This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
doc:success-stories:electronic-glovebox [2013/03/13 10:44] sunweaver |
doc:success-stories:electronic-glovebox [2013/11/20 10:06] stefanbaur |
||
---|---|---|---|
Line 1: | Line 1: | ||
- | ====== X2Go in Doctor' | ||
- | //Shared by Stefan Baur// | + | ====== X2Go at the Doctor' |
- | The Electronic Glovebox is a firewall system targetting at connecting a general practitioner' | + | //Shared by Stefan Baur, [[http:// |
- | The Electronic Glovebox | + | The Electronic Glovebox |
- | X2Go Client uses the X2Go Published Applications feature | + | ReCoBS is a security concept designed by the German Federal Office |
- | Please visit my site for further information and two view a screencast. | + | It places a Terminal Server (in our case, a Linux box running X2Go) in a demilitarized zone (DMZ) between two Firewalls. This Terminal Server may freely surf the net, but it cannot initiate " |
+ | |||
+ | Where we're diverting from the standard ReCoBS approach is that we're using a single firewall with a third ethernet port for the DMZ, and we're running both the firewall and the X2Go Terminal Server as virtual machines on a stripped down Debian Linux with KVM. Also, we're providing a web proxy server with a default deny policy, so that you can whitelist " | ||
+ | |||
+ | While the system isn't limited to a particular hardware configuration (we've shipped regular midi-tower cases as well as 19", 1HU rack-mount servers), our standard model is a fanless (i.e. entirely passively cooled), very compact case with enough CPU and RAM for up to 5 concurrent users. A picture, showing the box on top of a stack of copy paper for easy size comparison, is available here: [[http:// | ||
+ | |||
+ | This allows us to offer an affordable solution even for small offices like a general practicioner' | ||
+ | |||
+ | Obviously, there is a high demand for data protection solutions in the healthcare sector (as probably everyone can understand immediately), | ||
+ | |||
+ | To provide a good user experience, we're using the X2Go Published Applications feature of the X2Go Client for providing the applications to the user - in fact, we're the ones who [[doc: | ||
+ | |||
+ | What we're publishing is a minimal set of internet applications (browser, mail client, PDF Viewer and Open Office), accessible via right-click on the X2Go icon in the taskbar. | ||
+ | |||
+ | Thanks to the Published Application Mode, these applications interact with the Desktop as if they were installed locally on the machine, there is no annoying full-desktop window that you need to drag out of the way to access your local applications, | ||
+ | |||
+ | Please visit our website | ||
* Overview: [[http:// | * Overview: [[http:// | ||
* Screencast: [[http:// | * Screencast: [[http:// | ||
+ | * e-Mail: [[mailto: | ||
+ | ---- | ||
+ | Kudos to [[http:// |