Customer is curious at what point we use VNC on the appliance. I read the docs and there were a few areas I wasnt sure about. From what I can we are using VNC of course when used as the connection type. It appears to me that we are also using it during session playback as well.
Do we use it at any other point? Do we tunnel ssh through it or anything?
A few more additional question regarding the use of VNC through an SSH tunnel. Do you know what version of VNC is being used within the SSH tunnel? And would that VNC version contain the vulnerability for storing credentials in the registry of a destination windows system, even if it was tunneled through an SSH connection?
From the appliance to the end user's applet that is launched in the browser we use VNC which is tunneled over an SSH connection. From the appliance to the managed system we use whatever connection proxy protocol they selected for that system.
Our use of sshvnc and VNC does not allow for the possibility of the password to be stored in the registry. The VNC version 4 for linux has no registry to be stored."