citrix access gateway 5.0 customer presentation
DESCRIPTION
Citrix Access Gateway 5.0 Customer Presentation. Speaker Name and Title Date of Presentation. They must support an increasing number of contractors and remote workers. Users expect easy access to apps regardless of location. - PowerPoint PPT PresentationTRANSCRIPT
Citrix Access Gateway 5.0Customer PresentationSpeaker Name and TitleDate of Presentation
What problems are organizations facing?• They must support an increasing number of contractors
and remote workers.
• Users expect easy access to apps regardless of location.
• IT must keep employees productive during prolonged office closures caused by disasters or epidemics.
• Levels of corporate governance are increasing.
• Failure to protect sensitive data over the network costs an average of $6.6 Million USD per incident.
The Citrix Vision is a world where anyone can work from anywhere
Anywhere Access Allows users to securely access desktops and applications using any device in any location, including home computers and mobile devices.
Delivers simple and seamless secure accessIntroducing HDX SmartAccess
Network and device roamingEnables users’ sessions to transparently and securely move between networks and devices by dynamically adapting access.
Delivers simple and seamless secure accessIntroducing HDX SmartAccess
Anywhere Access
Single sign-onImproves the user’s experience by reducing unnecessary authentication prompts and the number of passwords users need to remember.
Delivers simple and seamless secure accessIntroducing HDX SmartAccess
Anywhere Access
Network and device roaming
Turbo-charged accessEmpowers users with high performance access to their desktops, applications and data by integrating security and acceleration delivered by Citrix Branch Repeater in a single client with Citrix Receiver.
Delivers simple and seamless secure accessIntroducing HDX SmartAccess
Anywhere Access
Network and device roaming
Single sign-on
Citrix Access
Gateway
CitrixBranch
Repeater
CitrixReceiver XenApp
XenDesktopXenServerNetScaler
Secure access to Citrix app and desktop virtualizationAn integrated delivery infrastructure
HDXDelivery Network
What is Citrix Access Gateway?
Citrix Access Gateway™ is the only secure application and desktop access solution that provides administrators with application-level control while empowering users with access from anywhere.
Adaptive Policy Control
Best Performance& Flexible DeploymentHDX SmartAccess
Citrix Confidential - Do Not Distribute
Broad Platform SupportSeamless access through Citrix Receiver
•Windows•Mac•Linux•iPhone and iPad•Android•Blackberry•Java
Adaptive Policy Control
Citrix Confidential - Do Not Distribute
Other SSL VPNs only go this far
What Resources?
Who and Where?
Endpoint AnalysisAuthentication Access Control
Which User
What Device
What Location
What Authentication
Web and File
ResourcesNetworks
Mail Servers
Applications
How?
Application-level Control
VPN Access
Clientless Access
XenApp• Applications
• Virtual Channels
XenDesktop• Desktops
• Virtual Channels
• Virtual appliance with same functionality as Access Gateway 2010• Designed to upgrade Secure Gateway • Capacity for medium-size deployments (500 users per appliance)• Available for Citrix XenServer or VmWare ESX (NEW!) hypervisors
• Ideal for secure access to XenApp and XenDesktop• Designed to upgrade Secure Gateway • Capacity for medium-size deployments (500 users per appliance)
• Designed for secure access• High capacity (5,000 users per appliance)• Upgradable to NetScaler for additional functionality
• Multi-function appliance (secure access, load-balancing, acceleration)
• Highest capacity (10,000+ users per appliance)• Most reliable hardware• Ideal for business continuity across multiple datacenters
Appliance Options
Access Gateway 2010
Citrix Access Gateway VPX
Access Gateway VPX
NetScaler MPX 7500 or higher
Access Gateway MPX 5500
Which Appliance To Choose
Access Gateway 2010
Citrix Access Gateway VPX
Access Gateway VPX
NetScaler MPX 7500 or higher
Access Gateway MPX 5500
• How many users?
• What form factor?• Physical or Virtual appliance?
• Will the appliance be dedicated for remote access?
• Multi-function appliance required?
• How many sites need to be supported?
