Technical Notes

Features Introduced in Reflection for Secure IT Windows Client 6.0
Technical Note 1905
Last Reviewed 31-May-2006
Applies To
Reflection for Secure IT Windows Client version 6.0
Summary

This document lists the features introduced in Reflection for Secure IT Windows Client version 6.0 and provides information for migrating from the F-Secure SSH product.

Note the following:

• Reflection for Secure IT version 7.0 is available beginning in February 2008. For a list of new features in 7.0, see Technical Note 2281. For information about purchasing Reflection for Secure IT, please e-mail us: SalesRecept@attachmate.com.
• Version 6.0 of the Reflection for Secure IT Windows Client is the first version from Attachmate. Previous versions of the SSH Windows client were released by F-Secure Corporation.

This note is divided into the following topics:

Features Introduced in Version 6.0

The following Reflection features are new to users upgrading from the F-Secure SSH Client for Windows.

• A consolidated User Keys dialog box that you can use to manage all your keys and certificates in one place.
• A Reflection key upload utility that, upon upload, automatically converts the public key to the host in the appropriate format as required by the ssh server.
• Full support for the Microsoft Windows Installer (MSI), which standardizes and simplifies deployment.
• More emulation options to increase your range of access.
• The Migration Wizard, which automates the conversion of F-Secure SSH client configuration settings, as well as host and user keys, to Reflection for Secure IT Windows Client.
• The "Designed for Windows XP" logo ensures that the SSH client has full interoperability with Windows XP.?(Reflection for Secure IT is the only SSH client available with this certification.)
• Support for Citrix MetaFrame and Microsoft Windows Terminal Services, which provides the ability to deploy an SSH client on a multi-user standardized desktop managed at one location.
• Group Policy support for additional customization using Active Directory.
• The ability to centrally deploy and administer Reflection SSH sessions using the Reflection Administrator (sold separately).

Reflection Secure Shell supports:

• Secure connections to both ssh1 and ssh2 protocol servers.
• Standard Secure Shell features including TCP port forwarding (including X-11), data stream compression and encryption, authentication (using a password, public key, keyboard interactive, or Kerberos key), and logging.
• A user key generation tool that you can use to create RSA, RSA1, and DSA keys.
• Tools for uploading public keys to your Secure Shell server. Reflection automatically detects the server type, exports the correct key type, and installs it in the correct location on the server.
• Tools to view and manage trusted host keys.
• A Key Agent utility that you can use to manage multiple keys with a single passphrase, and forward authentication to additional servers.
• Secure SFTP file transfer.
• Standalone DOS command-line utilities for ssh, ssh-keygen, sftp, and scp.

Supported Platforms

Migrating to Reflection for Secure IT

You can use the Reflection F-Secure Migration Wizard to convert F-Secure profiles to Reflection settings files. This conversion allows you to run Reflection with settings that closely match your F-Secure SSH settings. Your original profile remains intact and is not deleted or changed.

For more information about migrating, see Technical Note 1930.

Product Manual

See the product manual for information about installing and configuring Reflection for Secure IT Windows Client. The manual (pdf) is linked from http://support.attachmate.com/manuals/sshdocs.html.

Release Notes

The release notes contain a brief list of known issues that affect Secure Shell connections:

No notification when Secure Shell connection is lost

If you lose your network connection while connected using Secure Shell, the Reflection application will not display a message notifying you of the lost connection.

However, when you attempt to perform any operation with a secured application that requires communications with the host, you will receive an error message notification that the connection has been closed.

Slow response from Secure Shell functions

You may experience a slow response, indicated by the hourglass cursor, when you perform the following Secure Shell actions:

• Open the Secure Shell Settings dialog box multiple times.
• View the User Keys or Host Keys tabs in the Secure Shell Settings dialog box multiple times.
• Make Secure Shell connections multiple times.
• Disconnect Secure Shell connections from the host or by using the disconnect toolbar button.
• Cancel a Secure Shell connection.

The response becomes slower as you repeat the action within a single session.

The workaround: Close the current session of Reflection and start a new one, either from the Start menu or by launching a settings file. Correcting this behavior is a high priority for the next release.

Multiple authentication requests for a single layout

Reflection for Secure IT Windows Client requires authentication for each session within a layout (called a profile in F-Secure). This authentication request occurs when you launch a session from a layout, from the New SFTP Client toolbar button, or from the New SSH Session toolbar button.

This behavior is unlike that of the F-Secure SSH Windows client, which uses the same SSH tunnel for all connections to a host in a single profile and thus requires only one authentication.

The workaround: Use the Reflection Key Agent to store user keys and handle the authentication requests.

Technical Support

For information about contacting technical support, see http://support.attachmate.com/contact/?prod=rsit.

Related Technical Notes

1870	Reflection for Secure IT Windows Client Patch 6.0.2: Fixes, Features, and File Download
1897	Readme: Features Introduced in Reflection for Secure IT Windows Client 6.1
1901	Reflection for Secure IT Product Upgrades
1930	F-Secure-to-Reflection for Secure IT Client Migration -- Frequently Asked Questions
1999	Reflection for Secure IT Technical Notes
2281	New Features in Reflection for Secure IT Windows Client 7.0 and Release Notes