Web Services

Overview

Web Services (HTTP/S) resources allow users to access web applications and services. Web resources can be accessed through the web portal or via HTTP/S proxy.

Web resources currently do not have authentication modes, but that is coming soon.

Session Recording

Mamori web sessions are recorded and logged using embedded Virtual Desktop Infrastructure (VDI) technology. This provides complete session capture and audit capabilities for web resource access. Recordings can be viewed alongside other Mamori RDP sessions in the unified session playback interface.

HTTP session are always recorded. HTTPS sessions are only recorded if the certificates for the target site are provided. SSL does not permit decryption without the appropriate private key and certificate.

Launching web sessions that are excluded from the PAC script are not recorded.

To enable VDI-based recording for web sessions, you need to configure your VDI infrastructure. This requires:

RDP Template Configuration: Define an RDP Template in Mamori. This template will not be launched directly but is used to specify connection options (excluding target host and credentials) for the VDI sessions.
SSH Login to VDI Server(s): Configure an SSH Login credential in Mamori for your VDI server(s). While you can use your Mamori server for VDI, it is strongly recommended to use a dedicated VDI server for optimal performance and scalability.
Docker Installation: Install Docker on the Linux server(s) that will host the VDI infrastructure. Docker version 26 or higher is required.

The configuration process involves:

Adding a VDI Host - Register your VDI server(s) with Mamori
Configuring Web Resource Properties - Set up web resources to use VDI recording

Instruction Guide

Create Web Resource

Click HTTP Resources

Click

Set the properties

Field Description
Resource Name Your reference for the resource
URL Target URL
Exclude from PAC If excluded the URL, then mamori will launch the site but traffic will not go through the proxy.
Description Your description for the resource

Click Save

Field	Description
Resource Name	Your reference for the resource
URL	Target URL
Exclude from PAC	If excluded the URL, then mamori will launch the site but traffic will not go through the proxy.
Description	Your description for the resource

Web Resource Properties

Web resources can have additional properties to allow you to control how the resource is handled.

Resource Properties properties

Field Description Default
datasource The datasource that is presented to event handler none
launch The url that will be launch. Remote URL
certificate_name Certificate that is used when this url is proxied Mamori generated certificate
ca_certificate_name CA of certificate that is used when this url is proxied. Typically required when certificate is not already trusted by clients. Mamori generated certificate
key_name The private key to use when this url is proxied Mamori generated key
pac_override The name to put into the PAC script Remote URL
proxy_method The method to use in PAC script https
domain_override Regex used in transparent parent proxy to determine if extra headers are required

Field	Description	Default
datasource	The datasource that is presented to event handler	none
launch	The url that will be launch.	Remote URL
certificate_name	Certificate that is used when this url is proxied	Mamori generated certificate
ca_certificate_name	CA of certificate that is used when this url is proxied. Typically required when certificate is not already trusted by clients.	Mamori generated certificate
key_name	The private key to use when this url is proxied	Mamori generated key
pac_override	The name to put into the PAC script	Remote URL
proxy_method	The method to use in PAC script	https
domain_override	Regex used in transparent parent proxy to determine if extra headers are required

Grant Access

Manual Grant

Click HTTP Resources

Find the resource in the grid and click

Click Manager Assigned Users or Manager Assigned Roles

For time grants toggled advanced options

Click on the grantee to add or remove the grant

Setup On-Demand

Click HTTP Resources

Find the resource in the grid and click

Click Manage Request Grants

Click Add Grant

Enter the grant information

Click Save

Connecting

To connect to a web resource

Login to the Mamori portal

Click HTTP Resources

Find the resource you want to access

Click the Connect button

Users can also just enter the URL in the browser.