Breadcrumbs

Step 3 - Connect to your BlastShield™ network and open your Orchestrator

Connect to BlastShield™ using the Desktop Client and Mobile Authenticator App

You can connect to a BlastShield network using the Desktop Client on your computer and the Mobile Authenticator app on your phone. To learn how to connect, please watch the following video or read the steps below.


  1. Launch the BlastShield™ Desktop App and from within the BlastShield™ Desktop App select the "Mobile App" Authentication Method.

  2. You will be prompted to scan a QR Code with your Mobile App.

  3. Launch the BlastShield™ Mobile Authenticator app and scan the QR Code.

  4. Select your network in the Desktop Client and click on Connect.

  5. You will be prompted to verify your facial or fingerprint biometric identification (mobile device dependent).

  6. Once your identification is verified you will be logged into the BlastShield™ network.

  7. If you would like the BlastShield™ Client to stay connected when your screen is locked then you can configure this in the Client as described below.

    1. Click on the BlastShield icon on your desktop.

    2. Click on the Settings menu.

    3. Uncheck the option for Disconnect on screen lock.

disconnect-on-lock.png


Connect to BlastShield™ using the Desktop Client and FIDO2 Key

  1. Launch the BlastShield™ Desktop App and from within the BlastShield™ Desktop App select the "FIDO2 Key" Authentication Method.

  2. You will be prompted to enter your FIDO2 Key PIN code.

  3. Select your network in the Desktop Client and click on Connect.

  4. You will be prompted to interact with your authentication key to sign on to the network.

  5. Once your identification is verified you will be logged into the BlastShield™ network.

  6. If you would like the BlastShield™ Client to stay connected when your screen is locked then you can configure this in the Client as described below.

    1. Click on the BlastShield icon on your desktop.

    2. Click on the Settings menu.

    3. Uncheck the option for Disconnect on screen lock.

disconnect-on-lock.png


Desktop Client connectivity requirements

  1. Allow outbound access to the following domains. Whitelist these on your firewall as necessary or if you use an SSL web proxy then bypass them from the proxy:

    auth.blastwave.io and lighthouse.blastwave.io on TCP port 443.

  2. Outbound UDP ports to all required destinations.

  3. Resolution of DNS requests must be supported by the network.

  4. If you use DNS over HTTPS, ensure it is configured in your OS and not in your browser to allow the BlastShield Client to use its associated DNS server.

  5. Ensure that the timezone is correctly set on your computer for your location and that the clock is set accurately.

The Desktop Client user interface

An example of a connected BlastShield™ Client user interface is shown here:

new-client.png

The user interface attributes and controls are explained below.


Desktop Client user interface

Name

Description

Current Network

The name of the connected BlastShield network. Administrators see (Admin) after the name.

Peer Connections

The number of active peer connections.

Connection Time

The duration of the current connection.

Launch…

(Only visible to Administrators)

Opens a dropdown with the two options:

  1. Open a session with the Orchestrator

  2. Open a session with BlastAccess (Requires MFA before connection is established).

Disconnect

Disconnects from the current connection.

Resources

Opens the Authorized Resources screen, which lists the resources your policies allow you to reach.

Logs (Found in the three-line menu)

Opens the Client log viewer.

Note

The BlastShield™ Desktop Client app must remain running while you are connected to the BlastShield™ network. To disconnect, either quit the BlastShield™ Desktop App, or Select Disconnect from the app.

Connect to the Orchestrator

To learn how to connect to the Orchestrator, watch the following video or read the steps below.

Note

A second authentication to the Orchestrator is not needed if within a short user-defineable window.

Tip

Please remember that you must first authenticate and connect to your BlastShield™ network before you can connect to the Orchestrator.

  1. Go to the BlastShield™ Desktop Client on your computer and ensure the Connection Status shows that it is connected.

  2. Select the "Launch Orchestrator" button on the BlastShield™ Client.

  3. Scan the displayed QR code with the BlastShield™ Mobile Authenticator App on your mobile device.

  4. Verify your facial or biometric identity on your mobile device.

  5. The Orchestrator administration user interface will open in your browser.

Last updated: