Check Point GO Secure Portable Workspace- Run un-approved Program in Virtual Desktop-优快云博客

本文介绍了如何使用Checkpoint GO Stick在虚拟桌面环境中运行未批准的应用程序，并分享了发现的有趣特性。包括如何通过双击GO.exe文件启动虚拟桌面，登录到安全工作区或文件模式，以及如何在高级设置中获取更多关于GO Stick的信息。此外，文章还指出可以通过右键点击虚拟桌面上的未批准应用程序图标并选择编辑，来浏览主机系统的32位文件夹并运行其他应用程序。

Checkpoint has nice starting tutorial page for GO stick user. I had a chance to play with it and found one interesting thing to run some un-approved application in the Checkpoint GO Secure Portable Workspace.

With USB Checkpoint GO Stick, user got a chance to launch Check Point GO Virtual desktop. Based on Page 9 at CP_GO_UserGuide.PDF,
“only a limited number of pre-approved applications are allowed to run. By default, the virtual desktop does not allow you to:

Print
Customize the desktop
Perform any system configuration

If you need this kind of functionality, or another program added to the list of approved applications, contact
your system administrator.
“
After double clicked the GO.exe file from the GO usb stick, you will get a password window to launch GO Desktop.

9-20-2014%2B9-50-33%2BPM.png?resize=320%2C166

You can log into Secure Workspace or Folder Mode.

In Advanced button, you can get more information regarding this Check Point GO Stick such as serial no, firmware version. Also change the password on the stick.

Later after you launched GO desktop, you can switch it back to host , or from host switch to GO desktop by right click GO icon at the task bar.

After GO.exe verified your password, GO desktop will show in the screen to replace your original desktop. It looks like windows remote desktop.

9-20-2014%2B10-03-40%2BPM.png?resize=640%2C530

9-20-2014%2B10-21-01%2BPM.png?resize=400%2C261

On the right bottom, there is remote vpn client for securely accessing resources on the corporate enterprise. After you right clicked icon, choose connect. Your pre-defined remote gateway will be connected and build remote vpn with it from your current Secure Desktop.

9-20-2014%2B2-09-45%2BPM.png?resize=640%2C494

One interesting thing I found is to it is possible to run host application which is not approved by security policy. I did see a putty program icon on the virtual desktop. By right click it and click Properties, you will get application properties window. There is find target button and once you clicked it, a host system32 folder will be brought up. Then you could browse to other folder and run other applications on the host.