NetSupport Manager Gateway

Program & Documentation Copyright (c) 1990-2008

NetSupport Ltd.
All rights reserved.
NetSupport Manager Gateway Release Notes

2


Contents

License Agreement .................................................................................................3
What Is A NetSupport Manager Gateway? ..................................................................4
Installing the NetSupport Gateway............................................................................8
Setting up Clients to Use the Gateway.......................................................................9
Setting Up a Control to use the NetSupport Gateway (Windows Control)....................... 10
Setting Up a Control to use the NetSupport Gateway (Pocket PC Control) ..................... 11
Securing the NetSupport Gateway. ......................................................................... 13
Logging and Monitoring the NetSupport Gateway. ..................................................... 14
Contacting NetSupport .......................................................................................... 17


3
License Agreement
Please read this agreement before using your copy of NetSupport Software. This is a legal agreement
between you and NetSupport Ltd. If you do not wish to be bound by the terms of this licence
agreement you must not load, activate or use the software.

TERM: Subject to termination under Termination Clause below the Licence shall be perpetual.

GRANT OF LICENSE: This software is designed to run on standalone computers and computer
networks. You may load the software from a Network File server but you must purchase a license for
each workstation on which you will install or run the software.

COPYRIGHT: This software is protected by international copyright laws. You may copy it only for
backup purposes. The software is licensed to you, but not sold to you.

RESTRICTIONS: Neither you nor any reseller may rent, lease, sell licensed copies [on approval], or
otherwise transfer the right to use this software to another person, except that you may sell or give
away your original copy, as long as you do not keep any copies. The software may not be modified,
disassembled or reverse engineered except with the prior written consent of NetSupport Ltd.

LIMITED WARRANTY: NetSupport Ltd warrants that the Software will perform substantially in
accordance with the accompanying documentation for a period of ninety (90) days from the date of
purchase. NetSupport's entire liability and your exclusive remedy shall be either a) the replacement
of the defective software or b) return of the price paid. This remedy shall be at NetSupport's option
and subject to proof of purchase from an authorised source.

Any implied warranties including any warranties of quality or fitness for a particular purpose are
limited to the terms of the express warranties. NetSupport Ltd. shall not in any event be liable for loss
of profits, data or information of any kind or for special, incidental, consequential, indirect or other
similar damages arising from any breach of these warranties or use of the Software even if they have
been advised of the possibility of such damages. Some countries do not allow the limitation or
exclusion of incidental or consequential damages, so the above limitation or exclusion may not apply
to you. This warranty does not affect your statutory rights, and you may have other rights that vary
from country to country. In any event NetSupport's maximum liability shall not exceed the price paid
by the end-user / licensee.

TERMINATION: You may terminate this Licence and this Agreement at any time by destroying the
Program and its documentation, together with any copies in any form.

NetSupport Ltd. may terminate this Licence forthwith by notice in writing to you if you commit any
serious breach of any term of this Licence and (in the case of a breach capable of being remedied)
shall have failed within 30 days after receipt of a request in writing from NetSupport Ltd. so to do, to
remedy the breach (such request to contain a warning of NetSupport's intention to terminate). Upon
termination you will destroy or return to NetSupport Ltd the original and all copies of the software and
will confirm in writing to NetSupport Ltd that this has been done.

SUPPORT: If you have a problem with the installation of the software you should in the first instance
contact your supplier. You can separately purchase support and maintenance which will also cover the
supply of enhancements and upgrades.

GOVERNING LAW : This agreement shall be governed by the laws of England.

4

What Is A NetSupport Manager Gateway?
The NetSupport Gateway component provides a secure method to establish connections
between NetSupport Control and Client PCs via the Internet using the HTTP protocol,
providing web based remote control without the need for complex modifications to existing
Firewall configurations.

The Gateway handles communications between the NetSupport Control and Client PCs. As
there is no direct connection they can each be located behind a firewall configured to use
NAT (Network Address Translation) without the need to make configuration changes, to
the Firewall.

A NetSupport Client configured to use the HTTP Protocol connects to the Gateway at start-
up and maintains a secure connection to the Gateway. A Control with authorised access
can establish a HTTP connection on demand to the Gateway and Browse for a list of
available Clients to remote control.

