JumpointGuide - BOMGAR

1 RemoteSupportJumpointGuide , :7/14/2020 TableofContentsRemoteSupportJumpointGuid e:UnattendedAccesstoComputersinaNetwork4 RecommendedStepstoImplementBeyondTrustJu mpTechnology5 UseJumpItemRolestoCreatePermissionSetsfo rJumpItems6 CreateJumpPoliciestoApplytoJumpItems7 UseJumpGroupstoDetermineWhichUsersCanAcc essWhichJumpItems8 RequirementsandConsiderationstoInstallaJ umpoint9 Prerequisites9 Considerations9 Security9 File/PrintSharing10 BeyondTrustConsiderations10 JumpointRequirements10 LocalJumpSessions-TargetSystemRequiremen ts10 RemoteJumpSessions-HostSystemRequirement s10 RemoteJumpSessions-TargetSystemRequireme nts11 ShellJumpSessions-HostSystemRequirements 11 ShellJumpSessions-TargetSystemRequiremen ts11vProSessions-HostSystemRequirements1 2vProSessions-TargetSystemRequirements12 LocalRDPS essions-TargetSystemRequirements12 RemoteRDPS essions-HostSystemRequirements12 RemoteRDPS essions-TargetSystemRequirements12 LocalVNCS essions-TargetSystemRequirements13 RemoteVNCS essions-HostSystemRequirements13 RemoteVNCS essions-TargetSystemRequirements13

2 ConfigureandInstallaJumpoint14 Configuration14 Download16 Installation17 Proxy18 Intel vPro20 , :7/14 :AddingNodes27 UseaJumpointtoJumptoaRemoteSystem28 StartaLocalorRemoteJumpSession28 StartaLocalorRemoteRDPS ession30 StartaLocalorRemoteVNCS ession32 StartaShellJumpSession33 StartanIntel vProSession35 UseJumpShortcutstoJumptoRemoteSystems37 CreateandUseRemoteorLocalJumpShortcuts43 CreateandUseLocalorRemoteRDPS hortcuts46 CreateandUseLocalorRemoteVNCS hortcuts50 CreateandUseShellJumpShortcuts53 CreateandUseIntelvProShortcuts55 UseCasesforJumpItemImplementation57 BasicUseCase57 AdvancedUseCase60 Appendix:RequireaTicketIDWorkflowforJump ItemAccess64 WhatUsersSee64 HowItWorks64 CreateaJumpPolicyRequiringTicketIDApprov al64 ConnectExternalTicketIDSystemtoJumpPolic ies65 API ApprovalRequest66 APIA pprovalResponse67 ErrorMessages67 Appendix:JumpointErrorMessageReference69 , :7/14 :UnattendedAccesstoComputersinaNetworkWi thBeyondTrustJumpTechnology,ausercanacce ssandcontrolremote, , , ,theBeyondTrustuser'scomputercaninitiate asessiontoaWindowssystemdirectlywithoutu singaJumpoint, ' , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDER ecommendedStepstoImplementBeyondTrustJum pTechnologyWhenworkingwithJumpTechnology , ,grouppolicies, ,see"UseJumpItemRolestoCreatePermissionS etsforJumpItems" ,see"CreateJumpPoliciestoApplytoJumpItem s" , , ,see"UseJumpGroupstoDetermineWhichUsersC anAccessWhichJumpItems" ,RemoteRDP,RemoteVNC,ShellJumps,andIntel ,LocalRDP, ,see"RequirementsandConsiderationstoInst allaJumpoint"onpage9and"ConfigureandInst allaJumpoint" >Jump> , ,see"UseJumpShortcutstoJumptoRemoteSyste ms" , :7/14 >JumpItemRolespageorfromtheUsers&Securit y> , ,frommostspecifictoleastspecific,is.

