What's New in Ivanti Workspace Control 2020.0
•Download as PPTX, PDF•
0 likes•333 views
Ivanti Workspace Control 2020.0 was released on August 11th. Key highlights include the introduction of Ivanti Neurons for Edge Intelligence, which brings Ivanti Neurons capabilities to on-premises environments without long-term cloud data storage. The release also includes enhancements like Microsoft Profile Container integration using FSLogix, expanded administrative roles using tags, incorporated user voice feature requests, and compatibility updates. The webinar provided details on these new features and previews potential future directions like trusted ownership, Azure integration, and support for additional application types.
More Related Content
What's hot
What's hot (20)
Similar to What's New in Ivanti Workspace Control 2020.0
Similar to What's New in Ivanti Workspace Control 2020.0 (20)
More from Ivanti
More from Ivanti (20)
Recently uploaded
Recently uploaded (20)
What's New in Ivanti Workspace Control 2020.0
- 1. Copyright © 2020 Ivanti. All rights reserved.Copyright © 2020 Ivanti. All rights reserved. Momentum Webinar AUG 27TH, 2020 Ivanti Workspace Control 2020.0
- 2. Copyright © 2020 Ivanti. All rights reserved. Introductions David Murray Director of Product Management david.murray@ivanti.com +353 86 1244441
- 3. Copyright © 2020 Ivanti. All rights reserved. Centrally manage and secure your workforce’s apps and services across even the most complex hybrid environments
- 4. Copyright © 2020 Ivanti. All rights reserved. 2020 Ivanti Workspace Control Awakens from Cryosleep! Product Manager Dedicated Development Team Roadmap in development
- 5. Copyright © 2020 Ivanti. All rights reserved. Version 10.4 released in February Security improvements Enhancements Performance improvements Version: 10.4
- 6. Copyright © 2020 Ivanti. All rights reserved. Ivanti Workspace Control 2020.0 When was Ivanti Workspace Control 2020.0 released? Release Date = Aug 11th What are the highlights? Ivanti Neurons for Edge Intelligence Microsoft Profile Container Integration (FSLogix) Enhancement to administrative roles (Tags) User Voice features Compatibility Updates
- 7. Copyright © 2020 Ivanti. All rights reserved.
- 8. Copyright © 2020 Ivanti. All rights reserved. Ivanti Neurons for Edge Intelligence Overview Bringing Ivanti Neurons (Cloud) to On-Prem Retrieve data from endpoints whether on or off network Security Device Health / Troubleshooting Inventory Real-Time data No long-term data storage in the cloud Cloud agent on endpoints Feature is on controlled release in IWC 2020
- 9. Copyright © 2020 Ivanti. All rights reserved. Behind the scenes What happens when you enable Ivanti Neurons for Edge Intelligence? Tenant creation process is totally automated (~2 minutes)
- 10. Copyright © 2020 Ivanti. All rights reserved. Ivanti Neurons for Edge Intelligence Hang on, this is Cloud? Cloud Infrastructure Cloud Tenant (Ivanti Neurons tenant) created automatically when feature is enabled No separate registration (Single sign-on) Cloud Agent / Ivanti Neurons Agent installed on all IWC 2020 endpoints What data are we storing? No data storage in the Cloud Ivanti Neurons Agent stores data on endpoint and forwards when requested (Real-Time) Where is Ivanti Neurons located? Virginia (US), Reading (UK), Melbourne (Australia)
- 11. Copyright © 2020 Ivanti. All rights reserved. Ivanti Neurons for Edge Intelligence But I’ve already got Ivanti Neurons Workspace / Ivanti Neurons for Edge Intelligence Already have Ivanti Neurons for Edge Intelligence (via Browser)
- 12. Copyright © 2020 Ivanti. All rights reserved.Copyright © 2020 Ivanti. All rights reserved. Demo
- 13. Copyright © 2020 Ivanti. All rights reserved. Ivanti Neurons for Edge Intelligence Summary Alignment with overall Ivanti Neurons messaging & direction Query and Troubleshoot endpoints whether on or off network
- 14. Copyright © 2020 Ivanti. All rights reserved. Microsoft Profile Container Integration What is FSLogix? A set of solutions that enhance, enable and simplify non-persistent Windows computing environments
- 15. Copyright © 2020 Ivanti. All rights reserved. Microsoft Profile Container Integration VHD Cache Roaming for Office 365 Applications Provide support for non-persistent environments where O365 is in use Microsoft Profile Container solution Redirect user profiles to network location Additional integration option Integration Overview Document Available https://forums.ivanti.com/s/article/Microsoft-Profile-Containers-Integration-Overview-for-Ivanti-Workspace-Control
- 16. Copyright © 2020 Ivanti. All rights reserved. Enhancement to Administrative Roles (Tags) Ability to add tag/label on admin role and applications Roles with this tag/label are allowed to modify applications Ability to hide applications and block certain tasks Tags on printers also available Provides greater RBAC for customers with multiple admins Refer to https://forums.ivanti.com/s/article/INFO-Tags-on-Administrative-Roles for more info
