HOB Wake-on-LAN Relay

Booting Remote-PCs via the Wake-on-LAN Function

Overview

HOB Wake-on-LAN Relay is a hardware-based enhancement for HOB Desktop-on-Demand. HOB Desktop-on-Demand provides secure remote access to Windows workstations over the Internet or a local network. A special advantage of HOB Desktop-on-Demand is that it priovides access to computers that are not currently running, i.e., it can remotely boot them.

HOB Desktop-on-Demand is a component of HOB RD VPN, a comprehensive solution that enables efficient and secure remote access for all of your remote computing needs. The HOB Wake-on-LAN Relay is a small, energy-saving embedded Linux computer. It ensures that HOB RD VPN - Desktop-on-Demand can always activate the target PC via Wake-on-LAN .

The Wake-on-LAN Relay is the ideal complement to HOB RD VPN. The proven HOB RD VPN approach to secure remote access with mobile applications contains a central, intelligent management solution.It forms the foundation for highly secure communication and the transfer of sensitive corporate data. This HOB solution provides the components for easy, secure and flexible access to enterprise data and applications running on a PC. HOB Wake-on-LAN Relay enables switching-on of a remote PC even when HOB RD VPN (HOB WebSecureProxy) and HOB Wake-on-LAN Relay are placed in different sub-networks. As HOB RD VPN (HOB WebSecurePrxoxy) is usually installed in the DMZ (Demilitarized Zone), this is the normal case.

Advantages

• Energy saving mini-PC for continuous operation

• Can be used without installation on the client device

• Easy to use GUI

• Simple and secure access to the enterprise network

• Fully integrated in the HOB RD VPN solution for secure remote access

How Does HOB Wake-on-LAN Relay Work?

After a user has successfully authenticated himself, via a browser, to the WSP (HOB WebSecureProxy) and (optionally after selecting the target server) wants to access his desktop PC, the WSP sends a Wake-on-LAN Packet to the user's desktop PC. Wake-on-LAN is a technology that was introduced in 1995 and is now integrated into almost all PCs (or their network cards).

Wake-on-LAN Packets have to be sent as a UDP broadcast. If the WSPis in the DMZ, it could be that broadcast packets to the internal network are blocked by the firewall. There is a solution for this: The WSP can also send IP Unicast Packets, which transit the firewall easily and are then converted by Wake-on-LAN Relay into Broadcast Packets.

The Wake-on-LAN Relay is available as either platform independent software (Java) for installation on any server in the enterprise entwork (this server must be left running), or as a hardware solution where the Wake-on-LAN Relay is pre-installed on a small, energy-saving embedded Linux computer.

When a PC is switched on via Wake-on-LAN, it boots and, after a short delay, the RDP services are also initiated. The Java RDP client, HOBLink JWT, waits until the WSP establishes a session with the desktop PC. The user is shown the progress.

With Windows 7, it takes about one minute until the PC is fully booted, the OS starts and the RDP service is ready. If the user needs faster access, then the PC is not completely shut off, rather the Windows function SUSPEND is used. All applications remain active, but the PC does not draw any more current. If, in this case, the the network card receives a Wake-on-LAN packet, Windows only has to execute RESUME and the user can work after a short time where he left off. If the desktop PC is already running, the user will immediately get a session.

JR 01.07.11