Access Infrastructure for
the On Demand
Enterprise
2 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Agenda
•
Access Infrastructure
•
Access Suite Overview
•
Secure Gateway Review
•
COFFEE BREAK!
•
Demo
3 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
CNN
HBO
ESPN
TNT
PPV
On-Demand
Entertainment
Any TV
Any Network
Secure
Easy
Instant
Any Show
Any Program
…Similar to Cable
4 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
MetaFrame
MetaFrame
Access
Access
Suite
Suite
Portal Apps
Web Apps
Windows Apps
UNIX Apps
Web Services
Citrix Access
Infrastructure
Any Device
Any Network
Secure
Easy
Instant
Any Application
The On Demand Enterprise
5 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix Access
Infrastructure
Any Device
Any Network
Secure
Easy
Instant
Any Application
The On Demand Enterprise
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Allows IT services to be offered as a computing utility…
Portal Apps
Web Apps
Windows Apps
UNIX Apps
6 Citrix MetaFrame Access Suite Overview © 2003 Citrix Systems, Inc.—All rights reserved.
Building Blocks of
the Access Infrastructure
Citrix Access
Infrastructure
Allows IT services to be offered as a computing utility…
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Virtualization of
desktop, applications
and IT services—
7 Citrix MetaFrame Access Suite Overview © 2003 Citrix Systems, Inc.—All rights reserved.
Building Blocks of
the Access Infrastructure
Citrix Access
Infrastructure
Allows IT services to be offered as a computing utility…
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Organization and
self-service to
applications and
8 Citrix MetaFrame Access Suite Overview © 2003 Citrix Systems, Inc.—All rights reserved.
Building Blocks of
the Access Infrastructure
Citrix Access
Infrastructure
Allows IT services to be offered as a computing utility…
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Policy-based
control of
9 Citrix MetaFrame Access Suite Overview © 2003 Citrix Systems, Inc.—All rights reserved.
Building Blocks of
the Access Infrastructure
Citrix Access
Infrastructure
Allows IT services to be offered as a computing utility…
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Device and network
independence
10 Citrix MetaFrame Access Suite Overview © 2003 Citrix Systems, Inc.—All rights reserved.
Building Blocks of
the Access Infrastructure
Citrix Access
Infrastructure
Allows IT services to be offered as a computing utility…
D
el
iv
e
r
P
ro
te
ct
O
rg
a
n
iz
e
D
is
p
la
y
Manage
Instrumentation, measurement,
11 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
The Citrix MetaFrame
Access Suite is…
Citrix Access
Infrastructure
Any Device
Any Network
Secure
Easy
Instant
Any Application
Allows IT services to be offered as a computing utility…
12 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Access
Strategy
Access: Core to Business Strategy
Business
Continuity
Teleworking
Mergers &
Acquisitions
Branch Office
Expansion
Wireless
Mobility
Regulatory
Compliance
IT Centralization
Partner
Commerce
13 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
The Citrix MetaFrame Access Suite
MetaFrame
Conferencing Manager
Work concurrently and collaboratively on the same
applications and documents
MetaFrame
Presentation Server
Manage enterprise applications from a central
location and access them from anywhere
MetaFrame Secure
Access Manager
Secure remote access over the Web to any
application, IT service or information source
MetaFrame
14 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame XP Presentation
Server, Feature Release 3
•
Microsoft Windows Server 2003 support
•
Fast downloading of graphics and bitmaps
•
Improved printing support and quality
•
Simplified license activation
•
Integration with Microsoft
Operations Manager
•
Enhanced resource management
•
Better remote server management
•
Management console updated
•
Windows XP “luna” technology support
15 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame XP
Windows 2000 Value-Add
Unparalleled
Manageability & Scale
• Application publishing
• Program Neighborhood®
• Anonymous user support
• Content publishing
• Content redirection
• Novell® NDS® Support
• User Policies
• Delegated Administration
• Centralized mgmt. console
• Connection control
• CPU prioritization
• 1000+ servers in farm
• 1-to-1 Shadowing
• 1-to-M/M-to-1 shadowing
• Cross-server shadowing
• Shadowing indicator
• Auto client printer detection
• Universal print driver
• Auto client update
• Business recovery
• Web-based client install
