Advanced Settings

Note: It is recommended that these settings only be changed at the request of a customer support representative.

• Hide inaccessible items - When enabled, files and folders for which the user does not have the Read permission will not be shown.
• Hide inaccessible items on reshares - When enabled, files and folders located on a network reshare for which the user does not have the Read permission will not be shown.

  Note: Enabling this feature can have a significant negative impact while browsing folders.

• Hide inaccessible SharePoint sites - When enabled, SharePoint sites for which the user does not have the necessary permissions will not be shown.
• Minimum Android client version - When enabled, users connecting to this Gateway will be required to have this or a later version of the Files Advanced Android client app.
• Minimum iOS client version - When enabled, users connecting to this Gateway will be required to have this or a later version of the Files Advanced iOS client app..
• Use Kerberos for SharePoint Authentication - If your SharePoint server requires Kerberos authentication, you should enable this setting. You will also need to make an update to the Active Directory computer object for the Windows server or servers that are running the Gateway server software. The Files Advanced Windows server needs to be given permission to present delegated credentials to your SharePoint server on behalf of you users. Enabling the Files Advanced Windows server to perform Kerberos Delegation:
  1. In Active Directory Users and Computers, locate the Windows server or servers that you have the Gateway Server installed on. They are commonly in the Computers folder.
  2. Open the Properties window for the Windows server and select the Delegation tab.
  3. Select Trust this computer for delegation to specified services only
  4. Select Use any authentication protocol, this is required for negotiation with the SharePoint server.
  5. You must now add any SharePoint servers that you would like your users to be able to access using Files Advanced . If your SharePoint implementation consists of multiple load balanced nodes, you will need to add each SharePoint/Windows node to this list of permitted computers. Click Add... to search for these Windows computers in AD and add them. For each, you will need to select the "http" service type only.

     Note: Please allow 15 to 20 minutes for these change to propagate through AD and be applied before testing client connectivity. They will not take effect immediately.

• Allow connections to SharePoint servers using self-signed certificates - When enabled, allows connections from this Gateway to SharePoint servers using self-signed certificates.
• Accept self-signed certificates from this Gateway Server - When enabled, allows connections from this Gateway to Files Advanced servers using self-signed certificates.
• Allow connections to Files Advanced servers with self signed certificates - When enabled, allows connections to this other Files Advanced servers using self-signed certificates.
• Show hidden SMB Shares - When enabled, shows hidden system SMB shares to the users.
• Client session timeout in minutes - Sets the time before an inactive user is kicked out of the Gateway Server.
• Use user principal name (UPN) for authentication with SharePoint Servers - When enabled, users will authenticate to SharePoint servers via their user principal name (e.g. hristo@glilabs.com), otherwise they will authenticate with domain/username (e.g. glilabs/hristo).
• Perform Negotiate/Kerberos authentication in user-mode - When enabled, the Gateway Server will authenticate to Data Sources using the connecting user's Kerberos ticket. This is only used for configurations requiring Kerberos (e.g. Single Sign-On, loadbalancing and etc.).

Custom Access Restrictions

You can use the default access restrictions set in the Policies section or you can set custom access restrictions for each Gateway Server.

Setting custom access restrictions for a specific Gateway Server

1. Navigate to the Mobile Access -> Gateway Servers tab.
2. Click on the arrow next to Details for the desired server.
3. Select Access Restrictions.
4. Open the Use Custom settings tab.
5. Select the specific access restrictions you want for this Gateway Server.
6. Press Apply.