- 17. Copyright © 2020 Ivanti. All rights reserved. User Voice – We are listening Customer Requests implemented Create the registry hook CreateCTXDirectorEvent to enable Citrix Director logon duration measurement Add a SessionID variable to the composer (like we have for UserSID) Add Interception support for Horizon view published apps Change user settings default from tracking to capture Cached credential usage detection option in eventlog Cached credential usage detection variable Change the Help Pull-Down Menu in the IWC console to contain a direct link to "Workspace Control product area“
- 18. Copyright © 2020 Ivanti. All rights reserved. User Voice: Let your voice be heard!
- 19. Copyright © 2020 Ivanti. All rights reserved. Keeping current with latest product releases Compatibility Updates Support for Microsoft SQL 2019 Support for Windows 10 Virtual Desktop Support for Microsoft OLE DB driver Microsoft LDAP E-mail Settings Default password option added to Ivanti Workspace Control Verify the support for Citrix Virtual Apps and Desktops 1912 LTSR Added User setting templates for Visio 2016/2019 and Project 2016/2019 Added User Settings template for Microsoft Edge Chromium Added support for Managed Tile Sizes. Adding interception support for VMware Horizon view published apps. Improved support for Citrix Cloud Various security & performance improvements
- 20. Copyright © 2020 Ivanti. All rights reserved. Ivanti Workspace Control 2020 Summary First significant Workspace Control Release for several years We are back! Focus areas Ivanti Neurons alignment (Evolving to Cloud) More integrations Responding to customer requests Keeping current
- 21. IWC roadmap 2020 MS Profile Containers Integration Update 8 Mar 2019 Maintain Product Trusted Ownership Update 8 Mar 2019Q1 2020 Q2 2020 Q3 2020 Q4 2020 Connect to Ivanti Neurons Additional Ivanti Neurons functionality Cloud Relay UWP Support Sync user settings with online storage IWC 2020.0 Develop new features User Voice feature requests IWC 2020.1 User Voice feature requests Deliver Ivanti Neurons for Edge Intelligence to IWC Maintenance releases every 4 weeks Azure AD Users and Groups
- 22. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) Trusted Ownership Trusted Ownership checking adds an additional layer of security while significantly reducing the maintenance burden for Application Control Trusted Ownership has been a key driver for Application Control (UWM) sales for over 10 years. It is a tried and tested capability in the enterprise environment. Executables are allowed or denied based on file ownership properties. Trusted Owners (System, TrustedInstaller, Admin) are allowed Everything else is blocked
- 23. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) Azure integration Store/sync agent cache and user settings with online storage Base Context around Azure AD users and groups https://ivanti.uservoice.com/forums/928756/suggestions/40943854
- 24. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) User Voice Requests More requests planned for 2020.1 Add Workspace Container information to Workspace Preferences Move “pwrtech.exe already running” check while starting the console More to follow… Also considering requests with most votes Save DPI settings per user Delayed Autolaunch of applications
- 25. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) Cloud Relay Ability to push updates to users working from home via cloud infrastructure Current Solution = Relay Server in DMZ Overhead to setup Another system to manage Potential security concerns
- 26. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) UWP Applications Support UWP is the default app standard for Win10 OS Ability to manage these apps in an Enterprise world is vital in order to stay relevant Start menu Provide admin with ability to add/remove UWP applications from a user Start menu VDX Support Add Support for UWP applications
- 27. Copyright © 2020 Ivanti. All rights reserved. Under consideration / investigation (subject to change) MSIX Support MSIX Package Deployment MSIX is the ‘go forward’ application file type from Microsoft APP-V package delivery is a key grounding of Ivanti Workspace Control’s success and MSIX is seen as its natural successor Customers expect to have the ability to configure targeting and deployment of MSIX packages from the Ivanti Workspace console Microsoft will force customers in this direction User settings support for MSIX packages Ability to manage MSIX packages on the endpoint is key to ensuring Ivanti Workspace Control remains relevant in the modern workspace. Looking for real-world customer examples to validate business needs.
