Glossary

Communication Modes

• WebRTC: Real-time communication protocol, ultra-fast, enabling connection with optimal image and sound quality. See Network.

• WebSocket: Allows bypassing proxies using a relay. Ideal in restricted network environments. See WebSocket Relay.

Products

• Remote Desktop: Remote desktop streaming service (full desktops). See Computers.

• Reemo Containers: Docker container streaming service. See Containers.

Features

Interface

• User Management: Fine-grained user management with multiple levels of rights and organization. See Users.

• Dedicated Administrator Access: Ability to isolate administrator access (IP filtering / dedicated URL). See User and Administrator Portal.

• MFA: Multi-factor authentication (OTP via email or smartphone app, HTOP RFC-4226 and TOTP RFC-6238). See Security.

• SAML / LDAP: External authentication of users via SAML or LDAP. See Configure an SSO.

• SAML – Just-in-Time Provisioning: Connection possible without pre-provisioning the user. See Configure an SSO.

• SAML – Extra Mapping: Synchronization of additional fields (expiration, account status, automatic assignment to a collection). See Configure an SSO.

• SAML – Single Logout: Signs a SAML logout request to end the session on the identity provider’s side, instead of a plain redirect. See Configure an SSO.

• LDAP – Just-in-Time Provisioning: LDAP connection possible without pre-provisioning. See LDAP approach.

• LDAP – Synchronization: Scheduled task for syncing LDAP attributes. See Scheduled tasks.

• LDAP – TLS: Secure LDAP authentication via TLS certificates.

• LDAP – Extra Mapping: Synchronization of additional fields (expiration, account status, automatic assignment to a collection).

• LDAP – SASL: Advanced LDAP authentication with SASL.

• SCIM: Integration with a third-party Identity Management provider. See Provisioning via SCIM.

• Multi Connectors: Support for multiple authentication sources within the same organization. See Configure an SSO.

• CSV Import / Export: Import users or export logs and lists in CSV format. See Activity.

• Usage Schedule: Definition of authorized time slots for user connections. See Usage schedules.

• Chargeback: Reservation of licenses by department for internal cost allocation. See Group settings.

• Dedicated Portals: Customized portals by protocol (SAML, LDAP, internal) or connector. See User and Administrator Portal.

• Customization: Customizable interface icons and colors. See Instance configuration.

• Remote Experience Profile: Default configuration of video streams (bandwidth, format, FPS). See Remote Experience.

• Healthcheck: Simplified monitoring of the Reemo environment. See Health Checks.

• View Only: A Control level that restricts a session to view-only, with no keyboard or mouse control. Configurable as the account-wide default, and overridable per computer, per container profile, or per user-resource assignment. See Control Level (computer) and Control Level (container profile).

• Approval Workflow: Requires an approver to grant a user’s access request before they can connect to a resource. See Approval Workflow.

• Connection Form: Questions a user answers each time they connect to a resource, to justify their access. The answers accompany the access request and are kept in the security logs. See Connection Forms.

• Quick Access Pinning: Pin a resource to keep it always shown first in the Quick Access section, ahead of your most recently accessed resources. See Quick Access.

• Log Cleanup: Scheduled rotation and purge of logs. See Scheduled tasks.

• Secure Gateway: Dedicated reverse-proxy entry point enabling mutual TLS (mTLS) between the Reemo infrastructure and an external environment, without exposing the internal PKI. See Secure Gateways.

• Alerting: Routing of security events to notification channels, and follow-up of the resulting alerts until their resolution. Available for Private Cloud and On-Premises. See Alerting.

• Alert Rule: Defines which security events raise an alert, at what severity, and through which channels. See Alert rules.

• Notification Channel: Destination of alerts: in-app, email, webhook, Slack, Telegram, or Syslog. See Notification channels.

• Maintenance Window: Period during which alert notifications are suspended for a planned operation, while alerts keep being recorded. See Maintenance windows.

• Session Recording: Capture of a container session as screen frames and logs (commands entered, URLs visited), kept so it can be replayed and sensitive actions spotted. See Session Recordings.

• Record API: Service that receives, stores, and serves session recordings. It is enabled when the infrastructure is deployed. See Record API.

• Session Recording Player: Window to replay a recorded session, with its frames, its logs, and markers on the alerts. See Session Recording Player.

