UNC Path Redirection Across Firewalled VDI Desktops
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a virtual desktop infrastructure (VDI) environment, users are unable to seamlessly open Universal Naming Convention (UNC) links from a remote desktop to access network resources due to firewall restrictions, requiring manual transfer and switching between local and remote desktops, which leads to a poor user experience.
Innovation Solution
Implementing UNC path redirection between a local and remote desktop using a UNC redirect network provider, API, and UNC helper module, along with a virtual channel to redirect UNC paths to the client device, allowing seamless access to internal network resources without additional user interaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firewall restrictions are implemented to protect internal network resources, then security is improved, but users cannot access UNC links from remote desktop
Solution Approach 1:
The patent introduces a VDI agent as an intermediary component that bridges the firewall-restricted remote desktop and the internal network resources. The agent runs on the client device and receives UNC path requests from the remote desktop application, then handles the actual file access operations locally, mediating between the isolated remote environment and the protected internal network.
Solution Approach 2:
The system segments the file access functionality by separating the UNC path handling from the remote desktop application itself. The VDI agent independently manages file access operations, allowing the remote desktop to maintain its firewall isolation while still providing UNC link functionality through the segmented agent component.
2Reliability
If manual transfer of UNC links is required from remote desktop to local device, then security is maintained, but user experience deteriorates
Solution Approach 1:
The VDI agent enables the system to serve itself by automatically handling UNC path requests without requiring user intervention for manual copying and pasting. When a user clicks a UNC link in the remote desktop, the agent automatically intercepts the path, processes the file access request, and opens the resource, making the system self-sufficient in bridging the network isolation.
Solution Approach 2:
The patent implements preliminary action by having the VDI agent pre-configured and running on the client device before any UNC link access is needed. The agent is already in place to intercept and handle file path requests, eliminating the need for users to perform preliminary manual transfer operations.
3Reliability
If switching between remote and local desktop is required to access UNC links, then network isolation is maintained, but time is lost
Solution Approach 1:
The VDI agent acts as a mediator that allows UNC link access to occur within the remote desktop environment without requiring physical switching to the local desktop. The agent receives requests from the remote desktop application and handles file operations locally, maintaining network isolation while eliminating the time loss associated with desktop switching.
Solution Approach 2:
The VDI agent provides multi-functionality by simultaneously maintaining network isolation and enabling UNC link access within the remote desktop. It serves multiple purposes: preserving security boundaries while providing seamless file access functionality, eliminating the need for users to switch between different desktop environments.
Data Source
AI summary
The disclosure provides a method for universal naming convention (UNC) path redirection between a local desktop and a remote desktop. The method generally includes selecting, by a client device in an internal network, via an application running on a remote desktop in an external network, to open a UNC path for a resource located in the internal network. A firewall restricts the external network to access the resource located in the internal network. The method generally includes receiving, at the client device, from the remote desktop, via a virtual channel between the external network and the client device in the internal network, a message indicating to open the UNC path. The method generally includes opening, by the client device, via a local application of the client device, the UNC path to access the resource located in the internal network.