Download pdf - OpenLine ontbijtsessie · PDF fileOpenLine ontbijtsessie ... • XenApp / XenDesktop • ShareFile ... performance, desktop logon and application response times for

OpenLineontbijtsessie

RichardvandenOudenalderCitrixServiceProviders Netherlands,EMEAWestern Europe,CitrixSystemsInc.

MennoBernardt

CitrixServiceProviders Netherlands,EMEAWestern Europe,CitrixSystemsInc.JULY4,2017

2 ©2016Citrix|Confidential

Today’sTopics

Ø Introduction

Ø Citrixvision• HowCitrixsecurestheworkspace

Ø Citrixtechnologyupdate• XenApp/XenDesktop• ShareFile• XenMobile• NetScaler

3 ©2017Citrix

o Visieo Bedrijfsplano Doelstellingeno Financieel

o IT Beleidsplano Innovatieo Wet&

Regelgeving

o ITArchitectuur

o Budgeto Facilityo Asset

management

o Analyseso Functionalitieto Beschikbaarheido Veiligheid

o Infrastructuur,platform&applicatie design

o Productieo Marketingo Verkoopo Service

o ProjectManagement

o Monitoring

o Integratieo Implementatieo Migratieo Beheer

Strategisch

Inrichten

Uitvoeren

Business Informatie &Communicatie

Technologie

CouldyourITDepartmentbecomemoreeffective?

Slaan weeen brugtussen devraag

vandebusinessendedienstverlening

vanIT?

Weten weprecieswathiervoor nodig

is?

4 ©2017Citrix

Strategisch

Inrichten

Uitvoeren


Technologie

Vraag Vraag

Aanbod Aanbod

IST(analyse)

Soll(interviews)

1. Knelpunten2. Speerpunten3. Projecten

1. Kwalificeren2. Prioriseren

HowdoesITsupportthebusinesseffectively?

5 ©2017Citrix

o Visieo Bedrijfsplano Doelstellingeno Financieel

o IT Beleidsplano Innovatieo Wet&

Regelgeving

o ITArchitectuur

o Budgeto Facilityo Asset

management

o Analyseso Functionalitieto Beschikbaarheido Veiligheid

o Infrastructuur,platform&applicatie design

o Productieo Marketingo Verkoopo Service

o ProjectManagement

o Monitoringo Service

Management

o Integratieo Implementatieo Migratieo Beheero Support

Strategisch

Inrichten

Uitvoeren


Technologie

CouldyourITDepartmentbecomemoreeffective?

• Wie kent deorganisatieen haar doelstellingen hetbest?

• Wie kan efficient&snelcommuniceren ?

• Waarom isdeeigen ITafdeling dan niet meerdiensten aan hetuitbesteden ommeerdeze taak goed uit tevoeren ?

6 ©2017Citrix

BridgeplanAcompliantplantoassisttheserviceproviderfromaperpetuallicensingmodeltoaconsumptionbasedlicensingmodel

withoutcausingmajordisruptionincost-basisforexistingcontracts.

7 ©2017Citrix

Challengeswithdifferentlicensesmodels

xXAPerpetualLicensesreselled bytheCitrixReseller

• Additionalbuyingprocessnewlicenses

• NormalLicensesManagement

x XACSPLicensesmanagedbytheCitrixService

Providerpermonth

EasyLicensescaling

EasyLicenseManagement

CAPEXmodel OPEXmodel

Decline

Grow

Bundles

Type

Declineextracost

8 ©2017Citrix

Identify

• Identify– Customerusingperpetualforhosting– CustomerwilloutsourcehisITtoaCSP

Identifyperpetuallicensesusedforhosting

Identify

Identify customersusing

perpetuallicensesfor3rd

partyhosting

AllentitiesusingCitrixproductstohostservicesfor3rdpartiesshoulddosousinglicensesprocuredundertheCitrixServiceProviderProgramForcustomerscurrentlyusingPerpetualLicensestoservice3rd parties,anynewusersshouldbeprocuredundertheCSPProgram