• Recording Retention: How long a recorded session is kept after it ends, before it is deleted automatically. It is set at the infrastructure level. See Storage & Status.

Remote Desktop

• Virtual Monitors: Add up to 5 additional virtual screens. See Virtual monitors.

• EVDI: Linux kernel module that supplies 5 virtual screens when the graphics card has no free video output, or when Reemo cannot use the ports of an NVIDIA card with the proprietary driver. See Virtual displays on Linux.

• Advanced Video Quality: Support for 4K / 120 FPS / H.265 / 4:4:4. See Toolbar.

• Bandwidth Management: Automatic or manual adjustment depending on the connection. See Maximum Bandwidth.

• Build to Lossless: Makes the static areas of the screen lossless, for sharp text and exact colors. See Build to Lossless.

• Virtual Microphone / Webcam: Integrated drivers for remote mic and camera. See Microphone and Webcam.

• Graphic Tablet: Usable in browser mode or via ReemoCompanion, with pressure sensitivity support. See USB forwarding.

• Gamepad: Game controller support. See Gamepads.

• Multi-user: Collaborative sessions with fine-grained keyboard/mouse rights. See Security.

• Virtual Sound Card: Optional via Reemo driver. See Virtual sound card.

• Multi-monitor: Capture and display of all remote screens (Split or Popup mode). See Toolbar.

• Privacy Screen: Block remote display for confidentiality. See Privacy Screen.

• Load / Save: Save and restore local window layouts. See Toolbar.

• Modifier Keys: Choice of the key of the remote machine that each modifier key of your keyboard sends, with modes that keep the key positions or your usual shortcuts when you connect between a PC and a Mac. See Modifier Keys.

• Stroke Preview: Draws your pen strokes on your screen right away, before they are sent over the network, to draw comfortably on high-latency links. See Stroke Preview.

• Wacom Emulation: Option that makes a remote Windows machine see your pen as a Wacom tablet, so that applications receive it through Wintab instead of Windows Ink. Requires the Wacom driver on the remote machine. See Emulated Tablet.

Reemo Containers

General Features:

• Shortcut: Container shortcuts directly on the user’s desktop.

• Template: Create reusable templates for containers. See Container blueprints.

• Collections: Groups of container profiles. See Collections.

• Container Profiles: Defined from templates. See Container profiles.

• Override Icon: Customize icons for images or profiles. See Container blueprints.

• Multi-cluster : Create containers on multiple clusters instead of one using an Active/Active or Active/Passive strategy. See Multi-cluster.

• Persistent Disk: Disk attached to a container (Kubernetes only) that keeps the user’s files between sessions. See Create an ALU image with a persistent disk.

RBI Mode (Remote Browser Isolation):

• Multi-browser: All standard browsers available. See Image catalog.

• Antivirus: Automatic file scan before download (via S3).

• 4K/60FPS video quality.

• Audio / Microphone / Webcam: Full support for video conferencing.

• Blacklist / Whitelist: URL filtering. See Chromium.

• Keyword Filtering: Weighted keyword filtering for access control.

• Restrictions: Management of download and clipboard rights. See Container profiles.

• External Proxy: Support for a proxy defined outside the container.

• Bookmarks: Add user favorites. See Chromium.

Bastion Mode:

• Lightweight Desktop: Minimal environments for secure sessions. See SSH Bastion.

• SSL Certificate: Add certificates during creation. See Certificates.

AppStreaming Mode:

• GPU: GPU support for graphics-intensive applications. See Container placement constraints.

Usage Modes

• Public Cloud: SaaS platform. Intended for individuals and companies.

• Private Cloud: For enterprises, via annual subscription.

• On-Prem: Deployment on internal network or private Cloud. Access to installers on request (hello@reemo.io).

Profile Types

• Owner: Primary administrator of an organization, responsible for licenses (one account per organization). See Licensing.

• Instance Administrator: Oversees and manages a full instance (Private Cloud / On-Prem). See First administrator account.

• Organization Administrator: Manages a given organization (Public / Private / On-Prem). See User roles.

• Group Administrator: Manages the entities of their group and subgroups. See Roles.

• Guest Account: Independent account, retains personal resources even after removal from an organization (Public Cloud). See Users.

• Managed Account: Account tied to an organization, deleted if removed (Public / Private / On-Prem). See Users.