PC Emulator on Cisco Secure Desktop

[dianewalker]

We have an ASA 5550.  We need to install Host Explorer software on each computer so that the users can do payroll on the Mainframe.  Is it possible to setup this software on the Cisco Secure Desktop using SSL client so that we do not need to install Host Explorer on each computer?

Thanks.

Diane

[Jennifer Halim · Accepted solution]

No, you can not use CSD to install software that you would like to install. CSD provides virtual desktop to provide secure environment when you are connecting through VPN/SSL. CSD does not act like citrix or RDP unfortunately.

[dianewalker]

Halijenn,

Thanks for your response and information.  I still don't quite understand CSD.  Can you give me an example when you would use CSD?  Can you access Microsoft Outlook on CSD?

Thanks.

Diane

[Jennifer Halim]

CSD feature is designed for user who VPN in to the office from internet cafe. Internet cafe PC is deemed to be unsecure, so CSD creates a virtual partition on that internet cafe PC, so nothing from the PC can be transfered to your office that might infect the office network. CSD is designed to provide extra security, not as an environment that you can install software.

Here are the security features which CSD supports:

- Host Scan

- Secure Desktop vault

- Cache Cleaner

- Prelogin assessment

- Keystroke logger

More details on CSD here:

http://www.cisco.com/en/US/docs/security/csd/csd35/configuration/guide/CSDintro.html

[dianewalker]

Halijenn

Thanks again for taking time to explain CSD.  I assume this is how CSD works.  The user logins to SSL client.  Then, CSD does security check (host scan, secure desktop vault, etc.).  Then, if the computer is OK, the user can now login the PC Emulator software to do payroll.  If there is a problem with the computer after security check, the user will not be able to login to the PC Emulator software to do payroll.

Thanks.

Diane

[dianewalker]

Halijenn,

Is there a way to access the Host Explorer or Microsoft Outlook without installing client through VPN?

Thanks.

Diane

[Jennifer Halim · Accepted solution]

No, each application software needs to be installed on the PC prior to connecting via VPN.

[dianewalker]

Thanks very much, Halijenn for your response.

Diane