Secure & Manage Mobile LaptopsThe number of enterprise laptops is increasing rapidly with users spending more time outside the officeLost data on insecure laptops leads to financial losses, negative customer/market impact, and legal liability Laptops are difficult to manage and update because of how often they are off the LAN or disconnectedReliability and rapid recovery is critical for laptop users who are traveling and cannot be visited by ITDevice Management for PCsCompanies buy thousands units of PCs each year and need a better way to manage their current & new PCsPCs deliver excellent local performance, but are riddled with patch failures, reliability, & security issuesTraditional Device Management is expensive, distracts focus and budget from higher value service deliveryXenClientFlexCast model turns PCs into Virtual Appliances, cutting management & operations costs by 70+%
Managing and securing laptops and PCs is complex – lots of people and multiple tools involved
These tools are helpful, but they don’t fix all of the issues – they are entirely reliant on the operating system, so if it is compromised in any way, then these tools are also compromised.
It works by combining a comprehensive centralized management system with a Type-1 client hypervisor.
XenClient manages and secures mobile laptops.
Management of traditional PCs requires a variation in each image because each PC has different components and devices – even among PCs from the same manufacturer and same model built at different times.
XenClient can also manage the base PC where a customer is using XenApp for certain applications (green) and using native Windows for others (grey).Using XenClient to manage the local image and applications dramatically reduces the costs, and it also makes a great value proposition for upgrading to XenDesktop even where an organization is not planning to use VDI.I was speaking to a XenClient Customer that said they are now considering upgrading to XenDesktop so they can use XenClient on all of their PCs along with their XenApp.
XenClient can manage the base PC and it can be used either as a device to access XenDesktop VDI sessions or to access local VMs. There’s a hospital that has used PCs in this manner – using XenDesktop VDI as their primary environment but also keeping a local VM as a backup in case of an outage. In this example, they are using Imprivata to tap in to authenticate to their VDI session or local client.
For less sophisticated users, you can completely hide XenClient. They don’t even have to know that there’s a hypervisor running on their machine.Note: make the point (as in the email on this screen), that end users will still see a big benefit (in areas like reliability, recovery, hardware migration) even though they don’t know (and probably don’t care) how it happens.
When people think “client hypervisor,” they usually think about the ability to run multiple VMs, so of course, users can take advantage of multiple VMs. These typically tend to be power users, but this capability can also be used to help with OS migrations (for application compatibility, ease of transition, etc.)
Complete centralized management – including updating and publishing an image.
Administrators can provision or patch 1000’s of PCs with a single click through the management console.
And powerful role-based administrative capabilities let an organization define who has what admin privileges – enabling one person to just manage images while another manages deployments. The roles can be cut up in whatever way the organization desires.
If the user encounters malware, corruption, or another software-based problem. They can simply reboot their PC to recover from the issue. XenClient will reboot into a pristine golden image, eliminating the issue.If the user dropped, broke, or lost their PC, they can migrate to a new one in minutes.
Security is ensured through a combination of capabilities starting with AES-256 Disk Encryption, which provides full-disk encryption in the event that a laptop is lost or stolen. USB filtering protects potential theft of corporate data through policies that can preclude certain types of USB devices, such as mass storage devices. Time-based lockout and remote kill capabilities offer an additional level of protection.
Follow – Me – Apps SlideThis is a capability we have had for about a year now with the XenApp technology. You put the Citrix Receiver on your VDI VM and your local VM on XenClient. You put it in both of those images. It allows XenApp to actually deliver applications down to the users. We have a really nice interface where the users can self-select which applications they would like to have on their systems. These can be departmental applications or optional applications. The users can actually pull those down. What is great about follow me apps is if they go to their VDI VM and add some applications, when they switch to their local VM running on XenClient on the laptop, it’ll actually see that they have added some applications. It’ll automatically bring those down. It’ll say hey, I see that you have added some applications, do you want them in this environment as well. If you say yes, it’ll bring those applications down. Using XenApp or MSFT App-V streaming, it’ll bring those down so you can use those applications offline. It is this great set up where as you add applications in either environment, it will keep them synchronized between the machines and that is that XenApp capability.Follow – Me – Data Slide Now that you have your applications showing up in both places, you naturally want your data in both places as well. That is where we would use follow me data. We are enabling that through the use of Sharefile follow me data. Sharefile is a company we acquired last year. You can think of it as enterprise drop box. This allows us to keep data synchronized between the VDI VM and the local VM running on XenClient. It’s a great capability. You can be editing a Powerpoint on your laptop and opportunistically as you are on the network it is just synching that back and keeping it in sync with your VDI VM. That is what allows you to switch. Within a couple minutes anything you are doing on your local VM is synched up not only to your VDI VM but it is also available in the cloud. This is great for your executives. You can access all of your apps and data on your laptop and on your tablet. You can also go to our website and access it in the cloud. There are little applications for Apple devices and Android devices. You can get into your data on those native tablets. You can open a Powerpoint on an iPad for example. This is that follow me data capability. You can see we have this stack of keeping the apps synchronized, the user data synchronized in each stack. This creates a really nice user experience. It allows you to flip easily between your laptop and your tablet or other device while keeping your apps and data synchronized. We are doing ongoing synchronization; it is not a check in / check out model.