Appliance Failover avoids a single point of failureBasic High Availability
Primary
Secondary
Single External
IP Address
SingleInternal
IP Address
• Available with all appliance models (New! on Model 2010 and VPX)• Avoid single points of failure in Access Gateway deployments
(including Access Controller servers)
Achieve Business Continuity with NetScaler & Global Server Load Balancing
• Enable multiple site deployments transparently to users• Route users to the nearest and most available datacenter
Simple & Intuitive Administration
Citrix Confidential - Do Not Distribute
A New, Redesigned Console• Simplifies common configuration tasks• Provides more visibility to administrators• Update to “Standard” admin interface
SmartGroups• Simplifies policy control over users,
devices, and resources
Configuration Snapshots• Backup and restore configuration states• Quickly recover from admin errors
New! Access Gateway VPX for VMWare ESX
Citrix Access Gateway VPX
Citrix Access Gatew
ay VPX
Access Gateway VPX• Same features as the Model 2010 physical appliance
•Supported on Citrix XenServer and VMWare ESX
Supports up to 500 concurrent users
List price $995 •Same as XenServer version
• Includes 1 yr Subscription Advantage
Free 5-user VPX Express Edition• www.citrix.com/tryaccessgateway
Citrix Confidential - Do Not Distribute
Limited rack space or infrastructure is availableAgility and rapid recovery is important
• Virtual appliances enable fast deployment and provisioning• Downtime is minimized through hardware independence
Cost-cutting is a requirement• Energy consumption reduced through consolidation• Standardizing hardware creates a pricing advantage with server vendors
A low-cost training & testing environment is needed
Choose a virtual appliance when…
Citrix Access Gateway VPX
Citrix Access Gatew
ay VPX
XenDesktop / XenApp-only licenses on all AG products
Secure Access for XenDesktop & XenApp
AppliancesIncluded with
appliance(Access Gateway and
NetScaler models)
Full Network & Clientless VPNSmartAccess
Universal Licenses
2010 (500 users)
MPX 5500 (5000 users)
Citrix Access Gateway VPX
VPX(500 users)
Platinum or Standalone
Secure Gateway Upgrade• Seamless support for Citrix Receiver and Dazzle
• Adaptive Policy Control
• Single point of secure access for all Citrix solutions
• Cost-effective (No user licenses required)
Flexible deployment options• Hardened physical appliance
• Virtual appliance
• Business continuity options available
Best SSL VPN to use within Citrix environments
Use Access Gateway with XenDesktop and XenApp
Citrix Confidential - Do Not Distribute
Access Gateway delivers more value than Secure Gateway and saves 50%Cost Analysis
Secure Gateway Year 1 Year 2 Year 3 Total
Dell PowerEdge R200 with Intel E 3110 and Win 2K8 $1,665 $1,665
Software Cost $0 $0 $0 $0
Annual Hardware Maintenance incl incl incl $0
Monthly patch review (1hr @ $100/mo) $1,200 $1,200 $1,200 $3,600
Annual review of SG releases (4 hrs) $0 $400 $400 $800
Total $2,865 $1,600 $1,600 $6,065
Access Gateway VPX Year 1 Year 2 Year 3 Total
Dell PowerEdge R200 with Intel E 3110 (no Win 2K8) $866 $866
Access Gateway VPX cost $995 $995
Annual Hardware Maintenance incl incl incl $0
Annual Subscription Advantage renewal incl $129 $129 $258
Annual review of VPX releases (4 hrs) $0 $400 $400 $800
Total $1,861 $529 $529 $2,919
Citrix Access Gateway
Citrix Access Gateway™ is a secure desktop and application access solution that provides administrators granular application-level control while empowering users with access from anywhere.
Feature Overview
Citrix Confidential - Do Not Distribute
Feature Platform Feature Requires Universal License
Easy Application & Desktop AccessProvide secure access to all applications and data from any device with a single point of access that simplifies the user experience.
Secure access to XenApp and XenDesktopProvides secure access to XenApp and XenDesktop sessions without requiring a VPN connection. Support for Citrix Receiver, Dazzle, and Merchandising Server is also available and provides a strong reason to upgrade from Secure Gateway.
Secure network accessFull VPN support enables network-level access to any server within the protected network.
Secure browser-only accessProvide secure access to web applications and file shares using only a browser (no additional client components required).
Single point of accessProvides a robust landing page for users to easily access all their applications, files, email, and other IT resources.
End-user localizationUser interfaces are localized to English, Spanish, French, German, and Japanese.
Broad client supportClient support for major platforms including Windows 32 and 64-bit operating systems (including Windows 7) and Mac Os X.
Endpoint AnalysisEnsure that devices are safe to connect to the network and users have a method to easily update their devices to meet established policies.
Integrated Endpoint ScanningContinually scan client devices to determine if client security products (anti-virus, personal firewall, or other mandatory corporate programs) are active.
