This presentation by Danny Allan, Desktone's Chief Solution Architect, is an overview of virtual desktop security: concerns, risks, challenges associated with traditional PCs and (VDI) Virtual Desktop Infrastructure, and the benefits of moving virtual desktops to a cloud hosted model to reduce and eliminate security risks associated with traditional desktop management strategies.

1. ©2009 Desktone, Inc. All rights reserved. Virtual Desktops:How secure can they be? Danny Allan, Chief Solution Architect April 26, 2011

2. Agenda ©2011 Desktone, Inc. All rights reserved. Traditional Desktop Virtual Desktop Infrastructure (VDI) Cloud-based Desktops Desktop Security Desktone Overview Today’s Presenter Danny Allan Desktone Chief Solutions Architect danny.allan@desktone.com

3. ©2009 Desktone, Inc. All rights reserved. TraditionalDesktop Desktop Virtualization & Cloud Overview

5. Reduce cost

6. Expedite time to market

7. Focus resources

8. Do more projects “Utility” billing (pay as you use) “Unlimited” processing and storage Elasticity to scale up or down On demand, self-service Highly automated

9. ©2009 Desktone, Inc. All rights reserved. Desktop Virtualization & Cloud Overview

10. OS Data Apps Settings Preferences Desktop Management Today ©2011 Desktone, Inc. All rights reserved. Tipping point for change is here... Expensive Support-heavy Insecure Migration to Windows 7 New mobile access Tighter IT budgets Security

12. IT consolidation

13. Easier to manage

14. Happy users©2011 Desktone, Inc. All rights reserved. OS Data Apps Settings Preferences Virtual Desktops

15. … but major BARRIERS exist Traditional VDI Reality ©2011 Desktone, Inc. All rights reserved. Start UpHuge up-front costs Many Moving PartsComplex to design & build Operationally IntensiveDifficult to maintain Is It StrategicDo you want to be building and managing data centers

17. Device independence

18. Lower TCO

19. Low cash out = low risk

20. Customer satisfactionFrom Any Device From Any Location FIXED TELEWORKERS PARTNERS & SUPPLIERS TEMPORARY OFFICES BRANCH OFFICES

21. Securing the Desktop

22. End-to-end Desktop Security Manage ©2011 Desktone, Inc. All rights reserved. Ensure the desktop and OS have the needed AV, FW, patches and config Protect Assess Personal Desktop Assess user compliance with business conduct guidelines Defend the desktop from malicious and unauthorized access Deliver Verify that the delivery of the desktop is not monitored or altered

23. A desktop management problem ©2011 Desktone, Inc. All rights reserved. 20 M desktops infected with malware in 1H10 in USA * http://www.microsoft.com/security/sir/

24. Desktop Management Challenge Comprehensive and consistent OS patching and configuration User controls / application controls End point controls AV/FW synchronization Real world example LIHF – 8B security incidents every day Rimecud, Stuxnet Ability to Deliver DaaS – Ability to deliver sandboxed solutions across the internet VDI – Multi-tenancy is impossible to achieve internally Traditional – Unmitigated disaster  resulting in largest security spend segment ©2011 Desktone, Inc. All rights reserved.

27. Desktop Delivery Challenge Eliminating the threat of eavesdropping Ensuring the user can trust the communication from the server Ensuring the server can attest to client actions Real world example Critical vulnerabilities in RDP < 7.0 (eg. MS09-044, MS05-041) CSRF vulnerabilities are exploding Ability to Deliver DaaS – Consider stronger encryption capabilities across the internet VDI – Many respected guides recommend disabling RDP encryption Traditional – Due to the significant variations and types of communication initiated from the desktop, it is difficult to impossible to lock this down securely ©2011 Desktone, Inc. All rights reserved.

30. ©2009 Desktone, Inc. All rights reserved. Desktone Overview

31. Who is Desktone ©2011 Desktone, Inc. All rights reserved. = Cloud-based Virtual Desktops Built from the start for cloud-hosted desktops as a service (DaaS) Security, end-user performance and customer support is JOB #1 Frictionless try and buy experience Optimized, tested & deployed with the worlds largest companies and service providers

32. VDI vs. Cloud based Desktops DaaS VDI

34. Centralized (security) management from any device

35. Visibility into user activity

37. Pilot ease – no infrastructure required©2011 Desktone, Inc. All rights reserved.

39. Work from anywhere: home, office, or StarbucksLeverages “Bring Your Own PC” (BYOPC) movement “Instant on” experience ©2011 Desktone, Inc. All rights reserved.

41. Centralized support and management

42. No expensive management resources required

43. No hidden costs©2011 Desktone, Inc. All rights reserved.

45. Pay for only what you need

46. OPEX budget consistency©2011 Desktone, Inc. All rights reserved.

48. Support – dedicated virtualization experts

49. Operational Excellence – 4 years of hosted desktop delivery

50. Training – rich library of self-paced training modules and live knowledge transfer sessions©2011 Desktone, Inc. All rights reserved.

54. User Data

56. Bring your own licensesAccess Anywhere ©2011 Desktone, Inc. All rights reserved.

57. The Desktone Cloud Consists of two primary interfaces Desktone Enterprise Center Used by desktop admins to manage the Desktone Cloud Desktone Portal Used by end-users for access to resources on the Desktone Cloud

58. End Point Devices Mobile DevicesiPad “DaaS Mobile Client” avail in the iTunes Store Thin clientsAll leading vendors supported Standard PCsAccess through their preferred web browser or DaaS Client. End-User Access

59. What the Analysts Say “Enterprises want to take advantage of virtual desktops, but are stymied by cost and complexity. With its attractive price point and easy on-ramp, the Desktone Cloud lowers the barrier to entry. “ “This idea of desktops as a service is gaining a lot of interest in the market. IDC believes it is very valid model; the technologies are coming together and I expect it will gain in adoption." “If nobody had influenced you in any way and you were just asked to draw out a sense of a virtualization of services to end users, you would head in this direction. I have no doubt about it. It’s very appealing.”

61. Centralized desktop management, control and visibilityVDI was supposed to solve the problems – but has introduced other issues for most especially cost and complexity ©2011 Desktone, Inc. All rights reserved.

62. Resources Free Desktop Security White Paper http://bit.ly/slidesharedesktopsecuritywp Free Trial: www.desktone.com ©2011 Desktone, Inc. All rights reserved.

63. Questions?? Questions / Feedback danny.allan@desktone.com Schedule a Live Demo 866-691-5660 or info@desktone.com Desktop in 90 Seconds! Check out our Free Trial of a Cloud Hosted Desktop – in less than 90 seconds you’ll be up and running! http://bit.ly/securedesktopfreetrial ©2011 Desktone, Inc. All rights reserved.