•Resource-based load balancing
• Load balancing reconnect
• Schedule app availability
• Specify client IP range
• Application monitoring
• Customized billing reports
• Track user access to apps
• Centrally install apps
• Distribute service packs
• Package customized installs
• Integrate with Network Management consoles
Total “Net” Leverage
• NFuse Classic
• Support for multiple farms
• Support for NFuse Elite
Ultimate Flexibility
• Non-Windows client access
• 16-bit audio
• Support for direct asynch
• Com port redirection
• Automatic drive redirection
• Client drive remapping
• SpeedScreen™ 3 compression • Text-entry Prediction
• Instant Mouse-Click Feedback
• High/true color depth & greater video resolution
• User collaboration
• Panning & scaling (handhelds)
• Slow performance link opt’s
• Pass-through authentication
• Seamless windows
• Multi-monitor support
• Client time zone support
• Application Save Position
End-to-End Security
• Citrix Secure Gateway
• SSL/TLS 128-bit encryption
• Support for digital certificates
• Socks 4 & 5 proxy support
16 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame XP
Windows Server 2003
Value-Add
Unparalleled
Manageability & Scale
• Application publishing
• Program Neighborhood®
• Anonymous user support
• Content publishing
• Content redirection
• Novell® NDS® Support
• User Policies
• Delegated Administration
• Centralized mgmt. console
• Connection control
• CPU prioritization
• 1000+ servers in farm
• 1-to-1 Shadowing
• 1-to-M/M-to-1 shadowing
• Cross-server shadowing
• Shadowing indicator
• Auto client printer detection
• Universal print driver
• Auto client update
• Business recovery
• Web-based client install
• Resource-based load balancing
• Load balancing reconnect
• Schedule app availability
• Specify client IP range
• Application monitoring
• Customized billing reports
• Track user access to apps
• Centrally install apps
• Distribute service packs
• Package customized installs
• Integrate with Network Management consoles
Total “Net” Leverage
• NFuse Classic
• Support for multiple farms
• Support for NFuse Elite
Ultimate Flexibility
• Non-Windows client access
• 16-bit audio
• Support for direct asynch
• Com port redirection
• Automatic drive redirection
• Client drive remapping
• SpeedScreen™ 3 compression • Text-entry Prediction
• Instant Mouse-Click Feedback
• High/true color depth & greater video resolution
• User collaboration
• Panning & scaling (handhelds)
• Slow performance link opt’s
• Pass-through authentication
• Seamless windows
• Multi-monitor support
• Client time zone support
•
Application Save Position
End-to-End Security
• Citrix Secure Gateway
• SSL/TLS 128-bit encryption
• Support for digital certificates
• Socks 4 & 5 proxy support
17 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame XP
Windows Server 2003
Value-Add
Unparalleled
Manageability & Scale
• Application publishing
• Program Neighborhood®
• Anonymous user support
• Content publishing
• Content redirection
• Novell® NDS® Support
• User Policies
• Delegated Administration
• Centralized mgmt. console
• Connection control
• CPU prioritization
• 1000+ servers in farm
• 1-to-1 Shadowing
• 1-to-M/M-to-1 shadowing
• Cross-server shadowing
• Shadowing indicator
• Auto client printer detection
• Universal print driver
• Auto client update
• Business recovery
• Web-based client install
• Resource-based load balancing
• Load balancing reconnect
• Schedule app availability
• Specify client IP range
• Application monitoring
• Customized billing reports
• Track user access to apps
• Centrally install apps
• Distribute service packs
• Package customized installs
• Integrate with Network Management consoles
Total “Net” Leverage
• NFuse Classic
• Support for multiple farms
• Support for NFuse Elite
Ultimate Flexibility
• Non-Windows client access
• 16-bit audio
• Support for direct asynch
• Com port redirection
• Automatic drive redirection
• Client drive remapping
• SpeedScreen™ 3 compression • Text-entry Prediction
• Instant Mouse-Click Feedback
• High/true color depth & greater video resolution
• User collaboration
• Panning & scaling (handhelds)
• Slow performance link opt’s
• Pass-through authentication
• Seamless windows
• Multi-monitor support
• Client time zone support
• Application Save Position
End-to-End Security
• Citrix Secure Gateway
• SSL/TLS 128-bit encryption
• Support for digital certificates
• Socks 4 & 5 proxy support
• Smart card support
Plus Future
MetaFrame XP
Feature and
Platform Releases!
