Virtualization Forum 2017 Praha, 1.11.2017 sál Citrix

1. © 2017 Citrix
Citrix vs Ransomware
Roman Kapitan
NOVEMBER 3, 2017

2. 2 © 2017 Citrix

3. 3 © 2017 Citrix
NetScaler Gateway
Hypervisor
Current Approach by Most Citrix Customers
Resource Location
On-premises
Internet
SaaS
XenApp Browser
SmartAccess &
Federation
Internal Users
Firewall
Native
browsers

4. 4 © 2017 Citrix
It's Time to Isolate Your Users
From the Internet Cesspool
With Remote Browsing
Gartner Published: 30 September 2016 ID: G00315285
Analyst(s): Neil MacDonald

5. 5 © 2017 Citrix
Four ways to protect your data and environment NOW:
• Shield users of web apps from infection and keep sensitive data off the endpoint
by publishing virtualized, sandboxed and hardened browsers rather than relying on
the locally installed, over-configured and over-connected browser.
• Prevent email-borne ransomware from compromising the endpoint by
publishing a virtualized, sandboxed and hardened email client.
• Protect mobile devices against attack with measures including containerization,
encryption, blacklists and whitelists, and device compliance checks
• Ensure the rapid recovery of ransomware-encrypted data with a secure and
robust enterprise file sync and sharing service.
https://www.citrix.com/content/dam/citrix/en_us/documents/white-
paper/ransomware-four-ways-to-protect-data-now.pdf

6. 6 © 2017 Citrix
NetScaler Gateway
XenServer + Bitdefender
HVI
Internet Separation and Threat Mitigation
Resource Location
On-premises
Internet
SaaS
XenApp
Confidential
Browser
Intranet
Browser
Internet
Browser
Web App
Firewall
Intranet
NetScaler Secure
Web Gateway
Web filteringSmartAccess &
Federation

7. 7 © 2017 Citrix
Completely isolated from the company network
Secure Browser Service/Environment
HTTP(S)
HDX
Internet web sites
Corporate
network
No files or data to
reach the corporate
network
Copy and paste
controlled by policy

8. 8 © 2017 Citrix
Contain possible attacks in the designated environment
Browser environment disposed at the end of each session
Secure Browser Service/Environment
HTTP(S)
HDX
Internet web sites
Corporate
network

9. 9 © 2017 Citrix
Browsing history and data deleted after each session
Secure Browser Service/Environment
HTTP(S)
HDX
Internet web sites
Corporate
network
Browsing history
Cache
Cookies
Logins

10. 10 © 2017 Citrix
ManagementAutomation MonitoringAnalyticsProvisioning
User Devices
Citrix Cloud
NetScaler
StoreFront
Users Access Control Hosts
XenMobile Controller
ShareFile Controller
XenApp
XenDesktop
Controller
Hybrid Cloud
Cloud
On-Premises
Windows Apps Linux Apps
Desktops Browser Apps
Resources
Mobile Apps
App Data
File Server Storage Cloud Storage
Conceptual Architecture - Citrix

11. 11 © 2017 Citrix
XenServer Hypervisor Introspection (HVI)
Overview
Control
Domain
(dom0)
Security
Appliance
(domU)
XenServer Hypervisor
Virtual Machine Virtual Machine Virtual Machine Virtual Machine
Direct Inspect APIs

12. 12 © 2017 Citrix
XenServer Hypervisor Introspection (HVI)
Design Considerations
Protects file system Protects in-guest memory
Security software can be attacked from VM Hypervisor provides isolation
Relies on detecting attack patterns Relies on detecting attack techniques
Performance hit on each VM Performance hit on each host
Agent per VM Agent per host
In-Guest Security Tools XenServer Hypervisor Introspection

13. 13 © 2017 Citrix
Network Delivery Controllers Apps & Data Resource Location
Service Management
Monitoring Analytics Automation Provisioning
XenDesktop
XenApp
XenMobile
ShareFile
Desktops
Windows Apps
Secure Browser
SaaS & Web Apps
Mobile Apps
Data
On-premises
Hybrid Cloud
Cloud (Public or Private)
NetScaler
• Link Expiration
• Information Rights
Management
• Encrypted Email
• Remote Wipe
• Virtual Data Room
Citrix Technology - ShareFile

14. 14 © 2017 Citrix
Sharefile ICAP

15. 15 © 2017 Citrix