In order for the Gateway to effectively connect a Client and Control, both must be able to
connect to the Gateway using the HTTP Protocol on the Gateways configured port. The
Default Port is 443 (previously 3085 for Manager 9.00 and below)

The Gateway can be located in various different Network locations as shown in the
following scenarios:

Scenario 1
NetSupport Gateway on the Public Internet.



In this scenario the NetSupport Gateway is installed on the Public Internet. No
Configuration changes would normally need to be made to either of the firewalls. However
the machine that is running the NetSupport Gateway is freely available on the Internet and
could be open to an attack.


5
Scenario 2
NetSupport Gateway on the Client Network.



In this scenario the firewall at the NetSupport Client site would need to be configured to
allow incoming HTTP Connections to the Gateway (on the NetSupport Gateways Configured
Port Number). This would be similar to having a Web server installed at the NetSupport
Clients Network and making this web server publicly available to users on the Internet.

The advantage of this location for the gateway is that the machine running the NetSupport
Gateway is now protected from attack by a firewall. However this configuration does
require some configuration changes to the firewall at the NetSupport Clients Site.

6
Scenario 3
NetSupport Gateway on a DMZ.



In this scenario the firewall at the NetSupport Control site would need to be configured to
allow incoming HTTP Connections to the Gateway (on the NetSupport Gateways Configured
Port Number). This would be similar to having a Web server installed on the DMZ and
making this web server publicly available to users on the Internet.

The advantage of this location for the Gateway is that the machine running the NetSupport
Gateway is now protected from attack by a firewall. However this configuration does
require some configuration changes to the firewall at the NetSupport Controls Site

7
Scenario 4
NetSupport Gateway on the NetSupport Clients Network with a NetSupport Control on the
public Internet.



In this scenario the firewall at the NetSupport Client site would need to be configured to
allow incoming HTTP Connections to the Gateway (on the NetSupport Gateways Configured
Port Number). This would be similar to having a Web server installed at the NetSupport
Clients Network and making this web server publicly available to users on the Internet.
This Example could be used to provide remote access to users working from home.


8
Installing the NetSupport Gateway
The NetSupport Gateway can only be used on an NT based Operating System (Win2k, NT,
XP) as the NetSupport Gateway installs as a service.

The Gateway is not installed by default. To install the NetSupport Gateway run the
standard NetSupport Manager for Windows Installation package. When prompted for an
installation type, select Custom. When prompted to select from the list of available
components select Gateway and continue through the installation.

At the end of the Installation the NetSupport Gateway Configuration Utility will run
as shown below:



Here you can set the Port Number that the Gateway will accept connections on. The
Default Port is 443. You can also specify the location and maximum size of the Gateways
log file. The Logging functions of the Gateway are explained in detail later in this
document.

You can also add a Gateway Key. Gateway keys are used to authenticate NetSupport
Clients and Controls, therefore ensuring that unauthorised users cannot use the Gateway.

You must set at least one Gateway Key before you can apply the configuration, the
Gateway will not accept any connections unless at least one Gateway Key is configured.

To enhance security you can restrict remote control access to specific users by entering a
username and password.

You can also set up a secondary Gateway, to use as a backup when the primary Gateway
is not available.

9
Setting up Clients to Use the Gateway
To configure a Client to use the HTTP protocol you will need to run the NetSupport
Configurator.

Note: If you are running the NetSupport client on a Pocket PC device you will need to
run the NetSupport Configurator on the Host PC {Start}-{Programs}-
{NetSupport Manager for Pocket PC 2003}-{Client Configuration}.

1. Select {Connectivity}{HTTP}.



2. Check the Use HTTP option and confirm the Port Number, 443 being the NetSupport
default.
3. Enter the IP address of the NetSupport Gateway. If required, enter the IP address of
the secondary Gateway.
4. Press the Set Button to set a Gateway Key. The key you set must be identical to one
of the Gateway Keys added to the Gateway.
5. Proxy Server settings can be set if the client needs to access the Gateway via a Proxy
Server.
6. You can override the CMPI that is set at a Gateway by entering a value here.