•
Key Features Q1 2004:
•
Support for USB Scanners and Bar Code Readers
•
Bi-Directional Audio
•
Biometric authentication
•
Object-based Delegated Admin
•
Section 508 Compliance
•
FIPS/HIPAA Compliance
•
Enterprise-wide Licensing (across multiple Farms)
•
Performance Management
•
Multilingual UI Support
•
USB/PDA Device Synchronization
•
Windows XP Pro Remote Access
18 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame
Secure Access Manager
•
Secure, role-based access to
centralized enterprise resources
–
Application layer
access – security - consistency
–
Windows, Web, and Java
•
Brings the Internet, Extranet, and
Intranet into a single place
–
Access center for personalized view
–
HTTP/S and ICA access to applications
–
Support mobile users inside and outside
the enterprise
19 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Single Point of Access
•
Delivers the entire enterprise with a single point of access
–
Applications
–
Content
20 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame
Conferencing Manager
–
Builds atop MetaFrame
Presentation Server
deployments
–
Anywhere, anytime
application sharing
–
Easy, effective, secure
21 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Tabs allow different data views …
Description - dial in information or other text
Attachments – included in original meeting request
Attendees – Those invited to selected meeting
Create an instant meeting
Meeting list shows all your meetings, both
scheduled and instant – start or join any meeting
22 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Auto-hide menu bar
Switch between Full
Screen and Window view
The Meeting Room
Attendees
24 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix MetaFrame Password Manager
•
Simplifies end user computing
–
Enterprise Single Sign-On (SSO) for
Windows, Web, proprietary, and
host-based applications
•
Reduces help desk costs
–
Centrally manage and automate
password-related events, including
password generation & changes
•
Increases network security
–
Stricter password policies
–
More frequent and automated
password changes
–
Increased complexity of passwords
W
in
d
o
w
s
Access to Any
Application
W
eb
L
eg
ac
26 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Password Manager Components
Sync
Push
Administration Console
Administration Console
• Application Configurations
• Controls All Agent Settings
• Agent First Time Use Settings
• No Manual Scripting Required
SSO Agent
SSO Agent
• Responds to login event
• Web, Windows or Legacy applications
Bimini Config SSO Client Settings SSO Enterprise Application Configs SSO FTU Settings People Secrets user1 Bimini Config SSO Client Settings SSO Enterprise Application Configs SSO FTU Settings People Secrets user1
Directory
27 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Secure Gateway Review
•
Citrix has two separate SSL VPN solutions.
–
SG for MPS, ICA traffic only with Web Interface user
interface (UI).
28 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
MPS Secure Gateway review
•
Secure Gateway for MPS is a SSL VPN
technology
which is bundled with MSP as a value-add.
–
Only supports ICA traffic.
–
Only supports MSP application deployment.
29 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
MSAM Secure Gateway review
•
Secure Gateway for MSAM is a SSL VPN
product
which is a core component of MSAM.
–
Supports ICA, HTTP and HTTPS traffic.
–
Supports MSP and Web application as well as Web and
native Content deployment.
–
A
dynamic
Portal is the default user interface (UI).
–
Internal Web resources with
private IP addresses
are
available from the internet
30 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Single DMZ, MetaFrame only
ICA Traffic only, With WI
Internet
MetaFrame
PS Farm
HTTP(S) ICA
Internet Explorer
Web Interface
Gateway
Service
:80
HTTP to
127.0.0.1
CSG.ACME.COM
WI
:443
STA
XML
ICA :1494
31 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Single DMZ, SAM only
ICA + HTTP Traffic, With Portal
Note: The addition of HTTP traffic (Internal Web Servers)
Internet
MetaFrame
Secure Access
Manager
HTTP(S)
Internet Explorer
Portal
Gateway
Service
:80
HTTP to
127.0.0.1
CSG.ACME.COM
Logon
Agent
:443
AS
RSA SecurID ACE
Server (optional)
UDP 5500
Internal
Web servers
UDP
Gateway Client
32 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Single DMZ, SAM and MetaFrame
ICA + HTTP Traffic, With Portal
Note: Deploy MSP (ICA), Web (HTTP(S) content natively via Portal
33 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Many different deployment
scenarios
•
Using MetaFrame?
–
Web Interface on the same
machine, on a different
machine in the DMZ or on the
trusted network?
–
Using SSL to communicate
with the STA?
•
Using MSAM?
–
With or without RSA?
–
Logon Agent on the same
machine?
–
Allowing access to other
internal web servers?
–
Using SSL to communicate with
the Auth Service?
•
Single DMZ or Dual DMZ?
