The T610 do support a write lock, but they are not quite as locked up as the 
SunRay. I'm not sure what would be quite as close to a completely locked down 
platform as the SunRay.

--
Leigh



-----Original Message-----
From: sunray-users-boun...@filibeto.org 
[mailto:sunray-users-boun...@filibeto.org] On Behalf Of Peter Astrand
Sent: 13 October 2014 10:02
To: SunRay-Users mailing list
Subject: Re: [SunRay-Users] What are sunray users going to do once Oracle stop 
support

On Fri, 10 Oct 2014, Clift, Tom CIV NSWCDD, K55 wrote:

> Our security requirements specify that the OS have a write lock option 
> if the client is not a true zero client. Does anyone know if the OS
> (ThinPro) for the HP T610 considered "write locked" or at least have a 
> similiar option? The idea being that no one would be able to access 
> the OS and store data.

Hi. I'm not sure there is such a thing as a "true zero client", or how it would 
be defined. The Sun Ray DTUs are indeed very "thin", but this also means that 
they are less flexible. For example, they are locked to one single protocol and 
vendor.

Most thin terminals nowadays are running Linux, thus in principle a "full" 
operating system. Various lock down approaches are being used. For example, the 
HP ThinPro normally runs with a file system which is write protected except for 
the path /writable. With the command "fsunlock", it is possible to write enable 
the rest of the file system. This allows for example installation of our 
ThinLinc Client package. Afterwards, you run "fslock". Terminals from IGEL, 
Dell/Wyse, Fujitsu etc uses a similar approach.

If you are considered about the risk of storing local data, perhaps one 
solution would be to disable client file access? With the ThinLinc Client, the 
"Local Drive Redirection" subsystem is a separate process/binary, and if you 
simply remove that file, this feature will be disabled.


Br,
---
Peter Astrand           ThinLinc Chief Developer
Cendio AB               http://cendio.com
Teknikringen 8          http://twitter.com/ThinLinc
583 30 Linkoping        http://facebook.com/ThinLinc
Phone: +46-13-214600    http://google.com/+CendioThinLinc




