Wayk Bastion Installation and Configuration

Hello,

If the Wayk Agent says disconnected, the connection to the Wayk Bastion is not properly configured. You can use the https://... URL to connect to the Bastion, just in case wss is causing an issue.

When you mentioned accessing the dashboard, is it from the same computer as the Agent is installed?

As for documentation, we currently only have the automation part, which would still work for you. You can refer to it here: https://docs.devolutions.net/wayk/bastion/deployment-automation.html

Best regards,

OK, let me try to explain the configuration:
I have a Sophos UTM firewall, that has a reverse proxy. I am using it to instead simple port forwarding. Also, currently it's set up without any firewall or checking rules. It acts same as port forwarding. And, I also set up port forwarding, just in case...
Anyway, configuration is like this:
https://den.company.com:443 (external, certificate) -> http://wayk.internal.company.com:4000
So I set it up like this in the Wayk Bastion. Realm is den.company.com, Externalurl is the first one, and ListenerUrl is the 2nd entry.
Then on the client of my choice, I installed Wayk Agent. In the configuration, I set in the connectivity use wayk bastion, and set the URL to https://den.company.com
Additionally, I logged in with a user that I set up as a role of "Machine user login".
I checked the firewall logs on the sophos utm, and wasn't able to see anything blocking. I would expect to see port 4000 blocked, but no.
I also disabled windows firewall on all machines, just to exclude that.

And still, no go. It says disconnected, tries to connect, and disconnects, and on and on.

To answer your questions:
Yes, I am aware that the connection isn't working, but I can't figure out why. Not sure what's missing?
As I said, changed to HTTPS, that didn't help.
And yes, I saw that document.

I figured I need Agent only, not Wayk Now, since I only plan to access the machine.
And this is what I did:
As I wrote, I entered the info in the connection and I also tried to set:
wayk-now --token-id xxxxxxxxxxxxxxxxxxxxxxxx --den-url https://den.company.com
It only opens the agent and that's it.

So what now?

The problem with the admin page not available over HTTPs was the configuration on my reverse proxy.
Now I can confirm that that is working fine. I can access https://den.company.com/web without a problem.
However, Wayk Agent is still a no-go.

Holy...
This was very uncool. I had to virtually troubleshoot by trial and error - but I finally got it.
For anyone trying to set it up, on the Sophos I had to:

• Virtual Server:
  • Check Pass Host Header (which enabled the correct website calling over the FQDN)
  • Enable HTTPS with Redirection
  • Firewall Profil currently empty, but I will work on this
• Site Path Routing:
  • WebSocket passthrough

Now, most likely it's my experience that's lacking, but I've been able to set all other services to a functioning state.
You should really work on this in the manual.

Hello,

Thank you for your feedback and your findings. Currently, our documentation provides proxy information primarily for IIS, Azure, and the Devolutions Gateway. It is currently being updated, and we will incorporate your result so others can benefit from it.

Best regards,

Alright, I managed to get most of my requirements working, however I do have an issue: I have bad session quality on my PC, but fine quality on my laptop - both same versions of RDM.
I also don't quite understand the session opening/closing logic:
If I have an open session via Wayk and I either log off or reboot, I will get disconnected from the session. Makes sense if I reboot, but makes much less sense if I log off.
Additionally, I would very much welcome some kind of system to detect if the device is online again - is it possible? The same feature we have for RDP sessions or what Teamviewer is offering as "reconnect when available".
Is there generally a possibility to see which Wayk agents are online (realtime)?

What about configuration? I would like to set specific configuration on each machine at the installation time? Since Wayk Agent has a service, it would make sense to make it via registry, rather than .cfg files in the user's profile?? I would additionally run those reg-keys via script at installation time, and that would be it. Or is there another way?

And there is a bug in Wayk Client, when I open the (external) session, and my default setting is 100%, slider appears on the bottom of the window, which when I slide, disappears. I guess the right behavior would be a normal window without any sliders. And yes, the resolution is fine - I am running 2560x1440, session is 1920x1080.

And please please let me disable the Wayk popup after I connect to the session.

Thanks.

(and sorry for multiple tickets, that wasn't actually my intention)

Hello

> I have bad session quality on my PC, but fine quality on my laptop - both same versions of RDM

Can you confirm; that you are using the embedded Wayk session in RDM in both cases? Just to understand that you're comparing apples-to-apples, and not (for example) an embedded Wayk session to an external (WaykClient.exe) session? I would like to try and reproduce that behaviour and want to understand exactly how you're set up.

> If I have an open session via Wayk and I either log off or reboot...

Right, currently, logging off the Windows session will disconnect your Wayk session. We understand this is annoying, especially when fast-user switching. Our capture process runs in the context of the user session, and until recently we didn't the capability to stop-and-start that process independently of the Wayk session. That technical limitation has recently been solved as part of our macOS unattended support, so it remains to apply the fixes on our Windows version. You can look for improvements here in an upcoming release; I'd expect that to be early next year.

> some kind of system to detect if the device is online again... generally a possibility to see which Wayk agents are online (realtime)?

We don't have or current plan to support something like that in the Wayk client. In RDM, it's possible to create a Wayk Bastion session type which will give you a native dashboard listing of machines, and show you the online status. The Wayk Bastion session type will soon be deprecated by a full-fledged Wayk Bastion data source that will give the same functionality you have for RDP sessions. That's in the pipeline right now but, again, likely won't be ready until the first quarter of next year.

> What about configuration?