9 ©2017Citrix

Qualify

• Benefits– Cannowbeintegratedintoserviceproviderestatesimplifyingmanagement– Nomonthlyusageowedforperpetualorannuallicenses– Reducecomplexityofmultiplelicenseservers– ReduceadministrativecostbasedonqualificationforuseofCitrixtools– Preservesinvestmentinperpetuallicenseswhileincentingcustomerstoeithermovenoworinthefutureastheirlicenseinvestmentisamortized

Qualifyhostingusagerights

Qualify

Qualify hostingusagerights

toclarifycustomerbenefits

&Standardize license

practices

10 ©2017Citrix

Convert• Convert– Identifyyourownperpetuallicensesbeingusedforhosting(complete)– SelectCSPlicensesbasedonthesamefunctionality

• Which givingthe usage rights forthe actual install base• Oraconverted amount of licenses (CCUconsideration)

– Createapreferredbusinessplantoconvertthelicenses• MatchingexistingcostforSWM(Select)tosupportthisplan• Mutualcommitment fromboth partnerandCitrix

– Partnerreturns ordestroys the perpetual licensing andstartusing CSPstocklicensing• Theconvert licenses become abaselineare usedaslong asneeded.• Normalreporting stays the sameas itwas before abridgeplanintegration

ConvertperpetuallicensestoServiceProvider

Convert

Convert licenses&Ensure

customerscurrent

investmentisprotected

CSPTechnicalproductupdate

CitrixandSecurity


SecurityIsTopofMind


Securityiscomplex


SecurityChallengesOurCustomersarefacingToday

SecuredAccess

MobileSecurity

Data&IPProtection

Compliance&

Governance

BusinessContinuity

Visibility&insightsintouser,device,network,andcloudactivity

InsiderThreatsThirdParty

RemoteAccessM&AIntegration

MobileDevicesMobileApps

UnmanagedDevice

Legacy&CustomappsLossofIPandsensitivedataDatasharing

GLBA,SOX,NIST,GDPR

HIPAA,PCI-DSSFFIEC,NUAC,OCCdatasovereignty

MalwareattacksDDoSProtection

WorkforceContinuityDisasterRecovery

16 ©2017Citrix

NetScalerGateway

Hypervisor

CurrentApproachbyMostCitrixCustomers

ResourceLocation

On-premises

Internet

SaaS

XenAppSecureVirtualBrowser

InternalUsers

Firewall

Nativebrowsers


NetScalerGateway

XenServer+BitdefenderHVI

Addedon-prem securitybyCitrix

ResourceLocation

On-premises

Internet

SaaS

XenAppConfidentialBrowser

IntranetBrowser

InternetBrowser

WebAppFirewall

Intranet

NetScalerSecureWebGateway

WebfilteringSmartAccess&Federation


ButthePerimeterisexpanding&MixofAssets&Data

VPN

Endpoints

RemoteWorkers

Mobile/BYO

EnterpriseEndpoints

IoT/Wearables

Network

3G/4G

WAN

VPN

Applications

Media

EnterpriseData

Email

Data

CloudData

MobileData

PersonalData

FileServer

SecurityServices

SoftwareDefinedPerimeter

CitrixSecureDigitalWorkspace

Users SecureIT

Security&PerformanceAnalytics

UnifiedExperience

“BYO”Identity

SingleSign-on

UnifiedEndpointManagementContextual

Access

ContextualPerformance

AppOps

ContentControl

Legacy/CustomApps

SecureWindowsAppDeliveryXenAppandXenDesktop



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps


OnlyXenServerenableschoiceinGPUvendorsXenServer7.2Experimental,EnterpriseEditionfeature

experimental

New

XenMotion forNVDIAGRIDWorkloads!


AcropolisNEW!