> ________________________________
> From: sunray-users-boun...@filibeto.org 
> [sunray-users-boun...@filibeto.org] on behalf of Tobias Oetiker 
> [t...@oetiker.ch]
> Sent: Thursday, October 02, 2014 4:21 AM
> To: SunRay-Users mailing list
> Subject: Re: [SunRay-Users] What are sunray users going to do once 
> Oracle stop support
>
> Today Dave Michaels wrote:
>
>> The t610s we have are pretty snazzy out of the box, but they seem to 
>> come with two different flavors of 'firmware':
>>
>> ThinPro, and SafeZero or something like that.  The latter one seems 
>> to have very few connections out of the box.  ThinPro has more 
>> connection options (including XDMCP, which isn't secure, but is easy to set 
>> up).
>>
>> I don't remember seeing "thinlinc" - what OS & version are you 
>> running on those t610s?
>>
>
> Hi Dave,
>
> you need the ThinPro OS on the t610 AND then you can install the 
> thinlinc client package into the ThinPro Linux
>
> very simple
> cheers
> tobi
>
>>
>>
>>
>> On Wed, Oct 1, 2014 at 3:01 PM, Leigh Porter 
>> <leigh.por...@ukbroadband.com>
>> wrote:
>>
>>>  We achieve this with T610 and thinlinc. The sessions are encrypted, 
>>> we have two factor authentication and all our data stays in the enclave.
>>>
>>> Users hop from thinlinc to remote desktop sessions which achieves 
>>> further logical separation between sensitive systems and the users.
>>>
>>> Nothing is held locally, unless you count some LCD burn in!
>>>
>>> --
>>> Leigh
>>>
>>>
>>> ---- Clift, Tom CIV NSWCDD, K55 wrote ----
>>>
>>>  We are also looking for a 3D/zero client solution. Our data has to 
>>> stay in the datacenter so a true PCoIP is necessary so we can 
>>> process classifed data in unclassifed areas without the risk of the device 
>>> retaining any data.
>>>
>>>
>>>
>>> Tom Clift
>>>
>>> 540-653-8023
>>>
>>> DSN  249-8023
>>>
>>> ________________________________
>>> From: sunray-users-boun...@filibeto.org 
>>> [sunray-users-boun...@filibeto.org]
>>> on behalf of Tobi Oetiker [t...@oetiker.ch]
>>> Sent: Wednesday, October 01, 2014 4:10 PM
>>> To: SunRay-Users mailing list
>>> Subject: Re: [SunRay-Users] What are sunray users going to do once 
>>> Oracle stop support
>>>
>>>
>>>
>>>> On 01.10.2014, at 21:47, Nishimura, Scott L (ESS) <
>>> scott.nishim...@ngc.com> wrote:
>>>>
>>>> Tobi,
>>>>
>>>>   Did you do much 3D work with the T610?
>>>>
>>>>
>>>
>>>
>>> hi scott
>>>
>>> i have not tried the virtual 3d stuff ... note that the t610 should 
>>> be fine
>>>
>>> cheers
>>> tobi
>>>
>>>
>>>> Scott
>>>>
>>>> -----Original Message-----
>>>> From: sunray-users-boun...@filibeto.org [
>>> mailto:sunray-users-boun...@filibeto.org
>>> <sunray-users-boun...@filibeto.org>] On Behalf Of Tobi Oetiker
>>>> Sent: Wednesday, October 01, 2014 11:52 AM
>>>> To: SunRay-Users mailing list
>>>> Subject: EXT :Re: [SunRay-Users] What are sunray users going to do 
>>>> once
>>> Oracle stop support
>>>>
>>>>
>>>>
>>>>> On 01.10.2014, at 20:50, Tobi Oetiker <t...@oetiker.ch> wrote:
>>>>>
>>>>>
>>>>>
>>>>>> On 01.10.2014, at 20:17, Hana Skoumalova 
>>>>>> <hana.skoumal...@ff.cuni.cz>
>>> wrote:
>>>>>>
>>>>>> Leigh Porter wrote:
>>>>>>>
>>>>>>> We moved to thinlinc (Google it..) and are very pleased. I have 
>>>>>>> about
>>>>>>> 120 terminals now and I don't think we have had any issues. We 
>>>>>>> had sunray and thinlinc on the same servers so migration was super easy.
>>>>>>
>>>>>> But thinlinc is software, right? What sort of hardware do you use?
>>>>>
>>>>> we use hp t1600 but they are a bit low powered, so we now started 
>>>>> using the gigabyte brix i3 (booting diskless linux)
>>>>
>>>>
>>>> that's t610
>>>> sorry
>>>>> hth
>>>>>
>>>>> tobi oetiker
>>>>> www.oetiker.ch<http://www.oetiker.ch/>
>>>>>
>>>>>
>>>>>> Hana
>>>>>>
>>>>>> _______________________________________________
>>>>>> SunRay-Users mailing list
>>>>>> SunRay-Users@filibeto.org
>>>>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>>> _______________________________________________
>>>> SunRay-Users mailing list
>>>> SunRay-Users@filibeto.org
>>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>>> _______________________________________________
>>>> SunRay-Users mailing list
>>>> SunRay-Users@filibeto.org
>>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>>>
>>> _______________________________________________
>>> SunRay-Users mailing list
>>> SunRay-Users@filibeto.org
>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>> _______________________________________________
>>> SunRay-Users mailing list
>>> SunRay-Users@filibeto.org
>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>>
>>> ____________________________________________________________________
>>> __ This email has been scanned by the Symantec Email Security.cloud 
>>> service.
>>> For more information please visit 
>>> http://www.symanteccloud.com<http://www.symanteccloud.com/>
>>> ____________________________________________________________________
>>> __
>>>
>>> ____________________________________________________________________
>>> __ This email has been scanned by the Symantec Email Security.cloud 
>>> service.
>>> For more information please visit 
>>> http://www.symanteccloud.com<http://www.symanteccloud.com/>
>>> ____________________________________________________________________
>>> __
>>>
>>> _______________________________________________
>>> SunRay-Users mailing list
>>> SunRay-Users@filibeto.org
>>> http://www.filibeto.org/mailman/listinfo/sunray-users
>>>
>>>
>>
>
> --
> Tobi Oetiker, OETIKER+PARTNER AG, Aarweg 15 CH-4600 Olten, Switzerland 
> www.oetiker.ch<http://www.oetiker.ch/> t...@oetiker.ch +41 62 775 9902
>
> _______________________________________________
> SunRay-Users mailing list
> SunRay-Users@filibeto.org
> http://www.filibeto.org/mailman/listinfo/sunray-users
> _______________________________________________
> SunRay-Users mailing list
> SunRay-Users@filibeto.org
> http://www.filibeto.org/mailman/listinfo/sunray-users
>


_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com 
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________
_______________________________________________
SunRay-Users mailing list
SunRay-Users@filibeto.org
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to