First, a little background - historically, we stored "user" settings in the user profile, but "global" settings are stored in %programdata% (and "global" settings could/would override "user" settings). That structure came about due to the hybrid client/server nature of Wayk Now, and the fact that certain settings might be only applicable at one level. The upcoming release (2020.3.1) corrects this now that Wayk Now is two separate applications (Agent and Client). Agent settings are only in %programdata%, Client settings in the user profile.

To answer your question, you have a few options for configuring the application at install time. The agent .msi supports many configuration parameters in this form:

CONFIG_{SNAKE_CASE_OPTION_NAME} = "Value"

So, for example: `msiexec /i WaykAgent-xxx.msi CONFIG_DEN_URL="https://rmarkiewicz.wayk.net"`

Under the hood, this is driven by the command-line interface which you can invoke like this:

`WaykAgent.exe config --global {settingname} {value}`

And can also be configured by our PowerShell module.

The documentation on this exists, but is currently being migrated to our new online documentation at docs.devolutions.net. If you need help with specific settings or configuration in the meantime, don't hesitate to post a new thread or open a support ticket.

> when I open the (external) session, and my default setting is 100%, slider appears on the bottom of the window

By slider, you mean the scroll bar? I will log a ticket to look into this.

> please let me disable the Wayk popup after I connect to the session

I saw that you opened another thread on this, I will answer there.

Thanks and kind regards,

Can you confirm; that you are using the embedded Wayk session in RDM in both cases? Just to understand that you're comparing apples-to-apples, and not (for example) an embedded Wayk session to an external (WaykClient.exe) session? I would like to try and reproduce that behaviour and want to understand exactly how you're set up.

Yes, I can confirm both are embedded sessions, as I have a centralized database, and the entries there I execute on both machines running the same version of RDM. Here are two screenshots. First was made locally on my laptop (Lenovo X1 Gen6 with 2560x1440 display) and 2nd was my connected from my laptop to my main PC via RDP, same session. You can clearly see the difference.
I also discovered that on my laptop, if I hide the tree on the left side, the session becomes blurry. It becomes sharp again when I show the tree.
I think it's actually dependent on how wide the tree is - I can cause un/sharpness by merely making the tree window wider or narrower. Pretty sure this is some kind of bug.

Right, currently, logging off the Windows session will disconnect your Wayk session. We understand this is annoying, especially when fast-user switching. Our capture process runs in the context of the user session, and until recently we didn't the capability to stop-and-start that process independently of the Wayk session. That technical limitation has recently been solved as part of our macOS unattended support, so it remains to apply the fixes on our Windows version. You can look for improvements here in an upcoming release; I'd expect that to be early next year.

Thanks, that already sounds good. I hope that also means the Wayk Client entry in RDM, and not only the application.

We don't have or current plan to support something like that in the Wayk client. In RDM, it's possible to create a Wayk Bastion session type which will give you a native dashboard listing of machines, and show you the online status. The Wayk Bastion session type will soon be deprecated by a full-fledged Wayk Bastion data source that will give the same functionality you have for RDP sessions. That's in the pipeline right now but, again, likely won't be ready until the first quarter of next year.

To make one thing clear: currently the Wayk Bastion sessions entry in RDM doesn't correctly display the online status of the machine - I have another discussion open about this.
I am not talking about Wayk Client really. All my work is done in the RDM, and this is where I need the status.
But OK, if Wayk Bastion data source is coming, I guess there will be new things coming in.

First, a little background - historically, we stored "user" settings in the user profile, but "global" settings are stored in %programdata% (and "global" settings could/would override "user" settings). That structure came about due to the hybrid client/server nature of Wayk Now, and the fact that certain settings might be only applicable at one level. The upcoming release (2020.3.1) corrects this now that Wayk Now is two separate applications (Agent and Client). Agent settings are only in %programdata%, Client settings in the user profile.

That sounds great, looking forward to this update!

To answer your question, you have a few options for configuring the application at install time. The agent .msi supports many configuration parameters in this form:

I sent a ticket about this, the settings I need. Couple of example are good, I will find my way from there.

Hello

Regarding the sharpness of the remote session with or without the treeview in RDM: I think you forgot to attach the screenshots, but no worries - I did some testing and confirm there appears to be a bug there. I'll discuss this with my colleagues on the RDM team and get back to this post with an update.

Thanks and kind regards,

Thanks for an update.

Hello

We identified the rendering problem in RDM, it relates to the pixel alignment of the rendered image and, as you suppose, may be made worse or better by showing and hiding the navigation tree view (which changes the alignment of the image in relation to the window edge). We've committed a fix for that and it will be available in an upcoming release (I'd suggest to check the release notes). Thank you for reporting the issue!

Just to respond back on a couple of other points:

• The session termination when logging out of the remote machine is determined by the agent, so no change required on Wayk Client / RDM side to get the new behaviour
• The Wayk Bastion session type was only ever intended as a holdover until the true data source is ready. We have the data source in an alpha state right now - it is a high priority for us.

Thanks and kind regards,

• The session termination when logging out of the remote machine is determined by the agent, so no change required on Wayk Client / RDM side to get the new behaviour

To what new behaviour are you referring to?

Hello

I was referring to my comment up-thread:

> Right, currently, logging off the Windows session will disconnect your Wayk session. We understand this is annoying, especially when fast-user switching. Our capture process runs in the context of the user session, and until recently we didn't the capability to stop-and-start that process independently of the Wayk session. That technical limitation has recently been solved as part of our macOS unattended support, so it remains to apply the fixes on our Windows version. You can look for improvements here in an upcoming release; I'd expect that to be early next year.

Thanks and kind regards

Excellent, thank you!