Once you have completed the configuration save the configuration and restart the
NetSupport Client. The Client will then attempt to connect to the Gateway on start-up.

The entire configuration for a NetSupport Client is stored in the Configuration file and this
can be easily copied or Deployed (Using NetSupport Deploy) to other NetSupport Clients,
for further details please refer to the Online Help or Manual.


10
Setting Up a Control to use the NetSupport Gateway (Windows Control)
Before you can connect to a NetSupport Client using a NetSupport Gateway you must add
the Gateway definition to your NetSupport Control. To do this, follow the steps below.

1. Run the NetSupport Control.

2. In the left hand pane select the I nternet Gateways Group.
3. Double click on the Add a Gateway Icon.
4. Enter a Name and Description for the Gateway, click Next.
5. Enter the IP Address of the Gateway and the Port that the gateway is configured for
(Default is 443), if required, enter the IP address of the secondary Gateway. Click
Next.
6. You can optionally add Proxy Server settings. Required if the Control program needs to
access the Gateway via a proxy Server.
7. At the next step press the Set button and set the Gateway Key that you will use.
8. To restrict the remote control access to specified users, enter a username and
password.
9. Click Finish to save the new Gateway definition.

Note: If the Gateway is configured with multiple Gateway Keys, when you browse for
clients on this Gateway you will only see Clients that are using the same
Gateway Key that you enter here.

You can have multiple gateways configured in your NetSupport Control with the same IP
address but different Gateway Keys.

Once you have a Gateway Configured in your control you can Browse the Gateway for a
list of connected Clients.

11
Setting Up a Control to use the NetSupport Gateway (Pocket PC Control)
1. Load the Control program.
2. Select the Commands Options



3. On the Gateways tab tick to enable Gateway support.
4. Set the Default Port number to be used when Adding Gateway configurations.
5. Double Click to Add Gateway



6. Enter a suitable name and description to identify the Gateway PC.
7. Enter the IP Address of the Gateway.
8. Enter the Port that the Gateway is configured for (Default is 443)

Note: It is recommended that NetSupport Manager Gateway Version 9.10 or above is
used with Pocket PC devices.

9. Press the Edit Button and set the Gateway Key. This needs to match a corresponding
key configured on the Gateway PC.
10. Proxy Server settings can be entered if the Control program needs to access the
Gateway PC via a Proxy Server


12
To Browse a Gateway PC for available clients

1. Load the Control program.
2. Select Commands - Browse.



3. Optionally enter a partial client name to filter the browse list.
4. Double Click on the Gateway to browse for clients.
5. Double Click on the client in the browse list to remote control










13
Securing the NetSupport Gateway.
The Gateway will support multiple Gateway keys, each key must be a minimum of 8
characters, and Gateway Keys can be added to the Gateway dynamically without
disrupting any Current Connections.

The Gateway will not accept connections from a NetSupport Control or Client unless a
Gateway key configured at the NetSupport Client or NetSupport Control has also been
entered at the Gateway.

Clients support one key only and the Control is able to support multiple Gateways with
different keys, all Gateway Key data is sent encrypted between the Client, Control and
Gateway. Once connected to the Gateway all Client and Control security such as user
names, Security Keys etc will function normally.

A Control can only connect and Browse for clients that are using the same Gateway Key as
the Control.

Gateway Key connection Matrix

Control Gateway
Key
Gateway Gateway
Keys
Client Gateway Key Result
Testing1 Testing2 Test1 No Connection from client
or control
Testing2 Testing1
Testing2
Testing1 Client connects to gateway
but Control can not
connect to this client or
see the client in a browse
Testing1 Testing1 Testing1 Client connects, Control
can connect to the Client
and see the Client in a
browse
Testing2 Testing1 Testing2 No Connection from client
or control
Testing2 Testing1
Testing2
Test3
Testing2 Client connects, Control
can connect to the Client
and see the Client in a
browse


14
Logging and Monitoring the NetSupport Gateway.
The Gateway runs as a service and is displayed as an icon is the system tray. If you right-
click on this Icon a shortcut menu is displayed giving options to Open, Configure or
About

If you select Open the NetSupport Gateway Status window is displayed.

