguringthecopyprotectionpolicyforthePocketACEinstancesallowsyoutominimizetheriskoflostor
stolenmediadevices.ThispreventsaPocketACEinstancethathasbeenmovedorcopiedfromrunning.
Resource Signing
UnderResourceSigning,selectVerifytheintegrityofallfilesintheACEresourcedirectory.
ConfiguringresourcesigningensurestheconfigurationandACEresourcesfilesthataccompanythePocket
ACEinstancehavenotbeenmodifiedorchanged.Ifsomeoneattemptstomodifyortamperwiththe
configurationfiles,thePocketACE
becomesunusable.BydefaultallPocketACEfilesareencrypted.
Vista de pagina 5
1 2 3 4 5 6 7 8 9 10 11 12 13 14

Comentarios a estos manuales

Sin comentarios