XenServer

Hyper-V vSphere

• PVS-Accelerator

• HypervisorIntrospection

• GraphicsLeadership

• Nomoredowntimeduringupdates

with


PreventingZeroDayAttacksHypervisorIntrospection(HVI)withXenServerandBitdefender

Protectsin-guestmemoryforreal-timeanalysis

HypervisorprovidesisolationifVMinstanceiscompromised

Reliesondetectingattacktechniques,versusapre-existingpatternfile

Performanceoverheadmanagedbyhypervisorhost,notindividualVM

Agentperhypervisorhost,notindividualVM

25 © 2016 Citrix | Confidential

Retire

Package

Patch

PublishValidateApplicationLife-CycleProcure


AppManagement• Step1:Gatherapps

App


AppManagement• Step2:Analyzeandremediateapps

App AppDNA


AppManagement• Step3:Sequenceandlayerapps

CreateApp-VSequence

CreateLayer

App ManualInstall

• App-V– Automatedsequencecreation– Supportsappisolation– Noextrainfrastructurerequired– 1sequencetomanytargets

• Layer– Integratedlayerinteroperabilityanalysis– Noextrainfrastructurerequired– 1layertomanytargets

• ManualInstall– Traditionalapproach– Apppartofthedesktopimage

AppDNA

+securityanalysis


AppManagement• Step4:Publish&deliverapps

CreateApp-VSequence

App ManualInstall

Windows7,8and10App

Pooled VDI

Personal VDI

Windows2008R2and2012R2App

CreateAppDisk Layer

AppDNA

SecureandrapidAppdeployment


Thiswon’thappentoyouifyouuseXA/XD!


NewCitrixReceivers

ReceiverforLinux13.6• AdaptiveTransport/EDTSupport

Receiver7.3foriOS• AdaptiveTransport/EDTSupport

ReceiverforChrome&HTML5• Multi-monitor• Chromeappshortcuts• SDKenhancements

ReceiverforMac12.6• Auto-Update• HighDPImatching

ReceiverforWindows4.8• Auto-Update


ExpandingourLinuxusecaseCosteffective,securevirtualappsanddesktops

Ubuntu RHEL CentOSProvisioningServices

LinuxVDIHostedShared SeamlessApps

Cost-effectiveoptionsforLinuxwithnon-GridNVIDIAGPUs


OnlyAvailable withXenServer7.2andXenDesktop7.14

RoamsessionsbetweenTabletsandDesktopswithWindowsContinuum

experience

WindowsContinuumexperienceonanydevice


UDP

FramehawkGearing

Framehawk Graphics

Multitouch

AdaptiveTransport

RTP

Mouse

Keyboard

Audio

AdaptiveDisplayTCP Audio

Skype

Multimedia

Flash

Multitouch

SeamlessWindows

ICA Clipboard

Smartcards

Keyboard/Mouse

Printing

MobileSensors

GenericUSB

Drives

Enhanceduserexperiencewithminimaladministrativeoverhead


UDP

FramehawkGearing

Framehawk Graphics

Multitouch

RTP

Mouse

Keyboard

Audio

AdaptiveDisplayTCP Audio

Skype

Multimedia

Flash

Multitouch

SeamlessWindows

ICA Clipboard

Smartcards

Keyboard/Mouse

Printing

MobileSensors

GenericUSB

Drives

AdaptiveDisplay

AdaptiveTransport

Audio

Skype

Multimedia

Flash

Multitouch

SeamlessWindows

ICA Clipboard

Smartcards

Keyboard/Mouse

Printing

MobileSensors

GenericUSB

Drives

AdaptiveTransportEnhanceduserexperiencewithminimaladministrativeoverhead


Deliveringthebestexperienceatthelowestcost

40%reductioninBandwidth

2xfastersessioninteractivity

10xfasterprinting&filetransfer

RaisingthebarwithnextgenerationHDXtechnologies


RealTime OptimizationPackforSkypeforBusiness

What’sNew

SupportforH.264-encodingwebcams

Hardwareaccelerationforvideoencoding/decoding

RealTime MediaEngineUpdateService

What’sComing

RealTimeMediaEngineforHDXPi

RealTimeMediaEngineforChromebooks

200,000DailyActiveUsers

(DAU)ofHDXRealTime

OptimizationPackforSkypeforBusiness

Thedevelopment,releaseandtimingofanyfeaturesorfunctionalitydescribedforourproductsremainsatoursolediscretionandaresubjecttochangewithoutnoticeorconsultation.Theinformationprovidedisforinformationalpurposesonlyandisnotacommitment,promiseorlegalobligationtodeliveranymaterial,codeorfunctionalityandshouldnotberelieduponinmakingpurchasingdecisionsorincorporatedintoanycontract.


