Parallels RAS User Portal

User Portal enables clientless remote access to Parallels RAS from most modern web browsers that support HTML5. The User Portal can be accessed using the following URL:

HTTPS://<Hostname/IP>/userportal

Access is delivered through a web access site hosted on the Secure Gateway Server. Multiple Gateway servers can be load-balanced by the High Availability Load Balancer (HALB).

The HML5 Gateway is enabled by default and requires SSL. A self-signed certificate can be used and is pre-installed with the product. For production, Parallels recommends that an approved SSL certificate from a Certificate Authority is used.

Due to the clientless nature of the solution, Local drive access from clients is not available. However, files can be saved on File Shares and on Cloud Drives (Drop Box, Google Drive, OneDrive, etc.) if those applications are published by the administrator.

Universal printing is supported when using User Portal.

Assessing SSL Server Configuration

When configuring RAS Secure Gateway to use SSL encryption, you should pay attention to how the SSL server is configured to avoid possible traps and security issues. Specifically, the following SSL components should be rated to determine how good the configuration is:

• The certificate, which should be valid and trusted.

• The protocol, key exchange, and cipher should be supported.

The assessment may not be easy to perform without specific knowledge about SSL. That's why we suggest that you use the SSL Server Test available from Qualys SSL Labs. This is a free online service that performs an analysis of the configuration of an SSL web server on the public Internet. To perform the test on a RAS Secure Gateway, you may need to temporarily move it to the public Internet.

The test is available at the following URL: https://www.ssllabs.com/ssltest/.

You can read a paper from Qualys SSL Labs describing the methodology used in the assessment at the following URL: https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide.