visionapp Workspace Management 2008 (vwm)

Transcription

1 2008 (vwm) Value-Add to Citrix Products Product Information Head Office Frankfurt a.m. (D) Helfmann-Park Eschborn phone: Office London (UK) Office Washington (US) Office Zürich (CH) Fleet Street London EC4A 2AB phone: I Street, NW, 9th floor Washington, DC phone: Geschäftshaus Adlikerkreuz Wehntalerstrasse Regensdorf phone:

2 2008 in a Nutshell 2008 (vwm) is a browser-based desktop for easy and secure access to applications. vwm greatly simplifies the company-wide provision of a wide range of applications. As one of two main components of Application Delivery Suite 2008 (vadm), vwm provides companies with a maximum of flexibility and efficiency in the provision of applications through application delivery infrastructures based on Microsoft and Citrix technologies. Main Benefits of vwm > Easy and comprehensive access to a wide range of application types through a central, browser-based desktop > Intuitive usability concept for end users through independence from the end user device and the application type > > > > > High availability and enterprise suitability through a modular and scalable architecture High adaptability and extensibility through numerous interfaces and integration options Efficient and granular user management through comprehensive permissions management Secure and freely adjustable application access through sophisticated rules Individual functional extension through extensive API visionapp 2007 vwm 2008 in a Nutshell

3 Three Editions for On-demand Use and Future Extensions Available in three editions, vwm meets virtually all requirements ranging from pure Microsoft environments with low complexity to very large and highly complex environments. The functional differences between the editions essentially lie in the fields of application access, security, authentication, adaptability, enterprise operation and integration as well as administration. Standard Edition > Focus on pure Microsoft environments with low complexity > Supports access to Microsoft RemoteApps and with Microsoft SoftGrid to streamed applications > Provides efficient application access configuration and management Administration Services and Integration End-User Experience Application Availability Customization Authentication Security Edition > Focus on Citrix or Microsoft environments with higher complexity > Additionally supports access to Published Applications as well as applications streamed with > Support for Secure Gateway and Citrix Administration Services and Integration End-User Experience Application Availability Customization Authentication Security Edition > Focus on application access in application delivery infrastructures with a wide range of requirements > Additionally supports access to local applications > options for multiple entities and sites as well advanced administration and authentication functions for enterprise operation Administration Services and Integration End-User Experience Application Availability Customization Authentication Security visionapp 2007 vwm 2008 in a Nutshell

4 Contents 1 Introduction Products Web Citrix MetaFrame Secure Manager (MSAM) Application Center Secure Logon Available versions of Standard Edition Edition Edition Value-Add overview Key scenarios for Imprint visionapp of 16

5 1 Introduction This document compares the base-level features within Web, -Gateway and -Secure Manager to the value-add features of. The document shows the benefit of adding workspace management (vwm) to an application delivery system including Products such as Presentation Server and Streaming Server and clarifies the positioning of visionapp and solutions. 2 Products is a value-add for Web, and MetaFrame Secure Manager. The following sections introduce these Products. 2.1 Web Administration Services and Integration End-User Experience Application Availability Customization Security Authentication Web is a webenabled user interface, which delivers custom ICA (RAD) files on demand. Web as Front end Server displays published applications, published content or streamed Applications, depending on user s identity. When launching applications, an ICA file is downloaded to the local Client and used by the previous locally installed ICA Client. also provides different Web versions that can be integrated into existing Web Portal solutions like Microsoft Sharepoint Server or IBM WebSphere. Web is a free Suite component for customers with current Subscription Advantage. Customer can also freely customize Web for their needs, such as corporate design or specific functionality. visionapp of 16

6 2.2 Citrix Administration Services and Integration Application Customization Authentication Citrix (AG) is a universal SSL VPN hardware appliance. The edition of the adds a web based software add-on that was previously called the Controls (AAC). The name represents both the AG End-User Experience Security and AAC. With the Availability Controls an additional layer of security and functionality is added to the. Also Web can be integrated into the Controls. enables the secure access and launch of Applications (like Web does), access to file shares, access with Microsoft Outlook Web or Lotus Notes Integration and using the proxy functionality of AAC to access internal websites or web applications. to resources are role based, depend on filters and/or rules and optionally through Endpoint Analysis (EPA). The possibility to customize the web components of the Gateway is limited. 2.3 MetaFrame Secure Manager (MSAM) has announced the End-of-Sale for Secure Manager 2.2 to be 30 June 2006 and End-of-Life 31 December (vwm) is available in three versions, Standard, and. The components that make up these versions are explained below. 3.1 Application Center The Application Center (vac) provides many of the functionalities of a typical portal solution. The Application Center delivers content to end-users such as News, Calendar, Web links and other customer integrated information. vac also supports Multi-lingual display not only in the user workspace but also in the central management - the administration console of the Application Delivery Suite (vadm). has no Web plugin that can be used with the Application Center, so has integrated Web functionality into the product. The integration visionapp of 16

7 enables users to launch any session (Published Application, -Content or streamed Applications) from the Application Center. With the vac 2008 version, adds the ability to launch Microsoft Remote Applications (RemoteApps ) with Windows Server 2008 and SoftGrid streamed applications. Furthermore, the Application Center gives users the freedom to add local applications into their personalized page. This enables Application Center users to build their own online workspace. The Application Center also has build-in functionality to browse internal file shares or to integrate Microsoft Outlook Web (OWA) as dashboard. Customers can fully customize and brand the Application Center. Web developers can create custom web parts to use it with the Application Center. supports developers with an Application Programming (API) to make it easier to create custom web parts. 3.2 Secure Logon Secure Logon (vsl) offers secure user authentication and authorization including single-sign-on for web applications with BASIC authentication. vsl is based on Microsoft Internet Security and Acceleration server (ISA) and therefore needs a separate ISA license. vsl supports the following authentication mechanisms: User name / password, one-time passwords based on the RADIUS protocol like RSA, SafeWord or VASCO Digipass. It also has a service which synchronizes the password in both Active Directory and the Single-Sign-On database. Furthermore vsl supports multi domain, authentication/authorization via client certificates and access control for pre-defined internal websites. 3.3 Available versions of vwm is available in three versions. Therefore the required set of features can be easily aligned to both actual and future requirements. Every version contains the component vac but with a different set of features Standard Edition vwm Standard is targeting environments with low complexity. The easy installation and configuration helps customers to implement the solution easily. Various wizards for different tasks support administrators and make the usage both secure and effective. Compared to the or version, the Standard version has limited functionality and strictly focuses Microsoft only environments Edition vwm includes all standard features plus full support for the following Products or components: Citrix Presentation Server (published applications, content or streaming applications), Desktop Server, Citrix and. visionapp of 16

8 3.3.3 Edition vac is designed for complex environments with a strong focus on high availability for business continuity. Additional value offers the Secure Logon (vsl) as part of the Edition that can optional be used. The Secure Logon can be used for Single-Sign-on, RADIUS authentication, one time Passwords like RSA Secure ID, SafeWord or VASCO Digipass, multi domain or multi URL domains. visionapp of 16

9 4 Value-Add overview Category / Feature Web Citrix Description Application Published Applications (1) (1) (1) The ability to launch ICA sessions to Published Applications including connections through Secure- or. 1) With the integration of Web Published Content (1) (1) (1) streamed Applications (1) (1) (1) Microsoft RemoteApps Microsoft streamed Applications Local Client Applications Linked Content Virtual or dynamic Desktops The ability to open Published Content. 1) With the integration of Web The ability to start Citrix Streamed Application for online or offline usage. 1) With the integration of Web The ability to launch Microsoft RemoteApps with Windows Server 2008 and Single-Sign-On with RDP connections. The ability to launch Microsoft SoftGrid streaming Applications. (Part of Microsoft desktop optimization pack). The possibility to choose local Client Applications, displaying and starting those Applications from the user s main website. Displaying and launching any linked content opened either through a RDP or ICA session without the need to publish the content within Microsoft or Applications. to virtual (VDI) or dynamic (DDI) Desktops via or Microsoft visionapp of 16

10 Category / Feature Web Citrix Description Proxy functionality Proxy Internal Websites or - Applications (2) Internal Websites or -Web Applications are proxied to users externally without the need of any Client Software other than a web browser. 2) Needs Secure Logon (vsl) Customization Web Site Templates Web Site Designer API/SDK Login Page Main Website Custom Modules The concept of having prepared portal designs that can simply be changed. The creation of own templates and the import and export of templates including all graphics, CSS files etc. A GUI based Designer to change the basic elements of the web site to create a company look and feel. An Application Programming (API) or a Software Development Kit to support developers in creating new custom functionality. The ability to change the look and feel of the login web site where users authenticate. The ability to change the look and feel of the core web site where users have their workplace. The option to create new custom modules (web parts, user controls) and simply place them in the core web site. Modules can be very simple or add great functionality. Individual Application Grouping Applications can be grouped independently from what is configured in or Microsoft RemoteApps. visionapp of 16