•
Using Both?
34 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
•
Server Family
–
MetaFrame XP Feature Release 3 for Windows 2003
–
MetaFrame XP Feature Release 3 for Windows 2000
–
MetaFrame XP Feature Release 2 for Windows 2000
–
MetaFrame XP Feature Release 1 Windows NT 4.0 TSE
–
MetaFrame Feature Release 2 for Unix (Solaris, HP-UX, IBM-AIX)
•
Web Access Family
–
Web Interface 2.0 on IIS 5x & UNIX\Linux w Apache & Tomcat
–
Secure Access Manager 2.0 for Windows 2000
•
Security Family
–
Secure Gateway for MetaFrame 2.0 for Windows 2000
–
Secure Gateway for MetaFrame 2.0 for Windows 2003
–
Secure Gateway for MetaFrame 1.2 for Solaris 8
–
Secure Gateway for MSAM 2.0 for Windows 2000
•
Management Family
–
Citrix MetaFrame Conferencing Manager 2.0
–
Citrix MetaFrame Password Manager 2.0
35 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
MetaFrame Access Suite
Benefits
•
Centralized applications and management reduce
costs and complexity of IT
–
“Dashboard” to oversee quality and costs of
application and information access
–
Accelerated new application deployment and access
•
Users focus on their jobs and not complexity of
accessing the heterogeneous IT environment
36 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
MetaFrame Access Suite
Benefits
•
Secure, role-based access to Windows,
Web and Java from a single point
•
Internet, Extranet, and Intranet in a
single place
•
Single Sign-on to any application - Windows, Web,
proprietary, and host-based applications
•
Anywhere - anytime
37 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Introducing Three MetaFrame
Access Suite Offerings
Citrix MetaFrame
Access Suite
Citrix MetaFrame
Access Suite
Step-up
Citrix MetaFrame
Access Suite
Migration
•
For existing MetaFrame XP Presentation
Server Customers
•
Augment your existing application deployment
and management solution
•
For existing MetaFrame 1.8 customers
•
Evolve your existing application access solution
•
For new Citrix customers
38 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Pricing
How much does the MetaFrame Access Suite cost and
what does it include?
MetaFrame Access Suite
MetaFrame Access Suite, Step-up
MetaFrame Access Suite Migration
Price per concurrent user license $599 $299 $399
Designed for
New customers or customers who need to expand their solution
Existing MPS XP customers
Existing
MetaFrame 1.8 customers
Includes the following component products
MetaFrame XP Presentation Server, Enterprise
Edition with Feature Release 3
MetaFrame XP Presentation Server, Enterprise
Edition with Feature Release 3 Migration
MetaFrame Secure Access Manager 2.0
with Service Pack 1
MetaFrame Password Manager 2.0
MetaFrame Conferencing Manager 2.0
41 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Extending the On Demand
Enterprise
•
Increased transparency
between local & remote PCs
•
Performance improvements
•
Enhanced mobility
•
Multi-media content support
42 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
“RAVE” Technology
•
Streaming video and audio support on MetaFrame
Presentation Server
–
Dramatically improves audio and video stream playback
–
Improves bandwidth usage with multi-media content
–
Minimal degradation of performance even with
multiple users
43 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
“JPEG Compression” Technology
•
Enhanced graphics compression
–
Significantly improves the performance of viewing
graphical content through MetaFrame
–
Improves performance of graphically intensive applications
–
Improves bandwidth usage
44 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
“Follow-Me Roaming” Technology
•
Enhanced control and access to the
users workspace
–
Automatically re-connects user to their applications
–
Allows sessions to be pulled to another device
–
Simplifies disconnect, logoff and re-connect
45 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Unification of MetaFrame Access
Suite Management
•
Uniformly manage the Suite
•
Informational dashboard and
data providers
•
Common componentry
•
Unified licensing across
all products
•
Integration with other management
products & tools
46 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Citrix Management Interface (CMI)
•
Single point of management console for MetaFrame
Access Suite
–
Consistent “look and feel” for all products
–
Improved Integration and Access Management
•
Fully integrated access infrastructure
47 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.
Security and Standards
are Inherent
Security
Privacy
Accessibility
Quality
Assurance
• Common Criteria
• FIPS-140
• Section 508
• Various European
initiatives
• HIPAA
• Common Criteria
• ISO, Six Sigma, and
48 Citrix Company Confidential © 2003 Citrix Systems, Inc.—All rights reserved.