3 LTheroleassignedtotherelationshipbetween auserandaJumpGroupontheJump> > >UserspageortheUsers&Security> , ,determineifuserscancreateanddeployJumpI tems,moveJumpItemsfromoneJumpGrouptoanot her, ,checkanyofStartSessions,EditTag,EditCom ments,EditPublicPortal,EditJumpPolicy,Ed itSessionPolicy,EditConnectivityandAuthe ntication, , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEC reateJumpPoliciestoApplytoJumpItemsTocon trolaccesstoparticularJumpItems, ,gotoJump> , , , , , ,forinstance,thetimeissettostartat8amand endat5pm, ,however, , , , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEUseJumpGroupst oDetermineWhichUsersCanAccessWhichJumpIt emsAJumpGroupisawaytoorganizeJumpItems, > ,assigningitaname,codename, , 'sJumpItemRoletosettheirpermissionsspeci fictoJumpItemsinthisJumpGroup,oryoucanus etheuser'sdefaultJumpItemRoleassetontheU sers&Security>GroupPoliciespageortheUser s&Security> , ' ,gotoUsers&Security> ' ' ' , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDER equirementsandConsiderationstoInstallaJu mpointAJumpoint- ' ,oneorbothofthefollowingconditionsmustbe true: :RemoteJumpandmustbegrantedaccesstooneor moreJumpoints, ,theeasieritistomaintainalevelofintegrit ythatisinlinewithyourcompany' , ,BeyondTrustrecommendsusingadedicatedres ourceforaJumpointinordertodecreaseanypot entialsecurityrisks,increaseavailability , , , ,theBeyondTrustadministratorwouldneedtoi dentifyandcontrolanyunwantedchangestoorr epurposingoftheresourcebyothergroups, 'schangingthesystempermissionsordeleting neededfiles?

4 RemoteDesktopProtocol(RDP) , :7/14 , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEC onfigureandInstallaJumpointSetupofaJumpo intonaremotenetworkisamulti-stepprocesst hatincludesconfigurationonthe/logininter face,downloadingtheinstaller, ,itisimportanttounderstandthedifferenceb etweenclusteredJumpointsandstandaloneJum points,becausetheyhavedifferentfeaturese tsandbecauseaclusteredJumpointcannotbeco nvertedtostandalone, ,preventingthefailureofallJumpItemsassoc iatedwiththefailureofasingle,standaloneJ umpoint, , ,selectingtheBeyondTrustJumpointConfigur ationitemonthestartmenuoftheJumpointhost doesnotresultinaconfigurationwindow, ,RDP,VNC,ShellJump,andnormalJumpsessions areallsupportedwhenusingclusteredJumpoin ts;however, ,vProreimaging,JumpzoneProxy,TTL, ,gotoJump> , :7/14 , , , :AClusteredJumpointallowsyoutoinstallmul tiple, , ,preventingthefailureofallJumpItemsassoc iatedwiththefailureofasingle,standaloneJ umpoint, , ,aclusteredJumpointcannotbeconvertedtost andalone, :LinuxJumpointscanonlybeusedforRDP !

5 , ,pleasesee"ShellJump" , ,youcanalsograntaccesstogroupsofusersfro mUsers&Security> , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDENote:Onceyouha veinstalledtheJumpoint,thetablepopulates thehostnameofthehostsystem,aswellasthats ystem' 'shostsystemincaseyouneedtochangetheJump oint' , ,ausercanaccessasystemthroughaJumpointon lybyenteringthesystem' , , , ,findtheappropriateJumpointandclicktheli nktodownloadeitherthe32-bitor64-bitinsta llerfile( BOMGAR -jpt-{uid}.exe).Ifyouarec reatingaLinuxJumpoint, , , :IfyouneedtochangetheJumpoint'shostsyste m, , :TheJumpointEXEinstallercanbedeployedthr oughacommandlineinterfaceorasystemsmanag ementutility, ,the/soptioncanbespecifiedforasilentinst allation, , , :7/14 , , , :7/14 :\ProgramFiles\ BOMGAR \JumpointorC:\Progr amFiles(x86)\ BOMGAR \ , , :InthecaseofclusteredJumpoints, , ,youmayskipthefollowingstepsandgodirectl yto"ClusteredJumpointSetup:AddingNodes" , , ,ProxyPort,Username, , , :7/14 ,thisJumpointcanbeusedtoproxyconnections forcustomerclientsandJumpClientsonthenet workthatdonothaveanativeinternetconnecti on, , , :Inorderfora JumpointtofunctionasaJumpZoneProxyServer , , !