11 Category / Feature Web Citrix Description Adding new templates for ICA- /RDP files The ICA-/RDP file templates are responsible for the session behavior. For different scenarios different templates can be used. - Integration Microsoft Outlook Web (3) (3) The option to integrate Microsoft Outlook Web (OWA) into the core website. Users don't need to authenticate against OWA because credentials are automatically passed through. 3) Outlook Web must be published externally or using Secure Logon for a complete integration. IBM Lotus Notes The option to integrate Lotus Notes into the core website. Users don't need to authenticate against Lotus Notes, because credentials are automatically passed through. Authentication methods Explicit Integrated Basic Integrated + Explicit + Basic Microsoft Active Directory Simple authentication with User name and password. The user credentials used to login to workstation are automatically used to authenticate against the login page. The web server brings up an authentication window where user have to type in their credentials. All authentications are possible at the same time. The system is automatically using the correct method for the authentication. Support for Microsoft Active Directory with Windows Server 2000, 2003 and Windows Server 2008 visionapp of 16

12 Category / Feature Web Citrix Description LDAP Two-factor Authentication (4) Support for any LDAP Directory, like Novell for instance. Usage of 3rd. party solution like RSA or SafeWord to use one time password in addition to user name and password. The usage of the onetime password only is possible as well. 4) Needs Secure Logon (vsl) RADIUS (5) Support of any RADIUS solution using a RADIUS client software. 5) Needs Secure Logon (vsl) Single-Sign-On Support for Single-Sign-On means user just needs to authenticate once and the system takes care of any further authentication in the name of the user (Integrated, Client Certificate). Instead of presenting user name and password, a SmartCard or USB Token is placed into the local Client. SmartCards / USB Tokens (6) Through the SmartCard/USB Token the user gets automatically authenticated. 6) Needs Secure Logon (vsl) Client Certificate (7) On the Client device a per user certificate is imported and if trusted from the website a personalized login is granted. 7) Needs Secure Logon (vsl) Multi Domain The ability to authenticate users against different domains at the same time. visionapp of 16

13 Category / Feature Web Citrix Description Security Options Endpoint Analysis Scans Rules Role-based A Client component that pre-scans the user s local workstation for administrator defined criterias and depending on the results applies rules and/or filters to change user s access rights. Depending on defined Rules, users will get a different level of access rights to resources. Based on pre-defined Roles, users get different levels of access. File Share to File Shares Live Edit (8) Internal file shares are made accessible through the web site and manageable within a Web Browser. File operations like upload, download and delete are part of the sharing. The option to convert documents (Office documents or PDF s) into HTML streams and enable granular access (Edit, Print, Save etc.) to the documents. 8) Live Edit can be used through Integration. Rules Directory Browsing File Type and Size Rules rules define the file operation possibilities for upload, download or delete. Full directory browsing functionality, going through subfolders. The option to limit the access to only specific file types (*.doc; *.pdf etc.) and/or to limit the file size for up- and download. visionapp of 16

14 Category / Feature Web Citrix Description End-User Experience Favorite Applications Application Autolaunch Custom Web Links Personalized News Application Maintenance Note Online Calendar Last Login Time Display Control Online Help User can freely choose from all available applications their own favorites that are displayed on the personalized web site for easy access. User can choose Applications they want to automatically start after Logon. Administrator can pre-define or overwrite Applications for users as well. Users can add their own personal web links and use them also as favorites. Administrators can add any news to the web site and choose which group(s) or user(s) will see the news for a defined time frame. News can also be defined based on access rules. If applications are published depending on group(s), then a maintenance note can easily be published to the specific user group. An online calendar to check dates. Display of the user s last login to the web site. Users can set Control options for smooth roaming. A user online help for basic questions and user selfhelp. This minimizes support calls. visionapp of 16

15 Category / Feature Web Citrix Description High Color Icons (9) (9) High color icons are generated even for Citrix applications using only 217 colors. High color transparent icons give users a much better look-and-feel and recognition of applications. Also available with Citrix Presentation Server 4.5 R01 9) Requires installation of WMI-TS Provider from Server Web site supports different languages that user can choose from and store it as preferred language. Multilingual User (10) (11) (12) Change own Active Directory properties 10) Five languages are delivered with the component 11) Two languages are delivered with the Product 12) Five languages are delivered with the Product (More than 20 languages are available) Users can edit basic properties of their Active Directory through the web portal on their own. Availability Load Balancing (13) The possibility to load balance the web server to split the load of multiple servers. Central Load Balancing Configuration (14) 13) Limited to max. 2 web servers Synchronization of configuration and layout design throughout load balanced servers. 14) Only configuration changes Stateless Session With stateless web sessions user work after the login on different web servers (load balanced) without recognizing. If one of these servers fails, the user is able to continue working, without the need to reauthenticate visionapp of 16

