Secure Virtual Assist Overview

This section provides an introduction to the Secure Virtual Assist feature. This section contains the following topics:

What is Secure Virtual Assist?

Secure Virtual Assist is an easy to use tool that allows SRA users to remotely support customers by taking control of their computers while the customer observes. Providing support to customers is traditionally a costly and time consuming aspect of business. Secure Virtual Assist creates a simple to deploy, easy to use remote support solution.

Benefits of Secure Virtual Assist

Secure Virtual Assist provides the following benefits:

Simplified and effective customer support - Support staff can use Secure Virtual Assist to directly access customers computers to troubleshoot and fix problems. This eliminates the need for customers to try to explain their problems and their computer’s behavior over the phone.
Time and cost savings - Secure Virtual Assist eliminates the need for support staff to visit customers to troubleshoot problems and reduces the average time-to-resolution of support calls.
Educational tool - Trainers and support staff can use Secure Virtual Assist to remotely show customers how to use programs and tools.
Seamless integration with existing authentication system - Ensures that the customers are who they say they are. Alternatively, the local database of the SRA appliance and tokenless two-factor authentication can be utilized.
Secure connections - 256-bit AES SSL encryption of the data by the SRA appliance provides a secure environment for the data and assists in the effort to be compliant with regulations like Sarbanes-Oxley and HIPAA.
Greater flexibility for remote access - Using the Secure Virtual Access functionality, support staff can access their personal systems located outside the LAN of the SRA appliance.

How Does Secure Virtual Assist Work?

The following sections describe how the Secure Virtual Assist feature works:

Basic Operation

Secure Virtual Assist is a lightweight, thin client that installs automatically using Java from the SRA Virtual Office without requiring the installation of any external software. For computers that do not support Java, Secure Virtual Assist can be manually installed by downloading an executable file from the Virtual Office.

For basic screen sharing support, administrative privileges are not required to run Secure Virtual Assist. For full installation of the client, administrative rights may be necessary, but full installation is not necessary to use the service.

When a user requests service as a customer, Secure Virtual Assist should not be run while connected to the system via RDP for Windows 7 and Windows Vista platforms. Secure Virtual Assist runs as a service for proper access to the customer’s system, so correct permissions cannot be set if it is run from an RDP connection.

There are two sides to a Secure Virtual Assist session: the customer view and the technician view. The customer is the person requesting assistance on their computer. The technician is the person providing assistance. A Secure Virtual Assist session consists of the following sequence of events:

1
2
3
4
5
6
7
8
9
If at anytime the customer wants to end the session, they can take control and click on the End Virtual Assist button in the bottom right corner of the screen.
10
Remote File Transfer

Secure Virtual Assist includes a Remote File Transfer feature that enables the technician to transfer files directly to and from the customer’s computer. The technician launches the File Transfer process by clicking a button in the Virtual Assist taskbar in the top left corner of the Secure Virtual Assist window. The File Transfer feature supports the upload and download of multiple files.

Chat Feature

Secure Virtual Assist includes a chat feature that allows the technician and customer to communicate using an instant message-style chat function. Either the technician or the customer can initiate a chat session by clicking on the Chat button in the Secure Virtual Assist taskbar.

Email Invitation

From the technician view of Secure Virtual Assist, technicians can send email invitations to customers that contain a direct URL link to initiate a Secure Virtual Assist session. The technician can optionally include a unique message to the customer. When the customer clicks on the email link to Secure Virtual Assist, only the technician who sent the invitation can assist that customer.

Secure Virtual Access

Secure Virtual Access, as part of the larger Secure Virtual Assist feature, allows technicians to gain access to systems outside the LAN of the SRA appliance, such as their personal systems. After downloading and installing a client from the portal page for Secure Virtual Access mode, the personal system will appear only on that technician’s Secure Virtual Assist support queue, within the SRA management interface. While Secure Virtual Access must be enabled per-portal, this functionality provides greater remote access flexibility for support technicians.

Installing and using Secure Virtual Access requires administrative privileges.

Launching a Secure Virtual Assist Technician Session

To launch a Secure Virtual Assist session as a technician:
1
2
Click on the Virtual Assist button.

3

4
If the Virtual Assist plug-in is not installed, the File Download window displays, and Secure Virtual Assist attempts to automatically install. Click Run to launch the program directly, or click Save to save the installer file to your computer, and then manually launch it.

When downloading through IPv6, the File Download window displays IPv6 information.

5

6
A pop-up window asks if you would like to install Secure Virtual Assist as a standalone client. Click Yes to save the application. A shortcut will be added to your desktop and a link to the application will be added to the program list on your Start Menu. Click No to launch Secure Virtual Assist without saving the application for future use.

7
If you clicked Yes to save the application, you will be prompted to select a location to save the file. Select an appropriate location, such as C:\Program Files\SonicWALL.

8
When Secure Virtual Assist launches for the first time, you may see a security warning pop-up window. De-select the Always ask before opening this file check box to avoid this window in the future. Click Run.

9

10

Performing Secure Virtual Assist Technician Tasks

To get started, the technician logs into the SRA appliance and launches the Secure Virtual Assist application.

Once the technician has launched the Secure Virtual Assist application, the technician can assist customers by performing the following tasks:

Inviting Customers by Email

To invite a customer to a Secure Virtual Assist session by email:

1
 
2
3
Optionally, enter Technician E-mail to use a different return email address than the default technician email.
4
Optionally, enter an Additional Message to the customer.
5
Click Invite. The customer will receive an email with an HTML link to launch Secure Virtual Assist.
6
Assisting Customers
1
2

3

The technician now has complete control of the customer’s keyboard and mouse. The customer can see all of the actions that the technician performs.

