zGateway Components
zGateway OS 5 is a security hardened, enterprise class Linux Distribution derived from CentOS. zGateway OS hosts the required services for running zGateway Server and is maintained by AmZetta Development Team.
When installed, zGateway OS has a small menu driven interface to manage host configuration like network settings modifications or reinstallation of firmware.
zGateway OS comes on an integrated installer CD or bootable USB drive. The integrated installer is a single click OS installer which also installs the zGateway software.
Note: Installing the zGateway OS will erase all existing data off your system without asking about details of partition.
zGateway is available as a virtual appliance as well as a software only option.
ZGATEWAY
zGateway is a highly scalable service that provides secure access to corporate applications for users. zGateway is responsible for:-
1. Encryption/Decryption of all VPN traffic
2. Session Management
3. Application Proxy
4. Policy Management
5. Tow factor authentication (OTP)
6. Audit logging
zGateway is highly scalable in terms of number of users it can handle. It can go from 10 to thousands of users utilizing minimum amounts of hardware resources.
zGateway comprises of a TLS enabled web server, policy engine, configuration database and logger module.
ZGATEWAY MANAGEMENT CONSOLE
zGateway has a web based management console for easy and centralized user management, session management, and policy management and server configuration control. The console also provides a graphical dashboard showing live users, license usage, resource
zGateway OS 5.0 is based on CentOS 7.2 distribution.
usage and important gateway information. Reports of user activity can be generated and downloaded. The management console has built in granular administrative roles. There are two types of administrators namely Security officers and Administrators. Both security officers and administrators must login using certificates generated from the console.
zGateway management console can be accessed through the Web Portal or zGateway Desktop Client login methods.
ZGATEWAY ACCESS METHOD
There are two following access for users to login into zGateway and access applications.
zGateway Hybrid Portal
zGateway Hybrid Web Portal is a browser based access mode. Users can access the portal by browsing to https://zgateway_ip_address/ or https://<zgateway_hostname>/. Users can use a browser to login to zGateway and access the applications listed on the portal.
zGateway Hybrid portal requires zGateway client installed on user machine. Hybrid portal uses the zGateway client to enable secure access to applications.
Following is the work flow of Hybrid application:
1. When user logs in Hybrid portal, portal detects if zGateway client is already installed or no on the machine.
2. Hybrid portal waits for zGateway client to start.
3. If zGateway client is not installed, Hybrid portal will prompt the user to download the client.
4. User has to click to download the client and run the installer.
5. Once installed, the Hybrid portal detects the client and logs the user in.
The following types of applications are listed on the portal:
1. Web applications
2. zPortal published applications and Virtual Desktops
3. Microsoft Remote Desktop Based Applications
4. Any locally installed client-server application, like SSH, FTP, other business applications
Note: A user may have access to more client-server applications which are not displayed on Web Portal.
Hybrid portal is supported on following platforms:
Operating System: Microsoft Windows 7, Windows 8, Windows 10
Browser: Internet Explorer 9 or above, Chrome, Firefox
zGateway Client for Desktops
zGateway Desktop Client is a small footprint self-upgrading client that is used to login to zGateway server without having to use a web browser. The zGateway Client for Desktop supports Microsoft Windows 7 and newer operating systems as well as non-Windows platforms such as Mac and Linux OS.
The zGateway client can be installed from zGateway web portal as part of Hybrid portal or can be downloaded and installed from a URL from zGateway or even from www.amzetta.com.
There are two types of zGateway client for desktops:
zGateway Client
zGateway On-Demand Client
zGateway Client
zGateway client is a full functionality client for desktops which requires administrative rights on end user PC. This client installs a kernel driver or a layered service provider module for traffic filtering.
zGateway client can support all types of applications supported by zGateway.
zGateway client is supported on following platforms:
Operating System: Microsoft Windows 7, Windows 8/8.1, Windows 10, Windows Server 2008 R2, Server 2012 R2, Ubuntu 12.04, Ubuntu 16.04, Mac OSX 10.4 and above.
Both 32bit and 64bit platforms are supported for above operating systems.
zGateway On-Demand Client
zGateway On-Demand client is a client that does not require admin rights on the end user machine. zGateway client does not install itself in program files directory and does not install any component that require admin rights on user PC.
zGateway client cannot support following type of applications:
Applications that runs a Windows service which uses network
Application that uses a kernel mode driver for networking, for e.g. file share
zGateway On-Demand client is supported on following platforms:
Operating System: Microsoft Windows 7, Windows 8/8.1, Windows 10, Windows Server 2008 R2, Server 2012 R2. Both 32bit and 64bit platforms are supported for above operating systems.