Service fingerprinting via expect script
VISULOX expects (to a certain extend) to be in secure environment.
Secure connections are used by VISULOX, but peer connections are not checked in some cases.
Therefore vlxRdpFingerprint.exp can be used (/opt/tarantella/var/serverresource/expect/) in Windows applications.
The fingerprints are stored in /opt/tarantella/var/fingerprint/.
This expect script is available since VISULOX version 4.1.0. In older versions the script has to be added manually.
Expect check:
In the expect layer the fingerprint of host:port is checked against known fingerprints before starting the application.
Will be blocked if changed.
Service fingerprinting montoring:
In the service layer the fingerprint of host:port is periodically checked against known fingerprints.
Throws event if not available or changed.