WorkspaceEnvironmentManagement

UserEnvironmentManagement

Deliverthebestpossibleworkspaceperformance,desktoplogonandapplicationresponsetimesfor

everyuser

ResourceManagement

Intelligentlyadjustthewayapplicationsutilizesystems

resourcessuchasRAM,CPUandInput/Output(IOPS)

70%Improved server

scalability

80%Improved logon

times

TransformerInstantlyconvertanyPCintoahigh-performancethinclient,extendingthelifeoftheexistinghardwareto

savemoney

BasedonNorskale acquisition

*Premiumonly

EnableyourbusinesswithrapiddeploymentsAppLayering


• Traditionalagent-basedPCconfiguration,applicationvirtualization,andimagemanagementsolutionshavemadelifemiserableforITandWindowsusersforyears

What’stheproblemwe’resolvingwithUnidesk?

ComplexandInefficientHighFailureRatesImagesprawlADrainonITBudgetsDaysorWeekstoDeliverNewAppsRepackagingforEveryPlatformIncompatiblewiththeCloud

Reduceoveralldesktopandapplicationmanagementcosts

*Premiumonly

41 ©2017Citrix

• SeparateappsandOSfromtheimage–OnlysolutionthatlayersallofWindows–Unparalleledappcompatibility(>99.5%)– Soeasy,anybodycanmakelayers

• Oneappperlayer,nostacksorbubbles

42 ©2017Citrix

Elasticlayering

• Customizeeachworkspaceondemand–Appson-demand– instantuserassignedapps– Simplemanagement– 100%ADgroupmembership–Optionalpersistence– userapps/profile/data

Solves95%ofyourchallenge!

43 ©2017Citrix

Layeringisthe“tech”nottheproduct…

• LayeringisEVERYWHERE!– Essentiallythetechisfilesystemandregistryvirtualizationcombinedwiththelogiconhowtocombinetheseelementsfromdifferent‘layers’.

• LayersareuniquevirtualdisksthatcontainonlythefilesystemandregistryforagivenOSorApplication.

• ThisallowsforanyapplicationtopackagedasalayerandseparatedfromtheOS,unlikepreviousapp-virt toolsandotherlayeringproductsonthemarket.

44 ©2017Citrix

SecurefilesharingShareFile



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps

© 2014 Citrix. Confidential.

Users DemandInstant access from any deviceFile sharing with anyoneEasy and familiar user experience

IT RequiresSecurityControl No data leakage

ShareFile – Solve the “DropBox Problem”



1. ShareFileworkswithfileversioning2. Cryptoware willencryptafileandShareFile

willnoticethere’safileupdate,sonewversion1willbetheencryptedfileandtheoldversion1willbecomeversion2.

3. BydeletingVersion1theencryptedfilewillbedeletedandversion2willbecomethelatestfile.

4. ResultisarecoverfromCryptoware.

50 ©2017Citrix

IntegratewithDataLossPreventionsystems

InformationRightsManagement

Ensureonlytherightpeoplecanviewbusinessfiles

RestrictonlineaccesswithwatermarkingandscreencaptureprotectionProtectdownloadedfilesbyrevokingaccess,blockingprinting,andcopy/pasteICAPintegrationProtectdatabyscanningonmalware