During a Secure Virtual Assist session, the customer is not locked out of their computer. Both the technician and customer can control the computer, although this may cause confusion and consternation if they both attempt “to drive” at the same time.

The customer has a small tool bar in the bottom right of their screen, with three options.

The customer has the following options during a Secure Virtual Assist session, each enabled after clicking the corresponding button.

Active - Toggles to the View Only mode, where the technician can view the customer’s computer but cannot control the computer.
Chat - Initiates a chat window with the technician.
End Virtual Assist - Terminates the session.
Using the Secure Virtual Assist Taskbar

The Technician’s view of Secure Virtual Assist includes a taskbar with a number of options.

In Windows, the taskbar contains the following buttons:

Refresh - Refreshes the display of the customer’s computer.
File Transfer - Launches a window to transfer files to and from the customer’s computer. see Using the Secure Virtual Assist File Transfer for more information.
Chat - Launches the chat window to communicate with the customer. The technician can also use the dedicated chat window in the bottom left window of the Secure Virtual Assist application.
System Info -Displays detailed information about the customer’s computer.

Reboot Customer - Reboot the customer’s computer. Unless you have Requested full control, the customer will be warned about and given the opportunity to deny the reboot.
Switch Screen - Switches to a second monitor if the customer’s computer has more than one monitor configured.

In MacOS, the taskbar contains the following buttons:

Refresh - Refreshes the display of the customer’s computer.
Auto Scale - Adjusts the screen to fit the window size.
Full Screen - Adjusts the screen to fill the entire window.
System Info -Displays detailed information about the customer’s computer similar to that shown for a Windows computer.
Reboot - Reboot the customer’s computer. Unless you have Requested full control, the customer will be warned about and given the opportunity to deny the reboot.
Chat - Launches the text chat window to communicate with the customer. The technician can also use the dedicated chat window in the bottom left window of the Secure Virtual Assist application.
File Transfer - Launches a window to transfer files to and from the customer’s computer. see Using the Secure Virtual Assist File Transfer for more information.
Hide Toolbar - Hides the taskbar from view.
Gray Color - Displays everything in grey monochrome
Controlling the Secure Virtual Assist Display
Full Screen - Hides all of the Secure Virtual Assist toolbars and displays the customer’s desktop on the technician’s entire screen with the Secure Virtual Assist taskbar in the top left corner.

If the Secure Virtual Assist taskbar doesn’t display, move your mouse to the top middle of the screen. Right-click on the taskbar and click Restore to exit full-screen mode.

Auto Scaling - Zooms the display to fill the entire Secure Virtual Assist window.
True Size - Zooms to 100%.
Side Bar - Toggles the display of the side bar with the email invitation and chat windows.
Top Bar - Toggles the display of the top bar with the customer queue and toolbar.
All Bars - Displays both the side bar and top bar.
No Bar - Hides both the side bar and top bar.
Request Full Control

Technicians can request full control of a customer’s desktop, allowing them to reboot the system, delete files, or over-write files on the customer’s computer without the customer being repeatedly prompted for permission. Select Request Full Control under the Commands menu to issue a request that will appear on the customer’s desktop.

Using the Secure Virtual Assist File Transfer

The File Transfer window is used to transfer files to and from the customer’s computer. The file directory of the technician’s computer is shown on the left and the customer’s computer on the right.

The File Transfer window functions in much the same manner as Windows Explorer or an FTP program. Navigate the File Transfer window by double-clicking on folders and selecting files. The File Transfer window includes the following controls:

Desktop jumps to the desktop of the technician’s or customer’s computer.
Up navigates up one directory on either the technician’s or customer’s computer.
Download transfers the selected file or files from the technician’s computer to the customer’s computer.
Upload transfers the selected file or files from the customer’s computer to the technician’s computer.
Delete deletes the selected file or files.
New folder creates a new folder in the selected directory.
Rename renames the selected file or directory.

When a file is transferring, the transfer progress is displayed at the bottom of the File Transfer window. Click the Exit button to cancel a transfer in progress.

Enabling a System for Secure Virtual Access

If Secure Virtual Access has been enabled on the Virtual Assist tab on the Portals > Portals page of the management interface, users should see a link on the portal to set-up a system for Secure Virtual Access. To enable Secure Virtual Access within the SRA management interface, see Configuring Per-Portal Virtual Assist Settings .

To configure Secure Virtual Access on a system:
1

2

3
Server: This should be the name or IP address of the appliance the technician normally accesses the Virtual Office from outside the management interface (Do not include “https://”).
Portal: The name of the portal the technician would normally login to.
Computer Name: This is an identifier for the system to help differentiate between other systems that may be waiting for support in the queue.
Password: This is a password the technician must enter prior to accessing the system through the support queue.

4

This system’s identifier name should now appear in the technician’s support queue displayed on the Secure Virtual Assist > Status page within the management interface.Upon double-clicking the system listing, the technician will be prompted to provide the password established during system set-up to gain Secure Virtual Access to the system.

Ending Secure Virtual Access Mode

Disconnecting from a Secure Virtual Access session will place the system back in the support queue for later access by the technician. From the personal system-side, the user/technician may uninstall or terminate the application from the tray option icons.

An administrator can forcibly remove a system from the queue. If this occurs, the Secure Virtual Access system should no longer attempt to connect to the support queue and should display an error message.