Reflection for the Web 2011 Enterprise Edition is terminal emulation software that securely connects web browser users to applications on IBM, HP, UNIX, and OpenVMS hosts. Centrally deployed and managed, Reflection for the Web 2011 offers easier automation, an enhanced user experience, and unrivaled security. With our advanced security features, you can safely connect to fully functioning host applications across the public Internet, and integrate your legacy applications into your modern LDAP-based security infrastructure.
What’s New in Reflection for the Web 2011 Enterprise Edition?
- Native 64-bit support for Windows and Linux servers, for enhanced performance and scalability.
- Swift automation of business processes with a JavaScript macro recorder.
- Easier administration of user access rights through an LDAP session-access report.
- A configurable toolbar that lets users map file transfer requests, favorite commands, macros, and other actions to custom buttons.
- Bolstered host security, with updates to the Reflection server’s Tomcat servlet engine and Java runtime.
With Reflection for the Web 2011 Enterprise Edition, you can:
- Securely connect local and remote web browser users to legacy applications running on IBM mainframe, iSeries, UNIX, OpenVMS, and HP hosts.
- Centrally install, deploy, and manage your terminal emulation applications.
- Protect host sessions with patented secure token authorization and AES encryption over SSL/TLS and SSH.
- Support emerging technologies, including Windows 7; Google Chrome; zLinux; and Microsoft, Citrix, and VMware virtualization platforms.
- Take full advantage of scalable, high-performing servers with the automated 64-bit installer for Windows and Linux.
- Use the JavaScript macro recorder to build complex macros that swiftly automate business processes.
- Drag and drop icons to a configurable toolbar with a single click—and even map commands, keyboard actions, and macros to custom buttons.
- Authenticate users with Active Directory, LDAP, X.509 smart cards, Kerberos, and web portal authentication methods.
- Use enterprise directory services, such as Active Directory, to control user access to sensitive data and resources—without making any changes to your LDAP schema or data.
- Facilitate compliance with regulations such as Payment Card Industry (PCI), Sarbanes-Oxley, Gramm-Leach-Bliley, HIPAA, and Basel II.
- Meter thin-client usage in standard desktop or Citrix environments with the Reflection Metering Server.
| More Editions of Reflection for the Web 2011 |
- Reflection for the Web 2011 Unisys Edition
For Unisys ClearPath Libra, Unisys ClearPath Dorado, IBM mainframe, iSeries, HP e3000, UNIX, and OpenVMS systems |
- Reflection for the Web 2011 Airlines Edition
For IBM TPF, ALCS, and Unisys systems commonly used in the airline and travel industries—and for IBM mainframe, iSeries, HP e3000, UNIX, and OpenVMS systems |
Diagram 1: Reflection for the Web Architecture

Reflection for the Web offers:
- Centralized management—Host access sessions are administered on a web server.
- Web-based deployment—Clients are automatically deployed to end users through their web browsers.
- Multi-platform clients—Supports Windows, Mac, and Linux clients.
- Multi-platform servers—Supports Windows, Linux, UNIX, z/OS, zLinux and other servers.
- Load balancing—Automated data replication simplifies load balancing.
- Simplified administration—Includes the option to restrict access to specific LDAP users/groups.
- Multiple protocols—3270, 5250, VT, NS/VT, SSL/SSH, IND$FILE/FTP/Secure FTP/SFTP.
- One solution for multiple hosts—IBM mainframe, System i, UNIX/Linux, HP, and OpenVMS.
Diagram 2: Reflection for the Web Security

Reflection for the Web includes the following security features:
- LDAP access control—Restricts host access using LDAP user/group definitions.
- Non-intrusive LDAP integration—No schema changes required; no data stored in the directory.
- Firewall-friendly remote access—Accesses multiple hosts through one Security Proxy Server port.
- PKI support—Smart cards, X.509 certificates, CRL, and OCSP.
- Encryption—SSL/TLS, SSH, SFTP with AES 128/256, TripleDES, FIPS 140-2-validated cryptographic modules.
- Authentication—Active Directory Single Sign-On, PKI/smart cards, CA SiteMinder, web portals, and LDAP.
- Broad LDAP support—Active Directory, Novell eDirectory, RACF, and other RFC 2256-compliant LDAP directories.
Learn More
Product Highlights
Technical Specifications
Version Comparison Chart
Technical Notes
- 2557 New Features in Reflection for the Web 2011
- 2111 Frequently Asked Questions: Reflection for the Web
- 2386 Using Templates in Reflection for the Web
- 2517 Configuring Reflection for the Web ID Manager
- 2535 Reflection for the Web 2011 Scripting Samples