51 ©2017Citrix

FivewaysShareFileaddsvaluetoOffice365

DataFragmentation

Usershavedataintoomanyplaces

ElectronicSignatures

John Doe

Contracts&agreementsneedlegallybinding

signatures

DocumentWorkflows

Feedback&approvalsarestuckine-mail

HostedDesktops

OneDriveisnotsupportedinvirtual

desktopenvironments

Externalcollaboration

Customers&partnerscan’taccessOneDriveor

SharePoint

SecureyourEndpointsXenMobile



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps


CitrixXenMobile• EnablingtheMobileWorkspacebecauseworkisnotaplace

Productivity and Collaboration

Data Management

App Management

Device Management

A complete stack that maximizes productivity without compromising security


• Free/Busyscheduling

• AttachmentRepository

• OutofOffice

• Seamlessintranetaccess

• Contextuallyawarenoteretrieval

XenMobile productivityapps– Builtforbusiness

• DigitaltransformationwithSecureForms

• LeverageExchangeNotesandTasks

• EasyfileaccesswithShareFile

• ViewandeditOfficedocsandannotatePDFs

• Micro-VPN

• Desktopaccess/control

• OneTouchmeetingjoin

• VIPInboxandaudiotones

• PersonalCalendaroverlay

SecureMail SecureTasks *ShareFile QuickEdit *ScanDirect*SecureNotes *SecureFormsSecureWeb

*XenMobile EnterpriseOnly


EasydataaccessShareFileintegration– SecureMail– emailcontent/Calendar

ShareFileIntegration

DocumentControls

SecureMailIntegration

AttachLinksNotFiles


• Containerizeapplicationdata• Encryptionoptionsincluding:

• Devicedependent– Setpasscode• Deviceindependent– MAM-only(BYOD)

• EnforcedevicepasscodeinMAM-onlyenvironments.

• On-boardFIPScompliantsecurevaultforapplicationdatainuse

• 70+deviceindependentMAMsecuritypolicies

• Perappmicro-VPN

MobileApplicationManagement(MAM)Protectdatafromcommonthreats– Mobilemalware;maliciousapps,ransomware


GatewayServices

(NetScaler)

Perappmicro-VPN

DMZ

Encryptedmicro-VPN

SharePoint

Exchange

Intranet

SecureMail

SecureWeb

Single-Sign-Onsecureaccessforallmanagedapps

Secureaccesstocorporateresources

ThirdParty

59 ©2017Citrix|Confidential– ContentinthispresentationisunderNDA

SecureForms– ConsumerGradeUserExperience

SecureFormsComposerCreateformtemplatesandworkflowrules

SecureFormsMobileAppCapturestructureddata

XenMobileSecureForms


SecureForms– SecureData



DataStoreStructured XML, CSVArchiveandSearch

ShareFile

XenMobile SecureForms


SecureForms– ZeroMobileCodeandEasyIntegration

Records Management

System



DataStoreStructured XML, CSVArchiveandSearch

IntegrationConnecttoexistingsystems

ETL – BI Tools

ShareFile

SharePoint

WebService

XenMobileSecureForms


Composeandpublishamini-app

Usemini-appfrommobiledevice

SecurelysavetoShareFile

1

2

3

Automatedworkflows– SecureForms


HealthCare:PatientRequestForm

Capture Store Process

Act

• Fast,CheapandZeroMobileCode• HighAccuracyDataCapture• Savestime• Structureddatacaptureto

measureoperationalKPIslikethroughput

XenMobile SecureForms


XenMobileUEM

Mobile Device Management

BYOD Laptops

MacDevices

Win10


Devicesecurityactions– Locate– Lock– Wipe– Revoke

Windows10devicesecurity


MacOSmanagement

RestrictMacOScapabilities

• SystemPreferencePaneItems

• AppSpecificcontrols

• Sharing- SocialMediaandMessages

• iCloudSyncforMail/Calendar/Contacts

• AppleMusic

• Camera


CitrixBetterTogether- SmartAccess

• XenAppandXenDesktop 7.6/StoreFront3.7or3.8

• XenMobileServer10.5

• XenMobileServerconfiguredtoaggregateHDXappsfromStoreFront

• ExportXMSSAMLcertificatetoStorefrontserver

Detectoutofcompliance EndUserExperience

SecureandoptimizedappsfromanywhereNetScalerADC



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps


WhatisanSSLVPN?

