Installing X2Go NX Server on Linux Mint 17.2
-
NTG Does this.... we provide 100% of employee gear from desktops to laptops even to cell phones. But we treat that equipment as BYOD and wall it off from the systems. If @Minion-Queen gets ransomware, she can't infect me or vice versa. We are always isolated.
-
@scottalanmiller said:
NTG Does this.... we provide 100% of employee gear from desktops to laptops even to cell phones. But we treat that equipment as BYOD and wall it off from the systems. If @Minion-Queen gets ransomware, she can't infect me or vice versa. We are always isolated.
I thought you guys used pertino?
-
@johnhooks said:
I thought you guys used pertino?
We used to, Windows 10 made that redundant and so we've phased it out for security reasons. AD doesn't need a VPN anymore, so no need to carry that kind of risk for authentication.
-
@scottalanmiller said:
We used to, Windows 10 made that redundant and so we've phased it out for security reasons. AD doesn't need a VPN anymore, so no need to carry that kind of risk for authentication.
Which means now that all of the remote workers do everything via X2Go / RDP / SSH ?
-
@dafyre said:
Which means now that all of the remote workers do everything via X2Go / RDP / SSH ?
No, we only do that for accessing clients' networks so that we are not cross exposing. We communicate with each other through applications like Skype, Office 365, ownCloud, etc. We work locally but store remotely.
-
So what do you do when you need to access a resource inside NTG while you are bouncing all over the planet?
IE: How is it that you are able to connect to the Lab and manage the Scale systems?
-
@dafyre said:
So what do you do when you need to access a resource inside NTG while you are bouncing all over the planet?
What does "inside" mean to you? Everything is SaaS, we have no legacy apps.
-
@dafyre said:
IE: How is it that you are able to connect to the Lab and manage the Scale systems?
The Lab is a separate entity, we would never comingle the lab with the corporate network. So we treat it just like any customer, it's NX to reach it.
-
@johnhooks just had a thought... and it got me to wondering..
What about ownCloud. Assuming you guys share files back and forth... Do you block any types of files with it? If somebody puts a trojan or worm or other nasty in ownCloud and you are all sharing folders, everybody gets that file.
(Assume AV doesn't catch the trojan )
Aren't you guys still sharing the same type of risk, despite being isolated?
-
@scottalanmiller said:
@dafyre said:
IE: How is it that you are able to connect to the Lab and manage the Scale systems?
The Lab is a separate entity, we would never comingle the lab with the corporate network. So we treat it just like any customer, it's NX to reach it.
If that's the case, do you even really need anything other than a laptop that is capable of connecting to a Terminal Server to get you access to your work environment?
Why run email, et al, all on your laptop, when you can just remote into a server and do it there?
-
@dafyre said:
What about ownCloud. Assuming you guys share files back and forth... Do you block any types of files with it? If somebody puts a trojan or worm or other nasty in ownCloud and you are all sharing folders, everybody gets that file.
That would only happen if someone uploaded a Trojan AND shared it to people AND people decided to download it. It's not completely foolproof but it provides many layers and steps of protection that SMB shares do not.
-
@scottalanmiller You guys do not use the OwnCloud client app?
-
@dafyre said:
Aren't you guys still sharing the same type of risk, despite being isolated?
Number of shared files are extremely limited. Nearly all files are shared via applications and so do not pose those kinds of risks since they are never used in a local way that could execute them.
-
@dafyre said:
If that's the case, do you even really need anything other than a laptop that is capable of connecting to a Terminal Server to get you access to your work environment?
Don't even need that. Only need access to a terminal server if connecting to someone else's environment.
-
@dafyre said:
Why run email, et al, all on your laptop, when you can just remote into a server and do it there?
Because a web browser locally is more efficient.
-
-
@scottalanmiller said:
@dafyre said:
If that's the case, do you even really need anything other than a laptop that is capable of connecting to a Terminal Server to get you access to your work environment?
Don't even need that. Only need access to a terminal server if connecting to someone else's environment.
I just want an NX client for chromebooks. That would be perfect.
-
@johnhooks said:
@scottalanmiller said:
@dafyre said:
If that's the case, do you even really need anything other than a laptop that is capable of connecting to a Terminal Server to get you access to your work environment?
Don't even need that. Only need access to a terminal server if connecting to someone else's environment.
I just want an NX client for chromebooks. That would be perfect.
Yeah, that would be great. A Skype client would be nice too.
-
@scottalanmiller said:
@johnhooks said:
@scottalanmiller said:
@dafyre said:
If that's the case, do you even really need anything other than a laptop that is capable of connecting to a Terminal Server to get you access to your work environment?
Don't even need that. Only need access to a terminal server if connecting to someone else's environment.
I just want an NX client for chromebooks. That would be perfect.
Yeah, that would be great. A Skype client would be nice too.
I'm going to get one here at some point. I'll turn on developer mode and then I can use x2go. It would be nice to have one without needing that though.
-
@scottalanmiller @johnhooks Have you guys considered the Web Skype client?
I dont' know anything about it, but I do know they are working on one.
