SMA (Secure Mobile Access) 11.3 - HTML5 Support for SSH, Telnet, VNC and enhanced RDP HTML5 client
03/26/2020 
6 
12605
DESCRIPTION:
With the advent of HTML5, it's much easier now to access graphical and text terminal back ends using just a browser based HTML5 client instead of Native or Java clients.
Prior to 11.3.0, the following HTML5 clients were supported:
In 11.3.0, it has been expanded to include the following HTML5 clients:
- SSH
- Telnet
- VNC
- Enhance RDP client to add more functionality
RESOLUTION:
RDP Configuration
The new RDP clients - Windows Terminal Services, Citrix or VNC - have the following enhancements on the WorkPlace > Graphical Terminal Shortcut > General page with Windows Terminal Services selected.
Browser based client
All end point devices will use a browser-based RDP client.
Note:
- A browser-based RDP client does not support advanced session options such as NLA.
Bring remote audio to local computer
Select the Bring remote audio to local computer check box to enable users to access remote audio during the session.
Note:
- Audio redirection is network intensive and can affect performance. The default is off.
Display Properties
Ability to dynamically adjust the screen size such that no scrolling is required. With this any adjustment of browser based RDP screen will result in disconnect and reconnect with the back-end and user need not use scroll bars to move around. The default resolution is 1024 x 768. The administrator can also let the workplace User choose.
Startup options
Ability to specify a startup application with full path working directory etc. This will help the end-user connect to the desired RDP machine and get directly logged in with the application the user is trying to access.
VNC configuration
Here, the administrator needs to configure only the IP address and port number of the VNC machine
SSH and Telnet configuration
For SSH and Telnet, no separate HTML5 configuration is present. User can provide the details of SSH and Telnet server
Note:
- Unlike Native/Java clients, end-users will not have the ability to perform certain actions like copy-paste in the SSH/telnet window or use Up/Down arrows to scroll up and down the screens.
Java Deprecation in 11.3.0
In 11.3.0, all Java based NAM clients are being deprecated and will not be shown in default AMC view. So when a customer upgrades or gets a new box with 11.3.0 imaged on it, it will not show any Java NAM clients. In order to bring back support for Java clients, admin will need to use the MGMTNABLE_JAVA_SHORTCUTS CEM value and set it to true. On doing this, the Graphical terminal and Text terminal shortcuts screen will display a Java deprecation warning message.
Note:
- On enabling this, CEM, AMC screen options will not change (i.e no Java client radio buttons will be shown).
- By default, only HTML5 clients will be enabled. The underlying system will switch to Java based clients only when CEM is enabled.
Warning message shown when the CEM is set to true
Enabling CEM
FAQ
If the user is on a tablet or phone does it automatically fall back to hmtl5?
Yes, with the changes for WorkPlace Lite access, mobile devices automatically fall back to the HTML5 versions.
Does the RDP HTML5 client support does dual monitor?
Not currently.
Are the personal bookmarks included on import/export?
Yes.
For the SSH HTML5 client, can the SSH host key be stored on the appliance instead of the client for security reasons?
The host key is encrypted and stored with the browser's local storage.
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Capture Security applianceAdvanced Threat Protection for modern threat landscape
Network Security ManagerModern Security Management for today’s security landscape
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
Email SecurityProtect against today’s advanced email threats
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