- 28. Copyright © 2020 Ivanti. All rights reserved.Copyright © 2020 Ivanti. All rights reserved. Q&A
Editor's Notes
- Stepping back to talk about Workspace Control as a Product. What does IWC enable customers to do? It enables organizations to centrally manage and secure their workforce’s apps and services across even the most complex hybrid environments In simpler terms, it enables organisations to provide workers with an always-familiar user workspace across physical, virtual and, cloud environments, in any context.
- Slide from webinar in February. Added more resources. Still building up the team. More developers joining shortly.
- Augment Workspace Control with real-time intelligence for workspace analyst Feature on controlled release in IWC 2020 There are costs associated with Cloud tenants so we need to understand these costs at scale. This is different to adding another on-prem feature in the product whereby we would incur development costs but there would be no ongoing product costs. For now, the feature is being made available to some of our larger customers so that we get a better understanding of these costs at scale. We want to confirm that this feature is of significant value to these organizations, that it provides benefit. Otherwise, it really doesn’t make sense for us to include it in the product. On the flip side, we need to understand how much this is going to cost us to make it available and whether we can continue to bear those costs or whether we will ultimately need to charge for this feature. We will be reviewing both aspects of this over the coming weeks and months and will then make a decision around the longer-term strategy for this feature. Smaller customers can use Ivanti Neurons for Edge Intelligence SKU to obtain this feature.
- We don’t store any information in the Cloud. The information we display in the Ivanti Neurons for Edge Intelligence tab is actually stored on your endpoints. We have a Cloud Agent which is installed on the endpoints (when you enable Ivanti Neurons for Edge Intelligence in IWC) once these endpoints have been upgraded to the version which supports this feature (10.5.0.0). The Cloud Agent contains sensors for the various queries that are possible with Ivanti Neurons for Edge Intelligence, such as logon performance, CPU usage, memory usage etc. It gathers this data and stores it locally on the endpoint where it retains it for 30 days (in the case of logon performance, for example). In other cases (e.g. event logs) this information already exists on the endpoints so all the agent does is collect this information when requested. When you enable Ivanti Neurons for Edge Intelligence we create a Cloud Tenant which communicates with the endpoints to retrieve the requested information from the endpoints in real-time The Ivanti Neurons for Edge Intelligence tab in IWC is effectively a window into that Cloud Tenant so that you can see the data that is returned. In order to minimize our costs, we want this Cloud Tenant to be as light as possible so there is no database component in the Tenant and, hence, no storage of information. If you run the same query again, it pulls the information again from the endpoints. Accordingly, we don’t have the ability to generate trending reports etc from the Cloud as there is no information in the Cloud Tenant to generate such reports. Any trending or historical information is stored locally on your endpoints.
- Provide support for non-persistent environments where O365 is in use Rebuild user profile at login Copy lots of files (e.g. .ost files) Rebuild search indexer Unacceptable log-in/log-out duration Microsoft Profile Container solution Redirect user profiles to network location Profiles placed in VHD(X) files and mounted at run time => eliminates delays 2 possible container modes Profile Containers Entire profile will be included Office Containers MS Office apps included or excluded individually - Can redirect portion of the profile using Office Container we have added role-based access control, so that the feature can be restricted to specific users or groups So, what are we doing behind the scenes? Depending on which options have been selected for the feature in setup mode, we are setting the registry keys for Microsoft Profile Containers to the appropriate values. Prior to setting the registry values, we conduct some validation checks to confirm that the MS Profile Container service is installed, enabled and running. Once the appropriate registry values have been set by Workspace Control, everything else is then being performed by the Microsoft Profile Container Agent (the Microsoft Profile Containers Integration requires the Microsoft Profile Containers agent to be installed and running on the endpoint). So, the value that we are bringing here is to provide a single point of configuration so you don’t have to make configuration changes separately in Workspace Control and MS Profile Containers. We also had a suggestion through user voice recently to add Workspace Container information to Workspace Preferences. When checking workspace Preferences in a User Session, there's no information available about active Workspace Containers, so we’ve just added that, so that is going to be available in the next revision.