6 , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEI ntel ActiveManagementTechnology,privilegeduse rscansupportfullyprovisionedIntel vProWindowssystemsbelowtheOSlevel, vProtabandcheckingEnableIntel :ForarepresentativetouseIntel vProsupport,theymustbegrantedaccesstoaJu mpointwithIntel vProenabledandmusthavetheuseraccountperm issionAllowedJumpMethods:Intel , , , ,sincethevProAMTfirmwareisentirelysepara tefromanyuseraccountsonthecomputer, :Additionally, , , , ,representativesareneverpromptedforvProc redentials; , , , :7/14 , , , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDES hellJumpNote:WhileShellJumpcanbeenableda nddisabledfrom/loginforbothstandaloneJum pointsandclusteredJumpoints,furtherconfi gurationisavailableonlytostandaloneJumpo ints;therefore, :ShellJumpmustalsobeenabledontheJump> , ,ifOpenAccessisselected, ,representativescanShellJumptoprovisione ddevicesorcanenteradevice'shostnameorIPa ddress, , , :7/14 , , :7/14 ' , , , , , :7/14 , ,youcancheckStorekeyfilepasswordtosaveth epasswordforallrepresentativestouse, , :7/14 ' ,therepresentativereceivesamessagealerti ngthemthattheserver' '.

7 , ,selectDoNotActivateUntil, , ,selectAutomaticallyUninstallAt, , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEJ umpointSetupCompletionandRevisionAfterin stallingtheJumpoint, ,theconfigurationoptionscanbemodifiedbyl ocatingtheBomgarfolderintheWindowsAllPro gramsorProgramsandFeaturesmenu,openingth esitesubfolder, ,selectingtheBeyondTrustJumpointConfigur ationitemonthestartmenuoftheJumpointhost doesnotresultinaconfigurationwindow,ando nlyanAboutboxisshownClusteredJumpointSet up:AddingNodesThestepsforcreatingacluste redJumpointin/loginarethesameasforastand alone,withonlyonedifference:onceyouhavec reatedtheclusteredJumpoint, ,findtheappropriateJumpointandclicktheAd dNodelinktodownloadeitherthe32-bitor64-b itinstallerfile( BOMGAR -jpt-{uid}.exe). , , ,theclusteredJumpointnowshowsinformation abouteachinstallednode, ,noneofthenodesarevisible; , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEUseaJumpointto JumptoaRemoteSystemOnceaJumpointhasbeeni nstalledonaremotenetwork,permittedrepres entativescanusetheJumpointtoinitiatesess ionswithWindowsandLinuxcomputersonthatsa menetwork, ,apermittedrepresentativecanJumptocomput ersonthesamenetworksegmentastheirlocalsy stem, ,tostartaRemoteDesktopProtocolsessionorV NCsession,toShellJumptoaSSH-enabledorTel net-enablednetworkdevice,ortostartasessi onwithanIntel ,RDPsessions, :LinuxJumpointscanonlybeusedforRDP , , , :lTheSupportmenuoftherepresentativeconso lelTheStartbuttonatthetopoftherepresenta tiveconsolelTheJumpTobuttonatthetopofthe representativeconsoleFromtheJumpointdrop down, , ,pleaseseeCustomerClient:ModifytheInvita tionEmail,DisplayOptions, ,ifnetworkbrowsingisenabledfromthe/login >Jump>Jumpointpage,youcanclickthe[.]

