Abstract: A method for isolating applications on a network, the method including: denying network traffic access to applications sitting behind an Access Gateway Engine; receiving a username of a user that logs onto the network; extracting a source address associated with the username; retrieving a list of applications with which the username is permitted to communicate; extracting application destination information for each application of the list of applications; generating an access control policy for the username, the access control policy allowing the username having the source address to communicate with the list of application each of which having respective the destination information; the Access Gateway Engine allowing or denying the network traffic, originating from the username source address, access to the applications, according to the access control policy for the user.

Abstract: Computerized methods and systems receive, from a web client of a client device, a request, addressed to a web server, to retrieve a requested web resource hosted by the web server. An initial reputation associated with the requested web resource is determined. A user of the client device is prompted to respond to at least one generated query corresponding to the requested web resource, in response to the determined initial reputation. At least one response to the at least one generated query is received from the user. The initial reputation associated with the requested web resource is updated, based in part on the at least one response to the at least one generated query received from the user.

Abstract: A remote access application queries the client device for its display properties. Using the display properties of the client device and optionally the size of the fingertip of the user, a connection resolution for a remote desktop connection is determined. A remote desktop session is retrieved at the connection resolution and remote pixels are mapped to client pixels at a non-1:1 ratio. Remote desktop is then optionally resized to full screen.

Abstract: A remote access application queries the client device for its display properties. Using the display properties of the client device and optionally the size of the fingertip of the user, a connection resolution for a remote desktop connection is determined. A remote desktop session is retrieved at the connection resolution and remote pixels are mapped to client pixels at a non-1:1 ratio. Remote desktop is then optionally resized to full screen.

Abstract: A remote access application queries the client device for its display properties. Using the display properties of the client device and optionally the size of the fingertip of the user, a connection resolution for a remote desktop connection is determined. A remote desktop session is retrieved at the connection resolution and remote pixels are mapped to client pixels at a non-1:1 ratio. Remote desktop is then optionally resized to full screen.

Abstract: In a client-server system, a server-node application runs a user session and a remote presentation protocol communicates between the client node and the server node. The server node stores a remote virtual desktop including remote windows of the user session. The client node displays multiple local windows of applications running locally on the client node and further displays one or more windows of the remote virtual desktop. The one or more windows are clipped to produce a clipped region so that the remote windows are displayed therein to appear as the local windows. The local windows are enumerated according to z-order from back to front and an area of each local window which overlaps the clipped region is subtracted from the clipped region so that the local windows show through the area.

Abstract: In a client-server system, a method providing windows of applications running on server nodes the same look and feel as windows of applications running on a client node, and providing remote virtual desktops with the same look and feel as the local desktop on the client node, including: (a) providing server nodes; (b) providing applications running on the server nodes; (c) providing a remote presentation protocol for accessing the applications; (d) providing at least one client node displaying windows of the applications on a local desktop; (e) communicating, to the server nodes, status information regarding attributes of the local desktop, by operating a first software module on the client node, the attributes including representational attributes and/or behavioral attributes, and (f) receiving the status information from the client node and applying the status information to the applications running on the server nodes, by operating a second software module on the server nodes.

Abstract: In a client-server system, a server-node application runs a user session and a remote presentation protocol communicates between the client node and the server node. The server node stores a remote virtual desktop including remote windows of the user session. The client node displays multiple local windows of applications running locally on the client node and further displays one or more windows of the remote virtual desktop. The one or more windows are clipped to produce a clipped region so that the remote windows are displayed therein to appear as the local windows. The local windows are enumerated according to z-order from back to front and an area of each local window which overlaps the clipped region is subtracted from the clipped region so that the local windows show through the area.

Abstract: A method for single sign-on in a client-server system including a server and a client and a remote presentation protocol based on ITU T.120, communicates between the client node and the server. The client obtains a ticket for a user operating the client. The ticket identifies the security context of the user on the client. Upon connecting the client to the server, the ticket is transferred from the client to the server. The server authenticates the ticket with a security authority and when authenticated the server receives from the security authority a security context for the ticket. When the client so requests, applications are launched using that security context. Preferably, the server is a Microsoft Terminal Server and the remote presentation protocol is Microsoft Remote Desktop Protocol (RDP). The ticket transfer preferably uses a channel within the remote presentation protocol, such as an RDP virtual channel.

Abstract: A method of, and system for, using a high-level, task-oriented Application Programming Interface (API) to access a legacy system, the method including the steps of: (a) providing the legacy system, including emulation software for accessing the legacy system; (b) operating a low level API over the emulation software; (c) operating the high-level, task-oriented application programming interface over the low level API, and (d) implementing database access protocol emulation over the high-level API.

Abstract: A method of, and system for, using a high-level, task-oriented Application Programming Interface (API) to access a legacy system, the method including the steps of: (a) providing the legacy system, including emulation software for accessing the legacy system; (b) operating a low level API over the emulation software; (c) operating the high-level, task-oriented application programming interface over the low level API, and (d) implementing database access protocol emulation over the high-level API.

Abstract: A method of enabling communication between a terminal emulator client device and a host computer through an intermediary server computer. The terminal emulator client device is preferably a computer which operates according to the TN5250 terminal emulation protocol. The host computer is preferably an AS400. The intermediary server computer is preferably operating SNA software. The present invention includes a communication interface software which acts as a client to the host computer, and as a server to the client device, and which is preferably operated by the intermediary server computer. The software of the present invention enables direct addressing of the client device through a permanent name.