XenClient offers a win-win for both users and for ITIT are able to exercise the levels of security and control that enable them to uncompromisingly secure corporate data while providing an environment specifically designed for users to be able to be able to accomplish their work tasks. At the same time, IT processes such as backup and recovery are greatly simplified enabling users to self service recover their entire environment to any XenClient enabled laptopUsers gain the freedom and flexibility of a second personal environment enabling users to use a single device for business and personal tasks without breaching corporate policy, improving user satisfaction and productivity
Customer Situation: Established in 1979, IVG is comprised of a team of accomplished veterinary professionals dedicated to providing compassionate care to pets and their families using the most advanced medical solutions available today. Headquartered in Woburn, MA, IVG has three hospitals in Massachusetts and one hospital in New Hampshire. The company was looking to make dramatic improvements in their PC operations.Citrix Solution: Citrix XenClientCustomer Results: 96% decrease in PC support issues Due to corruptions or slownessExcellent performance for users; their desktops ran locally on their PCsIncreased productivity - “Eliminating downtime has increased the amount of hands-on time our doctors can spend focused on the needs of their patients & clients.” – CEOIncreased flexibility and agility – “When launching new hospitals, we can deploy computers in a fraction of the time it would ordinarily take.” – CEO
Intro:The Town of Lincoln (TOL) was struggling to keep up with the constant demand for desktop support. They needed a way to improve their PC lifecycle management operations and leverage their existing backend infrastructure. Customer Situation: The Town of Lincoln, Massachusetts (TOL) consists ofapproximately 6,000 residents in the Greater Bostonmetropolitan area. The town’s desktop infrastructuresupports government administration, elected officials,public works, and public safety employees.Citrix Solution: Citrix XenClientCitrix XenAppTransitioned to Windows 7 Customer Results: 90% reduction in PC support issuesImproved employee productivity; no waiting for updates or desk-site visits from IT staff.Department and user specific applications delivered via XenApp so the backend server overhead was very low.With XenClient, IT spent less time managing PCs and more time on more strategic initiatives
Customer Situation: Life Time Fitness, the healthy way of life company, has 105 locations across the United States and Canada. At Life Time, they use the best people, programs and places, to help their members achieve real results by doing what they love. The IT Manager at Life Time had several challenges:Employees need to process credit card transactions while they deliver exceptional concierge services at the same timeLimited space – service desks are only big enough for one deviceLimited budget for backend infrastructureLimited network bandwidth in most locationsCitrix Solution: Citrix XenClient, the “local VM” delivery model of XenDesktopFlexcastPurchased 1800 licenses of XenDesktop Platinum due to the capabilities of XenClientCustomer Results: XenClient enabled Lift Time to install 2 isolated VMs – 1 for secure credit card transactions to meet PCI compliance requirements & 1 for general computingXenClient met the customer’s space requirements by installing only 1 device instead of 2. Otherwise, they would need 1 to meet PCI compliance requirements and 1 to help their customers with questions.There was no budget for backend infrastructure so XenClient helped Life Time Fitness leverage meet its budget requirementsThere was very limited network bandwidth at each location. With XenClient, all of the processing is done locally so the customer has great performance.Life Time purchased XenDesktop Platinum licenses because they are future proofing their deployment. They may use the additional XenDesktopFlexcast models in the future.
While tablet use has grown significantly, PCs in the enterprise are growing as well. Desktops are growing at a moderate pace, but growing none the less.And laptops are growing dramatically – this is being further fueled by hot new Ultrabooks that have the power and form factor of a laptop, with portability and battery life that rivals tablets.This dramatic growth in laptops is compounding the device management challenges we discussed.