The Clients Tab will show a list of all the NetSupport Clients currently connected to this
Gateway.



The Active sessions tab displays a list of current connections between a NetSupport
Control and a NetSupport Client with the date and time that the connection started.


The NetSupport Gateway creates a log file that records activity through the Gateway. The
log file name is gw001.log and is stored in the locations specified in the Gateway
configuration dialog.

Gw001.log Example
08-Dec-02, 16:11:20, NetSupport V8.00, running on Windows NT 5.0 (build 2195),
platform 2
08-Dec-02, 16:11:20, Gateway started, Max. Licensed connections: 5, Listening port: 80
08-Dec-02, 16:15:32, Gateway stopped


15

The following is a list of Events that are logged to the NetSupport Gateway Log File

<product_name> <product_version>, running on <operating_system>
<operating_system_version> <operating_system_ service_pack> (build
<build_number>), platform <platform_number>

This event is logged when the Gateway is first started. A typical example would be as
follows:

NetSupport V8.00D, running on Windows NT 5.0 Service Pack 3 (build 2195), platform 2
Gateway started. Mac licensed connections: <max_connections>

This event is logged when the Gateway is first started.
Failed to start gateway

This event is logged when the Gateway fails to start.
Gateway stopped

This event is logged when the Gateway is stopped.
Listening on port <port_number>

This event is logged when the Gateway starts listening on the specified port. This
occurs during start-up and when a change in the Gateway port is applied in the
Gateway Configurator.
Listening on port <port_number>

This event is logged when the Gateway starts listening on the specified port. This occurs
during start-up and when a change in the Gateway port is applied in the Gateway
Configurator.
Failed to bind to listening port <port_number>

This event is logged when the Gateway fails to assign the specified port to listen
for incoming connections. The port is probably being used by another application.
Reloading configuration

This event is logged by the Gateway when the administrator has used the
Gateway Configurator to apply configuration changes.
Listen port has changed. All current connections and sessions will be terminated.

This event is logged by the Gateway when the administrator modifies the listening port in
the Gateway Configurator and then applies the change whilst the gateway is running.

16
Reloading Gateway Keys

This event is logged by the Gateway when the administrator has used the Gateway
Configurator to apply configuration changes which may have included additions or
removals to the list of Gateway keys.
Client <clientname> connected

This event is logged when a Client connects to the Gateway
Client <clientname> disconnected

This event is logged when a Client disconnect from the Gateway.
Control <controlname> connected to Client <clientname>

This event is logged when a Control connects to a Client.
Control <controlname> disconnected from Client <clientname>

This event is logged when a Control disconnects from a Client.
Licence exceed. Rejecting connection from Client <clientname>
(<real_ip_address>, <public_ip_address>)

This event is logged when a client connecting to the Gateway would exceed the licensed
number of Clients.
Security check failed for Client <clientname> (<real_ip_address>). Terminating
connection from <public_ip_address>

This event is logged when a new Client connection fails to provide a valid
Gateway Key.
Security check failed for control browse. Terminating connection from
<public_ip_address>

This event is logged when a Control fails to provide a valid Gateway Key during a browse
Clients request.
Security check failed for Control <controlname>. Rejecting connection request to
Client <clientname> from <public_ip_address>

This event is logged when a control fails to provide a valid Gateway Key during a
connection request to a Client.
Client/Control security check failed for Control <controlname>. Rejecting
connection request to Client <clientname> from <public_ip_address>

This event is logged when the Gateway Key provided by the Control during a connection
request to a client does not match the Gateway Key supplied by the Client.




17

Contacting NetSupport
If you have any comments regarding the design, installation, configuration, or operation of
this package please contact us.

UK & International
www.netsupportsoftware.com
Technical Support: [email protected]
Sales (UK & Eire): [email protected]
Sales (International): [email protected]

North America
www.netsupport-inc.com
Technical Support: [email protected]
Sales: [email protected]

Germany, Austria and Switzerland
www.pci-software.de
Technical Support: [email protected]
Sales: [email protected]

Japan
www.pcip.co.jp
Technical Support: [email protected]
Sales: [email protected]