16 Category / Feature Web Citrix Description Service Monitoring Redundancy of the used database Database Failover A Service Monitor checks the functionality of core components and sends alerts in case of a failure. Place the database on high available database server (Cluster, SQL Mirroring) Using two database servers allows Administrators to use an automatic failover and users are informed for the failover mode automatically. This feature is outside of the usage of database clustering or mirroring. Gateway Support Secure Gateway Citrix Secure Client Launch Microsoft TS- Gateway Support for Secure Gateway to proxy ICA connection secure over SSL Support for to proxy ICA connection secure over SSL and/or to launch the VPN Client. The ability to launch the Citrix Secure Client manually or automatically from the web site to establish a VPN connection. Support for Microsoft TS- Gateway to proxy RDP connection secure over SSL. Administration Server Eventlog Administrator Web parts Change Log Issues or failures are logged to the Server s eventlog. Administrators can use the information to troubleshoot the problem. Different administration task can be done directly through the Application Center. Any change to the site configuration is logged and can be reviewed for troubleshooting reasons or for security purpose. visionapp of 16

17 Category / Feature Web Citrix Description Role based Web Server Status Monitor Role based access to the web site configuration (the management software, vadm or AMC). Different users or groups have specific rights to objects in the configuration. A live status monitor for the web server for a better health control. services Virtual Farms Organization Entities (Multi-Sites) Multi-Site support Farm-Aggregation for migration- or failover or worst case scenarios. This enables high availability of the environment The possibility to have different Organization Entities for web sites and to manage and maintain them separately. Central administration of multiple vwm environments for different customers and/or for Development, Acceptance and Production circles. visionapp of 16

18 5 Key scenarios for For example, is useful in scenarios such as the following: > Users should be able to use Windows Server 2008 RemoteApps and Published Applications at the same time either working in the corporate LAN or while traveling or being at home. > Companies working as an Application Service Provider (ASP) and have to support different customers which need their own branding of the Portal or in managing the Portal itself. > As a Value-Add to Web to get a greater set of functionality. For instance using Application auto launching, to define favorite applications, to use local applications within the Portal, to display custom messages to specific users or a group of users and so on. > For customers to deliver a unified User workplace in a Web browser. The stateless web session, load balancing, database failover-mirroring-clustering and the separation between the Farms ( or Microsoft ) guarantees a high availability and therefore business continuity for the customer. The display of the last user login information enables a higher security and was requested by German Banks. > As central access to any applications or company data. The integration of Microsoft Outlook Web and the possibility to use internal file shares through the Portalcompletes the user workspace. Users have only to authenticate once to get access to all needed and allowed resources. > As a Value-Add for Microsoft Windows Server 2008 Terminal Services Web to enhance the End-User experience and to be able to use Single-Sing-On with Server 2008 RemoteApps. > When companies want to use a lock down FAT Client (as Thin Client) with Internet Explorer as Windows shell replacement, the Platform will replace the user Windows workplace. Users are still able to launch local applications or stream applications to the FAT Client. visionapp of 16

19 6 Imprint Disclosure and Warranty The information, concepts, and ideas contained in this document are the property of visionapp GmbH. No part of this document may be disclosed or reproduced in any form without written permission of visionapp GmbH. Any violation thereof will be pursued. All brand names and product names used in this document are trademarks of their respective holders and are recognized as such. Any product descriptions or representations in this document are for identification purposes only and are not to be construed as a warranty of specific properties or guarantee or warranty of any other type. visionapp shall assume no liability, either explicit or implied, for the documentation. All rights reserved visionapp GmbH, December 07 About visionapp visionapp is one of Europe s leading solution providers for the design, operation and management of Microsoft- and Citrix-based application delivery infrastructures. With more than 100 employees and an international network of qualified partners, visionapp supports many large and medium-sized enterprises in numerous business sectors throughout the world. visionapp s business activities are focussed on reducing the cost of IT operation, enhancing the flexibility and availability of the IT infrastructure and boosting corporate revenue through the use of centralized solutions. visionapp maintains numerous strategic partnerships with Microsoft, Citrix and other manufacturers. Further Information visionapp GmbH Head Office Frankfurt Helfmann-Park Eschborn Germany web: visionapp of 16