• Usedforremote/secureaccesstocompanydata

• Layer7protocol,runsontopofhttp

• Providesencryptionofapplicationtrafficandauthenticationforendusersandenduserdevices

Internet NetScaler


SmartControlwithNetScalerUnifiedGateway• Defineservicelevel-accessbasedonuserID,deviceandlocation

©Citrix2015

GenericUSBLync

ICAconnection(HDXBroadcast)

FramehawkDCR

ThinWire

KB&MouseClipboard

Printing

Audio

MobilesensorsSmartcard

Flash

Drives

Multimedia


ManagingEndpointDeviceSecurity• SmartAccess

RequestResource EPAPoliciesPassed

Corporatelaptop


Multipleremoteaccesssolutionsindatacentercauseredundancy

Users

Mobile

VDI

SaaS

WebApps

Client/Server

• Iscostlyandhardtomanage,increasedatacentersprawl

• Needmultiplemonitoringandcompliancetools

• Providespooruserexperience,decreasesproductivity

• Leadstonon-compliance,moreaccesspointsincreasethreatofsecuritybreach


NetScalerUnifiedGatewayprovidesOneURL

Users

Mobile

VDI

SaaS

WebApps

Client/Server

• Consolidationleadstocostreductionbyupto50%

• Easiertomanage• Centralizedapproachtoimprove

efficiency• Easytoenforcecompliance,

reduceattackfootprint• Supportforallenduserdevices• Completeend-to-endvisibility


andEnablesSingleSign-OnAcrossallApplications

UserswithSingleSign-on

Mobile

VDI

SaaS

WebApps

Client/Server

SAML2.0,OAuth

• Singlepointofaccesstoallapplications

• Secureaccessmanagement,granularandconsistentaccesscontrolacrossallapps

• Betteruserexperienceimprovesproductivity


Ease of ManagementEnd user Experience Identity is Important

UnifiedGatewaydoesitlikethis..

✓

✓

✓

andmore…


WinningOverRemoteAccessUserswithOneURL

One URL


PortalCustomization

Backgroundimage

Headerlogo&Position

Brandlogo

Logonbuttonlogo

Fieldtitles&font

FormTitle

USER

Help-Desk DesktopSpecialist

NetworkSpecialist

IT Department IT dept. calls Citrix Support

IT Support Lacks Visibility• Frustrateduserslessproductivebecauseofissuesaccessingtheirapps

• Novisibilitytoapplicationtrafficornetwork• Leadstofinger pointinginIT

• LongSLAs• Frustratedusers

Citrix SupportSoftware

Citrix Support

Citrix Support

Escalation

Citrix Support

ITAdmin


SanFrancisco

Singapore

AddNetScalerforZonePreferences

Userisconnectedtoclosestsite

GlobalServerLoadBalancing


KeepsUserIdentityOn-Premise

1. UnifiedGatewayUserLogon2. NetScalerauthenticatesuseragainstADwheretheUGportalisreturned

withtheO365Apps3. Userclicksontheapptorequestaccess4. O365redirectsusertoSAMLIdP(NetScalerAAA)5. NetScalerredirectscallertoSAMLSPACS(AAD)withoutpromptinguser