8 ] , , :7/14 , , ,thesessioneitherstartsorcancels, :IfyouneedtoaccesssystemsthroughaJumpoin twhennouserisavailable, , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDES tartaLocalorRemoteRDPS essionUseBeyondTrusttostartaRemoteDeskto pProtocol(RDP) sessionsareconvertedtoBeyondTrustsession s,userscanshareortransfersessions, , , ,opentheRemoteDesktopProtocoldialogfrom: lTheSupportmenuoftherepresentativeconsol elTheRDPT obuttonatthetopoftherepresentativeconsol eFromtheJumpointdropdown, , ,theRDPserverlistensonport3389, ,additafterthehostnameorIPaddressinthefo rmof<hostname>:<port>or<ipaddress>:<port>(forexample, :40000).ProvidetheUsernametosigninas, ,selectVideoOptimized;otherwise,selectbe tweenBlackandWhite(useslessbandwidth),Fe wColors,MoreColors,orFullColor(usesmoreb andwidth). , 'scertificatecannotbeverified, , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEJumpItemsinclu deaCommentsfieldforanameordescription,wh ichmakessorting,searching, , , , ,captureascreenshotoftheremotedesktop, , , , , :7/14 ,userscanshareortransfersessions, , , ,opentheVNCdialogfrom:lTheSupportmenuoft herepresentativeconsolelTheVNCbuttonatth etopoftherepresentativeconsoleFromtheJum pointdropdown, , ,theVNCserverlistensonport5900,whichis,t herefore, , , , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDES tartaShellJumpSessionWithShellJump, ,runastandardizedscriptacrossmultiplesys temstoinstallaneededpatch, ,youmusthaveaccesstoaJumpointwithShellJu mpenabled, , , , , , , , , , , , ,youreceiveanalertthattheserver' ,thenthekeyiscachedontheJumpoint' , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEW henyouShellJumptoaremotedevice.

9 7/14/2020 REMOTESUPPORTJUMPOINTGUIDES tartanIntel vProSessionUsingIntel ActiveManagementTechnology,privilegeduse rscansupportfullyprovisionedIntel vProWindowssystemsbelowtheOSlevel, vPro,youmusthaveaccesstoaJumpointwithInt el vProenabledandmusthavetheuseraccountperm issionAllowedJumpMethods:Intel :WhilevProissupportedbyclusteredJumpoint s, vProsystem,opentheIntel vProdialogfrom:lTheSupportmenuoftherepre sentativeconsolelTheIntel vProbuttonatthetopoftherepresentativecon soleFromtheJumpointdropdown, , , ,providedduringeithertheJumpointconfigur ationortheJumpattempt,matchthecredential softhevPro-provisionedsystem, , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEO ncetheconnectionismade, vProsystems, , , , , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEUseJumpShortcu tstoJumptoRemoteSystemsCreateJumpShortcu tstostartstandardsupportsessions,tostart RemoteDesktopProtocolsessionsorVNCsessio ns,toShellJumptoSSH-enabledorTelnet-enab lednetworkdevices,ortostartIntel , >Jump> ,selectthetypeofJumpItemyouwishtoadd, , , , :Whenusingtheimportmethod, (optional) (optional) (optional) (optional) (optional) (optional) , :7/14 :Whenusingtheimportmethod, (optional) (optional) (optional) (optional) (optional) (optional) (optional) :Whenusingtheimportmethod, (optional) , :7/14 (optional) (optional) (optional) (optional) :Whenusingtheimportmethod, (optional) (optional) (optional) (optional) (optional) (optional) (optional) (2-bitgrayscaleforthelowestbandwidthcons umption),best_perf(default-8-bitcolorfor fastperformance),perf_and_qual(16.)

10 7/14/2020 REMOTESUPPORTJUMPOINTGUIDEP arameterDescriptionqualityimageandperfor mance),best_qual(32-bitforthehighestimag eresolution),orvideo_opt(VP9codecformore fluidvideo).Thiscannotbechangedduringthe remotedesktopprotocol(RDP) (optional)1 :Startsanewsession(default).IgnoreUntrus tedCertificate(optional)1 :Showsawarningiftheserver' :Whenusingtheimportmethod, (optional) (optional) (optional) (optional) (optional) (optional) (optional) (2-bitgrayscaleforthelowestbandwidthcons umption),best_perf(default-8-bitcolorfor fastperformance),perf_and_qual(16-bitfor mediumqualityimageandperformance),best_q ual(32-bitforthehighestimageresolution), orvideo_opt(VP9codecformorefluidvideo).T hiscannotbechangedduringtheremotedesktop protocol(RDP) (optional)1 :Startsanewsession(default).IgnoreUntrus tedCertificate(optional)1 :Showsawarningiftheserver' , :7/14/2020 REMOTESUPPORTJUMPOINTGUIDEP arameterDescriptionNote:Whenusingtheimpo rtmethod, (optional) (optional) (optional) (optional) (optional) (optional) (optional)Canbeeitherxterm(default) (optional) (default).