Enhanced machine identity scansDetermine machine identity by scanning for known corporate images on client devices.
Quarantine Groups / RemediationProvides clients that fail end-point analysis scanning with limited access to remediation sites to bring client devices into compliance with the organization’s security policies.
(MPX 5500 or NetScaler)
Extensible Endpoint AnalysisEndpoint analysis capabilities can be extended using industry-standard development tools.
(Requires Advanced
Access Control server)
Feature Platform Feature Requires Universal License
Scenario-based Policy Control (SmartAccess)Provides control to configure the most secure access to data and applications by dynamically adjusting access based on device configuration, location, and identity.
Adaptive access control Provide access control on resources based on endpoint analysis results. Adaptive access control for virtual hosted applications and desktops Provide adaptive access control to applications and desktops controlled by XenApp and XenDesktop.
Adaptive application and action control Control the behavior of XenDesktop and XenApp sessions by preventing operations that may compromise data to unsecure devices.
Adaptive session policies Dynamically adjust the user’s session based on the endpoint analysis results.
Application and Data Security All data transmitted between the client and gateway is kept private and protected.
Standards-based security Ensure all communications are secure with SSL/TLS encryption. Extensive authentication support Provide strong authentication with 2-factor methods and authenticate users against LDAP and RADIUS servers to leverage existing directories within the organization.
Accelerated Secure Access A unique solution that ensures users has an access experience that is both secure and optimized to avoid common networking performance issues.
Branch Repeater IntegrationWhen used together with the Citrix® Branch Repeater™ and Citrix Acceleration plug-in, Citrix Access Gateway can optimize connections to XenDesktop, XenApp, and other traffic within a VPN connection to ensure the best performance over a WAN and overcome common usability problem that exist as a result of network issues.
Client certificate support Validate certificates prior to granting access to protected resources in order to verify managed client devices.
Basic Split Tunneling control Disables access to all network resources not hosted on the protected network.
Enhanced Split Tunneling controlSplit tunneling can be disabled on clients to shut down direct Internet access but still permit access to resources on the client’s local subnet.
(MPX 5500 or NetScaler)
Browser cache cleanupRemoves objects and data stored on the local browser during the SSL VPN session.
(MPX 5500 or NetScaler)
Feature Platform Feature Requires Universal License
Fault Tolerance Create secure access deployments that guarantee a high-level of availability and reliability.
Basic high availability configuration Link appliances to create an active/passive pair, ensuring sessions remain active if the master fails.
Optional Global Server Load-balancing (GSLB)Route client connections to the best VPN site based on availability, health, proximity, and responsiveness.
(requires NetScaler)
Simplified Administration Maximizes efficiency of the IT organization by simplifying common installation and management tasks.
Centralized administration Configure and manage Access Gateway appliances from a single management console.
Wizard-driven configurationProvides an intuitive series of click-through screens and simple instructions to guide administrators through installation and configuration.
Multiple Virtual VPN ServersA single appliance can emulate multiple SSL VPNs by hosting one or more virtual servers each with a unique IP, FQDN, and certificate.
(MPX 5500 or
NetScaler)
Historical ChartingProvides administrators with a graphical view of system and user activities.
(MPX 5500 or
NetScaler)
Administrative AuditingMonitor all configuration changes made by administrators to ensure accountability and easy roll-back of configuration errors.
(MPX 5500 or NetScaler)
Auto-downloading / Auto-updating client plug-in Automatically downloads the Citrix Secure Access plug-in when the user connects to Citrix Access Gateway and ensures they always receive the latest version of the client software.
Support for automated distribution of Access Gateway Plug-inSimplify client installation by allowing deployment of the Access Gateway Plug-in through systems and client management solutions.
What’s What? Access Gateway & NetScaler
NetScaler Application Delivery Networking Platform
Load
Bal
anci
ng
App
Fire
wal
l
Acc
ess
Gat
eway
SS
L V
PN
GS
LB
Con
tent
Sw
itchi
ng
SS
L A
ccel
erat
ion
App
Cac
he
Edg
eSig
ht
App
Com
pres
s
NetScaler Functional Modules
Access Gateway Functional Modules
NetScaler Application Delivery Networking Platform
Load
Bal
anci
ng
App
Fire
wal
l
Acc
ess
Gat
eway
SS
L V
PN
GS
LB
Con
tent
Sw
itchi
ng
SS
L A
ccel
erat
ion
App
Cac
he
Edg
eSig
ht
App
Com
pres
s
Not Enabled