duetoexistingsession6. SAMLSPACS(AAD)checksSAMLassertionandredirectscallerbackto

resource7. Resourceaccessgranted

DirSync

AD

AAD

1 23

4

5

6

7

NetScalerasSAMLIDP

• SAMLSPandIDPcapabilities

• Integratedwithallwell-knownIDPproviders

82 ©2017Citrix

MultifactorAuthentication– n-Factor

Userisaskedtoprovidecertificate

Certificateispresentandvalid

Usernameisextractedfromcertificate

UserisaskedforpasswordforADas2nd

factor

UsernamePassword

83 ©2017Citrix

MultifactorAuthentication– n-Factor

Userisaskedtoprovidecertificate

Certificateisnot

presentorvalid

Userisaskedtoprovideusername,password,

passphrase

LDAP/AD1st factorauthentication

Radius2nd factorauthentication

UsernamePasswordPasscode


Problem

7

6

5

4

3

2

1

ApplicationLayer

ProtectionLayer

SessionLayer

TransportLayer

NetworkLayer

DataLink(MAC)LayerPhysicalLayer

Uppe

rLayers

Lower

Layers

OSIModel

Apps

SessionLayer

TransportLayer

NetworkFirewall

NoAppsprotection86%oftheattacksareattackstotheapplications


Solution

7

6

5

4

3

2

1

ApplicationLayer

ProtectionLayer

SessionLayer

TransportLayer

NetworkLayer

DataLink(MAC)LayerPhysicalLayer

Uppe

rLayers

Lower

Layers

OSIModel

Apps

SessionLayer

TransportLayer

NetworkFirewall

ApplicationProtection

WebAppFirewall


CitrixAppFirewall:HybridSecurityModel

UnknownAttacks

LearnApplicationEnvironment

KnownAttacks

ApplySignatures

NegativePo

sitive

HybridHybrid

ProtectAgainstKnownand

UnknownThreats

SecureandoptimizeNetScalerSD-WAN



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps

89 ©2017Citrix

SD-WANbusinesscasesTriggers

NetScalerSD-WANOffersCustomerSituation

• Networkupgradecostavoidance• Abundantbandwidth• Always-onreliability

NewApplications

BetterUserExperience

KeyValue

• ConsolidatenetworkservicesbycombiningSD-WAN,RoutingandWANOptimization

EquipmentRefresh

SimplifyBranchInfrastructure

• AvoidcostofMPLSexpansion• Uselowercostbroadbandinplace

MPLSContractRenewal

ReduceCost

FrequentOutages

AlwaysonBranch

• Eliminateapplicationinterruption• Automaticlosslessfailover


NetScalerSD-WAN

• Combining multiple paths into one single virtual WAN

• Per-packet path selection to ensure high reliability and bandwidth efficiency

• Constant real-time performance measurement of loss, latency, jitter and congestion

• Optional WAN optimization and protocol acceleration ensuring best user experience

91 ©2017Citrix

NetScalerSD-WANProvides

DataCenterBranchNetScalerSD-WANNetScalerSD-WAN

Internet

MPLS

Zone-based,statefulfirewall

ApplicationAwareness

&Segmentati

on

92 ©2017Citrix



Internet

MPLS

Granularpath

selection

InternetbreakoutforSaaSapps

93 ©2017Citrix

CloudProvider



Internet

MPLS

NetScalerSD-WAN

Secure&reliable

connectivityto cloudapps

Auto-provisionCloud

Appliances

94 ©2017Citrix

CloudProvider



Internet

MPLS

NetScalerSD-WAN

Centralizedvisibilty andcontrol

95 ©2017Citrix

NetScalerSD-WAN:BreakoutInternetattheBranch

Internet

MPLS Default Queue

MPLS EF QueueNetScalerSD-WAN NetScalerSD-WAN

AvoidbackhaulingInternet-boundtraffictothedatacentertosavebandwidthandimproveapplicationperformance!

• AllowsInternet-destinedtraffictogototheInternetdirectlyorviaaSecureWebGateway(SWG)• IntegratewithSWGservices(Zscaler,ForcePoint etc)forsecurityandpolicyenforcement• ControltheamountofbandwidthforInternettraffic

Secure Web Gateway(Zscaler, Forcepoint)

96 ©2017Citrix

ApplicationAwarenesswithNetScalerSD-WAN

Knownprotocolsandportnumbers

DNSMatchingandKnownIPAddresses

Compareportnumbersandprotocolmessagesagainstknownapplicationsandapplicationcomponents

