On Fri, 10 Oct 2014, Clift, Tom CIV NSWCDD, K55 wrote:

Our security requirements specify that the OS have a write lock option if the client is not a true zero client. Does anyone know if the OS (ThinPro) for the HP T610 considered "write locked" or at least have a similiar option? The idea being that no one would be able to access the OS and store data.

Hi. I'm not sure there is such a thing as a "true zero client", or how it would be defined. The Sun Ray DTUs are indeed very "thin", but this also means that they are less flexible. For example, they are locked to one single protocol and vendor.

Most thin terminals nowadays are running Linux, thus in principle a "full" operating system. Various lock down approaches are being used. For example, the HP ThinPro normally runs with a file system which is write protected except for the path /writable. With the command "fsunlock", it is possible to write enable the rest of the file system. This allows for example installation of our ThinLinc Client package. Afterwards, you run "fslock". Terminals from IGEL, Dell/Wyse, Fujitsu etc uses a similar approach.

If you are considered about the risk of storing local data, perhaps one solution would be to disable client file access? With the ThinLinc Client, the "Local Drive Redirection" subsystem is a separate process/binary, and if you simply remove that file, this feature will be disabled.


Br,
---
Peter Astrand           ThinLinc Chief Developer
Cendio AB               http://cendio.com
Teknikringen 8          http://twitter.com/ThinLinc
583 30 Linkoping        http://facebook.com/ThinLinc
Phone: +46-13-214600    http://google.com/+CendioThinLinc




________________________________
From: sunray-users-boun...@filibeto.org [sunray-users-boun...@filibeto.org] on 
behalf of Tobias Oetiker [t...@oetiker.ch]
Sent: Thursday, October 02, 2014 4:21 AM
To: SunRay-Users mailing list
Subject: Re: [SunRay-Users] What are sunray users going to do once Oracle stop 
support

Today Dave Michaels wrote:

The t610s we have are pretty snazzy out of the box, but they seem to come
with two different flavors of 'firmware':

ThinPro, and SafeZero or something like that.  The latter one seems to have
very few connections out of the box.  ThinPro has more connection options
(including XDMCP, which isn't secure, but is easy to set up).

I don't remember seeing "thinlinc" - what OS & version are you running on
those t610s?


Hi Dave,

you need the ThinPro OS on the t610 AND then you can install the
thinlinc client package into the ThinPro Linux

very simple
cheers
tobi




On Wed, Oct 1, 2014 at 3:01 PM, Leigh Porter <leigh.por...@ukbroadband.com>
wrote:

 We achieve this with T610 and thinlinc. The sessions are encrypted, we
have two factor authentication and all our data stays in the enclave.

Users hop from thinlinc to remote desktop sessions which achieves further
logical separation between sensitive systems and the users.

Nothing is held locally, unless you count some LCD burn in!

--
Leigh


---- Clift, Tom CIV NSWCDD, K55 wrote ----

 We are also looking for a 3D/zero client solution. Our data has to stay
in the datacenter so a true PCoIP is necessary so we can process classifed
data in unclassifed areas without the risk of the device retaining any data.



Tom Clift

540-653-8023

DSN  249-8023

________________________________
From: sunray-users-boun...@filibeto.org [sunray-users-boun...@filibeto.org]
on behalf of Tobi Oetiker [t...@oetiker.ch]
Sent: Wednesday, October 01, 2014 4:10 PM
To: SunRay-Users mailing list
Subject: Re: [SunRay-Users] What are sunray users going to do once Oracle
stop support



On 01.10.2014, at 21:47, Nishimura, Scott L (ESS) <
scott.nishim...@ngc.com> wrote:

Tobi,

  Did you do much 3D work with the T610?




hi scott

i have not tried the virtual 3d stuff ... note that the t610 should be fine

cheers
tobi


Scott

-----Original Message-----
From: sunray-users-boun...@filibeto.org [
mailto:sunray-users-boun...@filibeto.org
<sunray-users-boun...@filibeto.org>] On Behalf Of Tobi Oetiker
Sent: Wednesday, October 01, 2014 11:52 AM
To: SunRay-Users mailing list
Subject: EXT :Re: [SunRay-Users] What are sunray users going to do once
Oracle stop support



On 01.10.2014, at 20:50, Tobi Oetiker <t...@oetiker.ch> wrote:



On 01.10.2014, at 20:17, Hana Skoumalova <hana.skoumal...@ff.cuni.cz>
wrote:

Leigh Porter wrote:

We moved to thinlinc (Google it..) and are very pleased. I have
about
120 terminals now and I don't think we have had any issues. We had
sunray and thinlinc on the same servers so migration was super easy.

But thinlinc is software, right? What sort of hardware do you use?

we use hp t1600 but they are a bit low powered, so we now started
using the gigabyte brix i3 (booting diskless linux)


that's t610
sorry
hth

tobi oetiker
www.oetiker.ch<http://www.oetiker.ch/>


Hana

_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit 
http://www.symanteccloud.com<http://www.symanteccloud.com/>
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit 
http://www.symanteccloud.com<http://www.symanteccloud.com/>
______________________________________________________________________

_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users




--
Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland
www.oetiker.ch<http://www.oetiker.ch/> t...@oetiker.ch +41 62 775 9902

_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users
_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users



_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to