GINAonce server

Intended to allow system administrators complete control ICA and RDP connections to your Terminal Servers. Control access on IP SUbnet, NT Group, Username, Terminal Name. Control which group of clients (by IP address), selectively allow Published Application usage, Interactive Logons, block command line parameter usage in clients and much more. FeaturesApplication ModelGINAonce is designed to be installed seperatly onto each Terminal Server / Citrix Server you wish to control logons too. It`s flexible design allow`s complete control over logon events, number of concurrent logons and potential sources for hack attempts. Logon MethodsOn a Terminal Server there are 2 kinds of logon, Interactive ie. normal desktop and Initial Program ie. the client can specify what application to run once valid logon credentials are specified. With Citrix there is a 3rd kind of logon, that being Published Applications. In an ideal world all connections would be Published ie. known applications. However, in Reality this is never the case and selecting only allow published applications in the Citrix Connection Configuration screen is not that flexible. Once selected even administrators cannot logon interactively from a workstation, thus reducing the amount of support you can give, unless you also publish a desktop from each server. Default ConfigurationThe Default configuration allows you to block access to each of the logon types (defined above), define maximum concurrent logons etc. This way you can have internet facing servers knowing that they cannot be subject to either interactive logon or initial program specification, in otherwords they are always only going to allow access to a specific single defined published application. GINAonce allows you to control access in the following ways on an IP subnet basis interactive / initial command / published application control maximum number of logons per server maximum number of logons per user