Solutions in Security Securing Access to the Virtual Workplace

Presented by:

Douglas A. Brown

Systems Engineer

Citrix Systems, Inc.

.

Solutions in Security

Agenda

The Citrix Vision

Why Server Based Computing?

What is MetaFrame XP and NFuse?

What is Citrix Secure Gateway (CSG)

3

Our Mission

To make

information

access as simple

as a phone call,

for anyone,

Why

Server Based

5

Application Server Computing

What is Application Server Computing?

 The focus is on the software applications, not the hardware

 Server-centric Architecture

 Applications execute 100% on server

 Users view and work with application interface

Applications install and execute 100% on server Only screens, mouse

clicks and keystrokes travel the network

The Citrix Core Strategy

Subscribe

Secure Portal

Publish

N

et

w

or

ks

Devices

A

pp

lic

at

7

Status Quo or Next Generation IT?

Challenges (tactical)

Desktop application

maintenance

.DLL Hell

End user support and

training

PC upgrades

Remote access

Strategic Initiatives

Centralization

B2B initiatives

Enterprise Security Policy

Enterprise Storage Solution

Desktop PCs Publish Publish Subscribe Subscribe Laptop PCs Terminals Wireless Devices Dial Up Dial Up

Citrix Application Delivery Solution

What is

MetaFrame XP

and NFuse?

Server Family

 MetaFrame XP Feature Release 1 for Windows 2000 and Windows

NT 4.0 TSE

 MetaFrame 1.8 for Windows 2000 and Windows NT 4.0 TSE  MetaFrame 1.1 for Unix (Solaris, HP-UX, IBM-AIX)

Portal Family

 NFuse 1.61 for Web Application Access

Management Family

 Citrix Load Balancing Services 1.0

 Citrix Resource Management Services 1.0  Citrix Installation Management Services 1.0  Citrix Secure Gateway (CSG)

11

Making the virtual workplace—work

The most powerful platform for application delivery and management ever designed for

MetaFrame XP Tailored Solutions

 The application serving infrastructure for environments

requiring the maximum level of capabilities available in an Application Serving Environment

 The advanced application serving platform for organizations

that need to maximize application availability and

manageability across any type of network—all from a single point

 The rapid application serving system designed to extend the

13

Citrix NFuse

Instant Web App Publishing

 Quickly integrate and publish applications into any standard Web

browser– without rewrites!

 Integrate Windows, UNIX and Java applications — all in the same

browser

 Personalize applications, data and the browser

Connection-based Licensing Model

Connection-based Licensing Model

 Licensing based on total number of concurrent users

 Doesn’t matter how many servers are used to host the users

 Server software can be installed as many times as needed

 Doesn’t matter how many users are hosted per server

Customer Benefits

 One price for all users based on MetaFrame XP solution

 MetaFrame XPs, XPa, XPe

 Simple to understand, budget and purchase  Flexibility in configuration

 Administrator doesn’t have to calculate number of users per server

 Customer can choose as many or as few servers based on application

load and server capacity

 Customers can add resources (users or servers) without variations in

15

MetaFrame’s Value on Windows 2000

Citrix MetaFrame Extends the Value of Microsoft

Windows 2000 Server

 Enterprise-Class Management

 Application Publishing and Program Neighborhood  Application Launching & Embedding (ALE)

 Advanced Load Balancing & Shadowing  Cross Subnet Administration

 Auto Client Update

 Resource Manager & Installation Manager  Installation Manager

 Network Manager

 Web Application Publishing

 NFuse web portal technology

 Flexible Application Access

 Support for both Windows and non-Windows clients  Full and automatic access to client system resources  Enhanced anonymous user support

Citrix Technology Overview

Simplify Application Deployment and Management Provide Predictable Application Performance

Improve Security

Overcome Hardware Obstacles Simplify Database Management

Application Vendor Recommendation Web Browser Based Application Access

ICA Solutions

Encryption and Connectivity

 Secures ICA Traffic only

 SSL v3.0 with 128-bit encryption

 Support for Public Key Infrastructure (PKIs)  Single IP address is exposed to internet

 Ease of firewall traversal (uses port 443 only)

Security with Citrix Secure Gateway

F

ir

ew

al

l

Citrix MetaFrame XP w/ Feature Release 1

Citrix Secure Gateway

Citrix NFuse 1.6 Technology ICA and SSL

Back-end Network Resources

21

Could I see some ID please?

SSL Certificates are like Driver’s Licenses

Driver’s License

SSL Certificate

Issued to

Issued by

Vehicles (DMV) Certifying Authority (CA)

Verification

mechanism

DMV hologram, well-known

license format CA digital signature, public key, thumbprint

Application

requirements

Birth certificate, Social security number, etc.

Business license, Dun & Bradstreet number, etc.

Public usage

vehicle on public roads Prove identity; operate a secure web server on public networks

I trust it

because

I trust the DMV to scrutinize

Summarize

&

23

Conclusion

Extending the Virtual Workplace

— Everywhere.

WBTs

Macs

Desktop PCs UNIX

Workstations

Wireless Devices

Portable Laptops

Our Mission

To make

information

access as simple

as a phone call,

for anyone,