Remote Access

Share360 is an internal application that runs on your company server (or a hosted server), so all users on your network can access the system. In addition, users from outside your physical network can access Share360, anytime, anywhere, using the following options:

• VPN
• RAS
• Public Access

[Example]

VPN

Install Share360 on an internal machine and allow access over the Internet via a Virtual Private Network.

VPNs use the Internet and allow network managers to connect remote branch offices and project teams to the main corporate network economically and provide remote access to employees while reducing the in-house requirements for equipment and support.

Because the Internet is a public network with open transmission of most data, Internet-based VPNs include measures for encrypting data passed between VPN sites which protects the data against eavesdropping and tampering by unauthorized parties.

If you choose to use a Virtual Private Network, your system will not be accessible over the Internet by random people on the Internet. Rather, Internet access will be limited to those group members who have access your company's VPN. A VPN securely connects networks together and allows remote access to network services with the same degree of security as if users were locally connected to remote networks and hosts. For more information, a good reference guide can be found at http://www.dtool.com/vpns.html

VPN installations are always custom configurations for each company; therefore, Cybozu does not support customers in installing VPNs.

There are many VPN vendors available for Windows, Linux and FreeBSD. For more information, visit the following reference sites:

For Microsoft:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/confeat/vpnsol.asp

For FreeBSD:
http://www.freebsddiary.org/pptp.php

For Linux:
http://www.tldp.org/HOWTO/VPN-HOWTO/

[VPN Example]

RAS

Short for Remote Access Service, a server that is dedicated to handling users who are not on a LAN but need remote access to it. The remote access server allows users to gain access to files and print services on the LAN from a remote location. For example, a user who dials into a network from home using an analog modem or an ISDN connection will dial into a remote access server. Once the user is authenticated he can access shared drives and printers as if he were physically connected to the office LAN.

To use RAS remotely, you need a RAS client program, which is built into most versions of Windows, or any PPP client software. To use RAS, your web server should be set to allow access via remote access server or via the Internet.

Sites which allow access over RAS may be exposed to the risk of unauthorized persons accessing their data. Recognizing such risks, you should operate Share360 under a fully secured network system.

For more information on RAS technology or vendors, visit http://www.webopedia.com/TERM/R/remote_access_server.html

[RAS Example]

NOTE: This information is for your reference only. Cybozu provides this information in order to help you optimize your usage of Share360, but we do not support any technical systems except the Share360 software itself. For more details, we recommend you ask for professional consultation.

Public Access

Install Share360 on a publicly accessible machine

If you choose not to use a VPN, you can install Share360 on a publicly accessible machine; security measures are variable and depend on your company's own security policies.

1. Install Share360 on a publicly accessible machine with no security precautions.
   
   This is the easiest, yet least secure method. If you install Share360 on a Microsoft Windows machine, we recommend using Apache rather than IIS as the web server.
   
   
2. Install Share360 on a publicly accessible machine with an SSL-enabled web server
   
   Share360 should perform just as well under an SSL-enabled web server as it will under a regular web server.
   
   For both of the options above, we recommend implementing basic http authentication in addition to Share360's user authentication. To accomplish this, follow your web server vendor's instructions for implementing basic authentication.
   
   For example, under Apache, in your httpd.conf file, under the section for your cgi-bin directory, make sure the AuthConfig directive is present as follows:
   
   <Directory "/var/www/cgi-bin">
   AllowOverride None Authconfig
   Options None FollowSymLinks
   Order allow,deny
   Allow from all
   </Directory>
   
   Then, in your cgi-bin directory, create a .htaccess file with syntax as follows:
   
   AuthName "internal"
   AuthType Basic
   AuthUserFile /usr/local/etc/apache/users
   
   require valid-user
   
   To add users to the AuthUserFile, execute the command:
   
   htpasswd -c /usr/local/etc/apache/users username
   
   If you are using IIS, which we do not recommend for publicly accessible web serving, please consult IIS help, or the Microsoft web site.

NOTE: This information is for your reference only. Cybozu provides this information in order to help you optimize your usage of Share360, but we do not support any technical systems except the Share360 software itself. For more details, we recommend you ask for professional consultation.