Myworkdrive Technical Overview
Total Page:16
File Type:pdf, Size:1020Kb
MyWorkDrive Technical Overview Our MyWorkDrive service provides WebDAV and File Web Access to Windows File Server files and folders from anywhere, using any browser or mobile device --- all while maintaining corporate control. Unlike basic SSL VPN or FTP Server packages that only provide limited functionality or are complicated to setup, our easy to install File Web Access solution provides all the features employees expect while maintaining local access, security, speed and control. On the IT administrator side, our solution can be installed in minutes onto any existing Windows file server environment. No databases, SSL Certificates, complicated servers or firewall changes are required. Our clients enjoy all the benefits of the cloud with local file server access and control. For security, all access and transfers are logged and sharing is configurable by user or group. Since user security utilizes existing file shares, permissions and Active Directory, setup is quick and easy with no re-provisioning of shares and users or migrating files to new servers. Basic features: Share files internally or to the public Map drives directly to shares just like in the office Integrates with Active Directory, leverage existing shares, users and groups Disabled users automatically blocked Web Access to files from any browser & mobile device Browse Files by Date, Size, Type or Name Direct editing of office documents online Logging of all file access for security and control No synching needed (or desired) Fast Local Access when needed at Gigabit speeds Multiple files and folders upload with very large file support All files remain on clients servers under their control for compliance and legal protection Mobile Support for iOS & Droid with offline access of downloaded files/folders Upload files to Dropbox, Google Drive or OneDrive (Version 2) © Copyright Wanpath LLC., All Rights Reserved Information Architecture Overview: The MyWorkDrive product architecture consists of two key components: The MyWorkDrive server share connector and the MyWorkDrive front end proxy service. The customer simply installs the share connector and server components with their unique encryption key to make their file server available to end users securely. WebDAV server file access and Web File Manager connections are then available at a unique company URL to users for remote access in the cloud. No end user login information is stored on MyWorkDrive systems as all authentication is done on the customer’s on premise server. © Copyright Wanpath LLC., All Rights Reserved MyWorkDrive Web File Access Portal The MyWorkDrive Web File Manager portal provides web file access to user’s files and folders. Upon logging in with their existing Windows domain credentials, users are presented with the Web File Manager to manage their work files and folders. The WebDAV Server File Web Access client provides access to upload and download of files and folders, direct editing of office documents and our unique “Open in OS” feature which opens the shares in the user’s operating system (file explorer) just like a mapped drive. Drag and Drop of files and folders is supported. MyWorkDrive WebDAV Site A unique WebDAV URL is provided for each customer that is used for accessing files using a mapped drive (Windows), drive mounts (Mac) and from within any application that supports WebDAV connections. © Copyright Wanpath LLC., All Rights Reserved Windows comes with WebDAV support built-in however we have found WebDrive.com’s client to be the most robust and problem free, available at: http://www.webdrive.com/products/webdrive. Mac’s support WebDAV out of the box. For mobile clients (iOS and Droid) any WebDAV capable application can be used to access files and folders. For more robust mobile access we recommend WebDAV Navigator by Sean Ashton at http://seanashton.net/webdav/ On Premise Server Agent & Admin: The on premise server agent and WebDAV server engine is installed locally on the customers internal file server. This provides a conduit for user WebDAV and web file manager access to files which flows through our encrypted MyWorkDrive reverse proxy service for secure cloud file access. An internal website located on the customers on premise server is provided to provision shares, access rights, user home drives, review access logs and system settings. The internal website can only be accessed on the local server and requires domain admin credentials. Since the server agent is installed on a Windows server, it automatically recognizes the Windows Active Directory domain that the server is part of. Users are able to authenticate with their existing logins by simply entering their domain usernames and passwords. The IT Administrator provisions existing shares to be made available in the cloud and restricts them to existing users or groups. Home Drives are made available by default. Note: As an additional security precaution we have designed MyWorkDrive so that it is not possible to grant more privileges to shares in MyWorkDrive than are already provisioned in Windows under NTFS - we inherit existing permissions providing for least privilege access. © Copyright Wanpath LLC., All Rights Reserved As part of the server agent install an access key is provided that allows the on premise server to communicate with our reverse proxy front end server using our Wanpath port bridge service. This key is provided after subscribing to the MyWorkDrive.com service. This key is unique to each client and provides an encrypted reverse proxy connection in listen only mode. No data, passwords or client information of any kind is stored on MyWorkDrive servers. Sample Customer scenario: Small business with 20 employees: Ace Architecture firm has been in business for many years. As part of their business requirements, they process numerous files and photos for clients and have several terabytes of data for both active and archived projects. In addition, new data from projects in the form of documents and photos are growing daily. The company has existing Windows file servers in place with mapped drives to user’s PC’s and Mac’s and leverage traditional VPN access. Users have become frustrated by the complicated and cumbersome VPN access solution currently in place and have expressed a need for an easier solution for accessing files and folders remotely from any PC or mobile device and for sharing data externally with clients. The firm has considered moving all files to the cloud but is concerned about ownership, security, cost and speed of file access. Even if security, ownership and cost were not a concern, they would need extremely fast internet speeds to upload and download the large volume of data they maintain for client projects. The cost of upgrading Internet lines to a minimum of 100 Mbps (both up and down) at their location would run into the thousands of dollars per month which would still be much slower than their current Gigabit network. The firm reviewed other solutions on the market and found them to be both complex (requiring multiple servers) and cost prohibitive. © Copyright Wanpath LLC., All Rights Reserved Solution: MyWorkDrive has provided the answer to these concerns by installing their Web File Access solution. With WebDAV and web file access employees are able to download and upload files remotely on both their PC’s, tablets and mobile devices and share files with customers easily with no complicated VPN’s or prior setup. For day to day operations or when fast upload or download is needed to transfer a large volume of files, the traditional file servers are available at fast Gigabit speed using the mapped drives users already know. The MyWorkDrive solution has helped their employees be more productive without while not disrupting current operations or work flows. All for a low monthly per user flat fee. © Copyright Wanpath LLC., All Rights Reserved .