1

ReadnameofserviceinSSL/TLScertificateorinServerNameIndication

SecurityCertificateDetails2

SearchforknownbinarypattersintrafficflowsPayloadCharacteristics3

InspectDNSqueriesandsessioninitializationsequencesforknownIPaddresses

4

WhatOther’sSee

WithNetScalerSD-WAN

NetScalerSD-WANAppClassification

4,000+applications,groupedintocategories

97 ©2017Citrix

ApplicationawarefirewallWithcentralizedandintegratedconfiguration

Youcanrestrictwhichzonesthisapplicationcancomefromandto

Controlwhethertoallowordenytraffic

Applypoliciestogroupsofapplications,individualapplications,orsubsetsoftrafficwithinanapplication

98 ©2017Citrix

Datacenter

Cloud/SaaS

NetScalerSD-WANCenterforUnifiedManagement

Branch

Branch MPLSINTERNET4G/LTE

SATELLITE

SD-WANCenter

• Singlepaneofglassforbranch,datacenterandcloud• Firewall,VirtualWAN,RoutingandWANOptimizationall

configuredfromsameinterface• Policiesaredefinedcentrallyandpushedtoallappliances• Nobranchordeviceconfigorloginrequired

99 ©2017Citrix

SimplifiedDeploymentwithZero-TouchDeploymentService

Automatedbring-up

AuthenticationtojoinNetwork

Statusupdatesofdeployment

• Significantlyreducedeploymentcost• Eliminateerrorswithcentralizedtemplates• Bringuplargescalenetworkquickly

GainInsightandcontrolMAS



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps


NetScalerMASdeliversacompletesystemfortheADC

ConfigurationMgmt

Visibility&Analytics

ClassicDCManagement

SDNControl

HybridandMulti-CloudControl

Hybridcloudmgmt

SDNIntegration

CloudMgr integration

AppCentricity

FleetMgmt

FleetVisibility

AdvancedAnalytics

ContainerMgmt

Licensing

NewGeneration,BorderlessDCManagement

ApplicationCentricManage-ment

AutomatedCentralizedManage-ment

SDNandCloud

Orchestra-tion

Visibility&

Analytics

AppCentricMgmt

Physical,VirtualADCs SDWANGateway

PhysicalADCs

SDWAN

Gateway

NetScalerMAS


MachineLearning

NetScalerMASisre-inventingtroubleshootingCircleofPain

ManualSearch

Customerfilesticket

UpdateConfig

UpdateConfig

CircleofEase

recommendation

Recommendation

104 ©2017Citrix

CentrallymanagetheNetScalerfleet

DistributionbyEvents/Health/Versions/Model/UpTime/ConfigAudit/Certificates

105 ©2017Citrix

AppDashboard– NewRepresentation

SharePoint

Bigger theSizeHighertheAppUsage

MOSTUSED

MoreRed ColorShadeLowertheAppScore

LOWAPPSCORE

106 ©2017Citrix

AppDashboard

LowAppScoreApp

HighThreatExposureApps

LowSecurityApps

AppTrafficPattern

LowAppScoreApps

107 ©2017Citrix

AppThreatAnalysis

Layer7Attacks

Layer4Attacks

TopAppsunderAttack

TopClientsinitiatingAttack

AttackOrigin

AttackVariation



Users SecureIT


UnifiedExperience

“BYO”Identity

SingleSign-on


Access


AppOps

ContentControl

Legacy/CustomApps


CitrixSolutionsAppsanddataarecentrallymanagedinthedatacenterandaccessedviagranularaccesscontrol

Dataaccess,storageandsharingarecontrolledandauditedon-premandinthecloud

Accessandcontrolacrossthenetworkwithassuredappdeliveryandend-to-endvisibility

Securemobileappsanddatawithagreatuserexperience


SeamlessContextualAccess


Analyticsand

Insight

People-Centric

RemoteWorkers

EnterpriseEndpoints

IoT/Wearables Mobile/BYOCentralized

PolicyControl

PeopleIntelligence

Enterprise Mobile

Personal Email Security

Cloud

“Apps&Data”“Devices&Platforms”

CitrixWorkspaceSecurityComplementaryProtection ComplementaryProtection

SecurityAtTheHeartOfEverythingWeDo


Q&A
