Remote Applications

Fudo Enterprise enables direct connection over the RDP protocol to a remote application using Remote Applications feature.

Adding Remote Application

In order to configure a remote application, follow the instruction:

1. Select Management > Remote applications.

2. Click the Add remote application button.

3. Configure the remote application:

   • Enter the application’s Name.

   • Specify the Path to the application’s executable file (e.g., C:\Windows\System32\ putty.exe).

   

4. Click Save and close.

5. Add the created remote application definition to the account that will be used to access the RDP server where the application is located:

   • Select Management > Accounts.

   • Edit the account that will be used to access the RDP server.

   • In the REMOTE APPLICATIONS tab, expand the Add remote app dropdown list and select the remote application definition created in the previous steps.

   • Click the Save button.

   

Adding Arguments

Remote Applications allow administrators to set commands that execute automatically at launch, enabling seamless connections with pre-filled login credentials and connection details. Variables can also be created to retrieve data directly from the Fudo Enterprise configuration.

1. Select Management > Remote applications.

2. Click the Add remote application button or edit existing remote application configuration.

3. Go to the Arguments field and enter the command to be executed automatically at launch. Here is an example for the PuTTY application, using variables: -l %%login%% -pw %%password%% -P %%port%% %%host%%.

Note

When defining variable you can decide which object and what property of object to use. You can select Object type and Object property for each of your Arguments, and encrypt given arguments by selecting the checkbox Encrypt in the row following the variable name.

4. Using Add variable button, add four variables corresponding to the command provided in the Arguments field. For example:

   • Variable name: %%login%%, Object type: fudo_account, Object property: login.

   • Variable name: %%password%%, Object type: fudo_account, Object property: secret, select Encrypt checkbox.

   • Variable name: %%port%%, Object type: fudo_server, Object property: port.

   • Variable name: %%host%%, Object type: fudo_server, Object property: address.

5. Click Save and close.

6. Variable values can be verified when adding the remote application to the account:

   • Select Management > Accounts.

   • Edit the account to which this remote application will be assigned.

   • In the REMOTE APPLICATIONS tab, expand the Add remote app dropdown list and select the remote application definition created in the previous steps.

   • Variable values will be displayed in a modal window.

   • Click the Save button.

Descriptions of Available Object Types

Object type	Description
constant	A variable with a fixed value, editable after assigning the remote application to a specific account.
special	The variable will inherit the secret used to establish the session.
fudo_server	The variable inherits its value from the server assigned to the account that uses the remote application. Possible properties: address - value from the server’s Address field, bind_ip - value of the server’s bind address, name - value from the server’s Name field, port - port specified for the server, ssh_public_key - server’s public key, tls_ca_certificate - CA certificate, tls_certificate - server’s certificate
fudo_account	The variable inherits its value from the account to which the remote application is applied. Possible properties: description - account’s description, domain - value from the account’s Domain field, login - value from the account’s Login field, method - authentication method selected for the account (password, other account, or repository), name - value from the account’s Name field, secret - secret used by the account to authenticate against server.

Connecting to Remote Application via Access Gateway

In order to establish a connection, sign in to the Access Gateway and select the respective account and a listener to be connected using the predefined remote application:

1. Select the Native client option.

2. Expand the REMOTE APPLICATION dropdown list and select the desired remote application to establish a connection.

3. Click Connect.

When a session to the specific resource is established by a user, their remote session is connected within the application only. Therefore, the user has no access to the entire desktop, and closing the application terminates the session.

Granular Access to Remote Applications

Warning

Remote applications are not automatically closed when a session ends. If you start another session using a different remote application, previously launched ones remain active. This may result in:

• Data or work from a previous application still being visible.

• An earlier application window overlapping or obscuring the new one.

To improve access control and reduce surface exposure, security admins can restrict users to specific remote applications without granting access to the full desktop environment. This enhancement enables more precise permission management and helps ensure that users interact only with the resources necessary for their roles.

1. Select Management > Accounts.

2. Edit the selected user account.

3. Go to the REMOTE APPLICATIONS tab.

4. Select the Restrict access to remote applications only.

5. Click the Save button.

Once enabled, the user will be able to launch only the remote applications explicitly assigned to their account and will not have access to the full remote desktop session.

Deleting Remote Application

Deleting a Remote Application From the Account Definition

In order to delete a predefined remote application from the Account definition, follow the instructions:

1. Select Management > Accounts.

2. Select the account that has the predefined remote application configured.

3. In the REMOTE APPLICATIONS tab select the Delete button following the remote application name to remove it.

4. Click Save.

Deleting a Definition of the Remote Application

In order to delete a remote application definition, follow the instructions:

1. Select Management > Remote applications.

2. Use checkboxes next to the remote application to select it.

3. Click Delete selected.

4. Confirm the remote application removal.

Related topics:

• Data model

• System initiation

• Users

• Listeners

• Safes

• Accounts

• Creating an Account