In upKeeper 4.9 we have integrated UltraVNC as a remote tool. The integration is optional and can be used in the entire environment, some organisations or on single computers.
Tested with: UltraVNC 1.3.2.0, UltraVNC 1.3.4.2
Integration
upKeeper 4.9 client will detect if UltraVNC files is located at a specific path on the computer when the client service is started. Path where upKeeper search for UltraVNC is specified in the organisation configuration (see image below). If UltraVNC is installed or files are located at an unknown path upKeeper will not find or detect the program.
When upKeeper detects the UltraVNC it will write the specified configuration to the UltraVNC.ini file. The configuration should be setup in the most secure way possible and the following configuration should be seen as a good start. Configuration can be made using UltraVNC settings tool.
See this picture at full resolution
UltraVNC Repeater
UltraVNC Repeater acts like a proxy between the server and viewer. UltraVNC Repeater should be running on a server accessible from internet on a known address (myUltraVncRepeater.com) over the selected network ports (default TCP5901 and TCP5501). All data are transferred thru the repeater meaning that the viewer and server can both be behind NAT firewalls. UltraVNC runs as a program but can be converted to a service with third party tool.
UltraVNC Viewer Command
Ultra VNC Viewer is the path to Ultra VNC on the administrator’s computer. You must specify the full path to the exe file. To get everything to work you must include parameters for proxy and id according to the example below.
"%PROGRAMFILES%\uvnc bvba\UltraVNC\Vncviewer.exe" -proxy myUltraVncRepeater.com:5901 id:SESSIONID
Important to include space char after the property “-proxy”.
UltraVNC Server Command
Ultra VNC Server is the path to Ultra VNC on the client computer and where upKeeper will look for the files. You must specify the full path to winvnc.exe according to example below. For the integration with upKeeper to work seamless you have to include the properties “-id” and “-connect”
"%PROGRAMFILES%\uvnc bvba\UltraVNC\winvnc.exe" -sc_prompt -sc_exit -id:SESSIONID -connect myUltraVncRepeater.com -run
Important to include space char after “-connect”.
UltraVNC settings file
It is important to configure the Ultra VNC Server so that it is as secure as possible. With the UltraVNC settings application (see image below) included in the downloaded files you can build your own configuration file saved locally in UltraVNC.ini. Ini settings shall be included in Ultra VNC Server INI file settings under Remote in the upKeeper. Any settings specified will be used on the client side.
If you are about to build your on settings file you should pay special attention to the Network part where you should disable incoming connection by uncheck “Enable incoming port”
We have included a settings file (see attachments) that can used for Proof-Of-Concept and testing but should be readvised before used in production.
Comments
1 comment
Documented configuration does not work with newer version than 1.3.4.2. We are testing new configuration and will posted as soon as we have made all tests.
Please sign in to leave a comment.