- Only a Technical Manager can assign, manage or change tags. If the Administrative Role has no tags, then only applications with no tags are visible under Composition > Applications. If the Administrative Role has one or more tags, Then they can see and modify: All applications with no tags, (assuming other Scope options like Access Control and Workspace Containers apply). Any applications that have exactly the same tags as the Administrative Role. Use case example Certain applications can only be seen and edited by one Administrative Role. Create one tag. Select this tag on the Administrative Role. Select this tag on the applications that apply.
- Create the registry hook CreateCTXDirectorEvent to enable Citrix Director logon duration measurement https://ivanti.visualstudio.com/UEM/_workitems/edit/662494 Add a SessionID variable to the composer (like we have for UserSID) https://ivanti.visualstudio.com/UEM/_workitems/edit/688668 Add Interception support for Horizon view published apps https://ivanti.visualstudio.com/UEM/_workitems/edit/680332 Change user settings default from tracking to capture https://ivanti.visualstudio.com/UEM/_workitems/edit/675041 Cached credential usage detection option in eventlog https://ivanti.visualstudio.com/UEM/_workitems/edit/691699 Cached credential usage detection variable https://ivanti.visualstudio.com/UEM/_workitems/edit/691703 Change the Help Pull-Down Menu in the IWC console to contain a direct link to "Workspace Control product area“ https://ivanti.visualstudio.com/UEM/_workitems/edit/688672
- Improved support for Citrix Cloud With the release of Ivanti Workspace Control 10.3.90.0, support for publishing to Citrix Cloud has been added to Ivanti Workspace Control. Several improvements have been made to further enhance support for Citrix Cloud. Various security improvements. Various performance improvements.
- Synchronize their user settings using online storage (Azure, AWS) and manage the user’s environment no matter where the agents are Would it be possible to store/sync our agent cache and user settings with online storage Make it possible to connect Ivanti Workspace Control to Azure Active Directory without the need of a local Active Directory forest. This can be very useful for workspace containers, zones and access control. With this, companies can manage their modern desktops / Windows Virtual Desktop from the cloud with Ivanti Workspace Control. Maybe this can done by creating a "API Management Server" with the Azure Active Directory Powershell Module. The cliënts / agent doing an API request to the management server for a query of user groups.
- If the IWC console is being opened it will check your context, this might take some time in enterprise environments. It would be nice to move the check "pwrtech.exe process already running in this session" to the beginning. For now, if the console is already open but you didn't quite see that, the context will first be evaluated and then a message will popuptelling you the console is already open. Save DPI settings per user At the moment IWC isn't capable of saving DPI settings since Workspace Manager kicks in too late during the logon process. The plan would be to implement a pre-session event that could be used to trigger various actions. This request goes back a long time so, while this is our number 1 request in user voice in terms of the overall number of votes, some of you may no longer be interested in this. However, if you are interested in getting an early version of this feature to test out and provide feedback, let me know. Delayed Autolaunch We want certain applications (like e.g. Skype) to always run for all users so we configure a mandatory Autolaunch for them. Unfortunately, starting these applications puts a strain on the system resources during logon and is often seen as part of the logon time as Workspace shows the mini splash screen during those actions. We tried putting in a 30 second delay in the Configuration actions but this adds to the splash screen time and therefore to the user's perception of the logon time. Would it be possible to add a launch delay so the user sees that the login has finished before the application is started? This delay can either be a certain period of time or 'after everything has settled down'.
- User Settings and Start Menu (UWP) Applications Support UWP is the default app standard for Win10 OS Ability to manage these apps in an Enterprise world is vital in order to stay relevant User Settings Ability to roam user configured preferences of these applications between sessions May no longer be necessary once VHD Cache roaming completed Start menu Provide admin with ability to add/remove UWP applications from a user Start menu
- User Settings and Start Menu (UWP) Applications Support UWP is the default app standard for Win10 OS Ability to manage these apps in an Enterprise world is vital in order to stay relevant User Settings Ability to roam user configured preferences of these applications between sessions May no longer be necessary once VHD Cache roaming completed Start menu Provide admin with ability to add/remove UWP applications from a user Start menu