<div dir="ltr"><div>Another option I haven't seen mentioned is using Apache Guacamole (<a href="https://urldefense.com/v3/__https://guacamole.apache.org/__;!!Mih3wA!VYqgj4ttccUQbt7iNWl2zTpji4nOtCS1I-uOJI9MFXJlhE74avQ2KbDpBBXehTSMjg$">https://guacamole.apache.org/</a>) as a secured portal for several connections. It is easier to justify the "startup cost" of using a system like guacamole the more remote servers you are trying to connect with. We use it not only as a gateway for our microscopes (and camera computers) but as well as a safer way to access compute resources from outside of the network. From an internet facing security standpoint it is a single port that is opened on the firewall (443) which can act as a gateway to all of your systems that need remote access. Guacamole is FOSS, so no worries about future licensing costs; however I believe there are enterprise support options for those who would like that option.</div><div></div><div><br></div><div><div><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div>Thejusvi Ganesh<br>Director of IT<br>NanoImaging Services, Inc.<br>4940 Carroll Canyon Road, Suite 115<br>San Diego, CA 92121<br></div></div></div></div></div></div></div></div></div></div><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 30, 2020 at 5:48 PM James Bouwer <<a href="mailto:jbouwer@uow.edu.au">jbouwer@uow.edu.au</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hi David,<div>Not sure how useful this is, but it could provide you with a data point. We just updated both our Arctica and Krios support PCs with the Windows 10 upgrade and everything related to </div><div>Rapid is working correctly. I suspect you may have challenges with your institute's firewall rules, which need to allow access to the correct IP addresses and ports. The ports that need to be opened are listed in the manual. </div><div>Best Regards,</div><div>James</div><div> <br><div>
<div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><br>James Bouwer, Ph.D.<br>Physicist - Engineer<br>General Manager of Cryo Electron Microscopy - Molecular Horizons <br>University of Wollongong<br>Northfields Ave.<br>School of Chemistry and Molecular Bioscience | Building 42 | Room G10<br>NSW 2522 Australia<br>T +61 0242 213 281<br><a href="mailto:jbouwer@uow.edu.au" target="_blank">jbouwer@uow.edu.au</a></div><div style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><br></div><br style="font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none;color:rgb(0,0,0)"><span style="color:rgb(0,0,0);font-family:Helvetica;font-size:12px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration:none"></span><span><img id="gmail-m_608190520116283483661BE33B3-4611-4979-BC73-ABC597C4873E" src="cid:174e1bdea42fd5b2ab21"></span>
</div>
<div><br><blockquote type="cite"><div>On Oct 1, 2020, at 12:45 AM, Morgan, David Gene <<a href="mailto:dagmorga@indiana.edu" target="_blank">dagmorga@indiana.edu</a>> wrote:</div><br><div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none">Hi,</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> I have another question related to our TFS Talos Artica. I think the question will be generic to all Krios/Artica/Glacios machines, and at least relevant to the concerns of other people.</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> After we upgraded the TFS support PC for our Artica to Windows 10, we lost the ability to run RAPID, the interface that TFS uses for remote access to the Artica. After several months and much gnashing of teeth, we got RAPID running again. At least in part, the RAPID system works by opening a tunnel through a particular port into the PC that actually runs the Artica. When this port is open, it is possible for a remote user to connect directly to the Artica PC and control the microscope. RAPID does not appear to need to be running for this to work, but it is the RAPID system that establishes and tests the port tunnel.<br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> We have been using this ability to establish a remote connection and any sort of VNC viewing program (such as VNCviewer or the viewer that comes with ultraVNC) to do things like check on data collection runs in the middle of the night and to check overall system health. THe mechanics of doing this is simply to point the VNC viewer to the IP address of the support machine, but additionally to append "::portNumber" to the address.<br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> Except that after our upgrade to Windows 10, the connection is totally unstable. I can make sure that it is working (by physically sitting at the Artica PC's keyboard and monitor, resetting some things and doing a test of the remote connection), only to discover later that the connection can no longer be made. In my case, "later" can be anywhere from 10 minutes to 2 hours to the next day. In no case has the connection survived 24 hours since we did the upgrade.</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> We have asked several people at TFS to look into this without any success. We have made certain that our local IT people are not doing anything that is causing the connection to break. We have asked them to look at the various components and troubleshoot. Again, no-one seems to have any idea what is causing this problem.</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> Has anyone else run into a similar issue, and if so, what have you been able to do about it?</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> As a bit of additional information, we have exactly this same problem with a TFS Teneo SEM that operates through the same sort of support PC/microscope PC system. We do not seem to have this problem with using VNC viewers for remote connections to other systems in our facility.</div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"> Any advice would be appreciated. Thanks.<br></div><div style="margin-top:0px;margin-bottom:0px;font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><br></div><div id="gmail-m_6081905201162834836Signature" style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px"><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px">-- </div><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px"> politics is more difficult than physics.</div><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px"> A. Einstein</div><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px"><br><div name="divtagdefaultwrapper" style="font-family:Calibri,Arial,Helvetica,sans-serif;margin:0px"> David Gene Morgan<br> Electron Microscopy Center<br> 047E Simon Hall<br> IU Bloomington<br> 812 856 1457 (office)<br> 812 856 3221 (3200)<br> <span> </span><a href="https://urldefense.com/v3/__https://protect-au.mimecast.com/s/-khACk81RRtknnlS2hprh?domain=urldefense.com__;!!Mih3wA!VYqgj4ttccUQbt7iNWl2zTpji4nOtCS1I-uOJI9MFXJlhE74avQ2KbDpBBVoFh9Eew$" target="_blank">http://iubemcenter.indiana.edu</a></div></div></div></div><span style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none;float:none;display:inline">_______________________________________________</span><br style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><span style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none;float:none;display:inline">3dem mailing list</span><br style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><a href="mailto:3dem@ncmir.ucsd.edu" style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">3dem@ncmir.ucsd.edu</a><br style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"><a href="https://urldefense.com/v3/__https://protect-au.mimecast.com/s/ceIRClx1YYt1ooGC9-aZ7?domain=mail.ncmir.ucsd.edu__;!!Mih3wA!VYqgj4ttccUQbt7iNWl2zTpji4nOtCS1I-uOJI9MFXJlhE74avQ2KbDpBBUsFKRwFw$" style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255)" target="_blank">https://protect-au.mimecast.com/s/ceIRClx1YYt1ooGC9-aZ7?domain=mail.ncmir.ucsd.edu</a><br style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:16px;font-style:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoration:none"></div></blockquote></div><br></div></div>_______________________________________________<br>
3dem mailing list<br>
<a href="mailto:3dem@ncmir.ucsd.edu" target="_blank">3dem@ncmir.ucsd.edu</a><br>
<a href="https://mail.ncmir.ucsd.edu/mailman/listinfo/3dem" rel="noreferrer" target="_blank">https://mail.ncmir.ucsd.edu/mailman/listinfo/3dem</a><br>
</blockquote></div>