[X2Go-Commits] [[X2Go Wiki]] page changed: doc:success-stories:electronic-glovebox

wiki-admin at x2go.org wiki-admin at x2go.org
Mon Mar 27 17:26:56 CEST 2017


A page in your DokuWiki was added or changed. Here are the details:

Date        : 2017/03/27 15:26
Browser     : Mozilla/5.0 (Windows NT 6.1; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0
IP-Address  : 78.43.91.217
Hostname    : HSI-KBW-078-043-091-217.hsi4.kabel-badenwuerttemberg.de
Old Revision: http://wiki.x2go.org/doku.php/doc:success-stories:electronic-glovebox?rev=1484585031
New Revision: http://wiki.x2go.org/doku.php/doc:success-stories:electronic-glovebox
Edit Summary: Updated to current hardware specs
User        : stefanbaur

@@ -10,9 +10,9 @@
  It places a terminal server (in our case, a Linux box running X2Go) in a demilitarized zone (DMZ) between two firewalls. This terminal server may freely surf the net, but it cannot initiate "downstream" connections towards the LAN. From the LAN side, it is possible to connect "upstream" to the terminal server (in our case, via X2Go/SSH), but direct outbound connections to the Internet are blocked by default.
  
  Where we're
diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go terminal server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist "safe" domains like microsoft and antivirus updates, or online banking portals, and access those using your locally installed browser or online banking software (which makes more sense from a security standpoint, if you think about it).
  
- While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case with enough CPU and RAM for up to 5 concurrent users. A picture, showing the box on top of a stack of copy paper for easy size comparison, is available
[[http://www.baur-itcs.de/20-servermodelle/10-lexcomputechtwister|here]].
+ While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case (taking up less space than a stack of copy paper) with enough CPU and RAM for up to 10 concurrent users.
  
  This allows us to offer an affordable solution even for small offices like a general practicioner's office.
  
  Obviously, there is a high demand for data protection solutions in the healthcare sector (as probably everyone can understand immediately), and this is where we've sold quite a number of Electronic GloveBoxes so far. Of course, it could also be used by lawyers, product designers (think industrial espionage), and similar professions where you just don't want to see your customer records/confidential data leaked onto the Internet.


-- 
This mail was generated
by DokuWiki at
http://wiki.x2go.org/



More information about the x2go-commits mailing list