Building an Access Infrastructure Building an Access Infrastructure with Citrix Solutionswith Citrix SolutionsBuilding an Access Infrastructure Building an Access Infrastructure with Citrix Solutionswith Citrix Solutions
Jan ChristoffelsJan Christoffels
Systems Engineer BeneluxSystems Engineer Benelux
Jan ChristoffelsJan Christoffels
Systems Engineer BeneluxSystems Engineer Benelux
AgendaAgendaAgendaAgenda
• The Challenge…The Challenge…
• The Access InfrastructureThe Access Infrastructure
• Citrix MetaFrame XP Presentation ServerCitrix MetaFrame XP Presentation Server
• MetaFrame XP Value AddMetaFrame XP Value Add
• Citrix MetaFrame Secure Access ManagerCitrix MetaFrame Secure Access Manager
• The End ResultThe End Result
• The Challenge…The Challenge…
• The Access InfrastructureThe Access Infrastructure
• Citrix MetaFrame XP Presentation ServerCitrix MetaFrame XP Presentation Server
• MetaFrame XP Value AddMetaFrame XP Value Add
• Citrix MetaFrame Secure Access ManagerCitrix MetaFrame Secure Access Manager
• The End ResultThe End Result
The Challenge…The Challenge…The Challenge…The Challenge…
Increasing Complexity of EnvironmentsIncreasing Complexity of EnvironmentsIncreasing Complexity of EnvironmentsIncreasing Complexity of Environments
And how about costs?And how about costs?And how about costs?And how about costs?
Source — The Gartner Group
Administration10%
Capital19%
Support11%
Network 25%
End User35%
The Access InfrastructureThe Access InfrastructureThe Access InfrastructureThe Access Infrastructure
any location
any device
EnterpriseOn-DemandThe
any number of people
any connection
The Building Blocks of Access InfrastructureThe Building Blocks of Access InfrastructureThe Building Blocks of Access InfrastructureThe Building Blocks of Access Infrastructure
Presentation & Conferencing
Services
Aggregation & Personalization
Services
Security & Identity
Management Services
Device & Network Services
Support any hardware
device over any network
Control access
securely and efficiently
Organize and find what's important based on
profile and preferences
Connect and interactively
work with applications, information, and people
Common Management Services
Manage, monitor & measure the consistent delivery of enterprise resource services
Common Management Services
People
Device & Network Services
Security & Identity
Management Services
Aggregation & Personalization
Services
Presentation & Conferencing
Services
Core & Common Infrastructure for Service Level Management
Common Management Services
MetaFrame Presentation ServersApplications
and Information
MetaFrame Secure Access Manager
MetaFrame Conferencing
Manager
MetaFrame Password Manager
Product Line-upProduct Line-upProduct Line-upProduct Line-up
Citrix MetaFrame XP Presentation Citrix MetaFrame XP Presentation ServerServerCitrix MetaFrame XP Presentation Citrix MetaFrame XP Presentation ServerServer
The ConceptThe ConceptThe ConceptThe Concept
Network
Application Logic & Data Lives in the Network
Application Information Accessed by a Thin
Universal Client
Server Based Computing is an architecture where the application executes 100% on the server, and the
application’s user interface is accessed via thin-client hardware or software.
Personal ComputingPersonal ComputingPersonal ComputingPersonal Computing
Server-sideClient-side
Input / Output Processing Information
FileServerFileServer
FileServerFileServer
DataBaseDataBase
Mail/WebMail/Web
Personal ComputerPersonal Computer
Server Based ComputingServer Based ComputingServer Based ComputingServer Based Computing
Server-sideClient-side
Input / Output Processing Information
FileServerFileServer
FileServerFileServer
DataBaseDataBase
Mail/WebMail/Web
End user’sDevice
End user’sDevice
CitrixCitrix
CitrixCitrix
CitrixCitrix
CitrixCitrix
CitrixCitrix
Applications Applications Accessed From Accessed From
Desktop PC or Thin Desktop PC or Thin ClientClient
Applications Applications Install & Run Install & Run
on Serveron Server
Only screens, Only screens, mouse clicks & mouse clicks &
keystrokes keystrokes travel the travel the networknetwork
Shared Ethernet 100 MbpsWireless Ethernet 11 Mbps
ISDN 64 KbpsModem 28.8 bps
ICA Stream
Independent Computing Architecture (ICA)Independent Computing Architecture (ICA)Independent Computing Architecture (ICA)Independent Computing Architecture (ICA)
Server-based ComputingServer-based ComputingServer-based ComputingServer-based Computing
OverviewOverviewOverviewOverview
ServerFarm
Windows Server Terminal Server
Terminal Server MetaFrame XP Server
8
MetaFrame XP server Farm ComponentsMetaFrame XP server Farm ComponentsMetaFrame XP server Farm ComponentsMetaFrame XP server Farm ComponentsCitrix Management Console
Data Store Database
Local Host Cache
2512
Local Host Cache
Zone DataCollector
Dynamic Store
Zone A Zone B
2513
6
IMAZone DataCollector
MetaFrame XP Servers
2512 2512
7
5
2
9
4
ODBC
1
Server Farm
3
Dynamic Store
6
54
3 2
1
Application Server ProcessApplication Server ProcessApplication Server ProcessApplication Server Process
Client
MetaFrame XPServer
MetaFrame XP Value AddMetaFrame XP Value AddMetaFrame XP Value AddMetaFrame XP Value Add
Device & Network Services
Security & Identity
Management Services
Aggregation & Personalization
Services
Presentation & Conferencing
Services
Core & Common Infrastructure for Service Level Management
PeopleApplications
and Information
Common Management Services
MetaFrame Presentation Servers
The Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access Suite
ICA Enabled Devices
ICA – SSL Gateway
Program Neighborhood
& Web Interface
Application Publishing
Delivers….
……An Integrated Management Environment…An Integrated Management Environment………An Integrated Management Environment…An Integrated Management Environment…
MetaFrame XP addsMetaFrame XP adds
• Management ConsoleManagement Console
• Load Manager (XPa/e)Load Manager (XPa/e)
• Resource Manager (XPe)Resource Manager (XPe)
• Installation Manager (XPe) Installation Manager (XPe)
• Network Manager (XPe)Network Manager (XPe)
• Printer ManagementPrinter Management
• Architectural FlexibilityArchitectural Flexibility
• Support for Support for Heterogeneous Heterogeneous EnvironmentsEnvironments
MetaFrame XP addsMetaFrame XP adds
• Management ConsoleManagement Console
• Load Manager (XPa/e)Load Manager (XPa/e)
• Resource Manager (XPe)Resource Manager (XPe)
• Installation Manager (XPe) Installation Manager (XPe)
• Network Manager (XPe)Network Manager (XPe)
• Printer ManagementPrinter Management
• Architectural FlexibilityArchitectural Flexibility
• Support for Support for Heterogeneous Heterogeneous EnvironmentsEnvironments
Single point Single point common common
services and services and managementmanagement
……Across Windows Generations…Across Windows Generations………Across Windows Generations…Across Windows Generations…
Web
Inte
rface
Secu
re G
ate
way
……Delivering Applications To The Web…Delivering Applications To The Web………Delivering Applications To The Web…Delivering Applications To The Web…
Web
Inte
rface
Secu
re G
ate
way
• A web interface for A web interface for application publishingapplication publishing
• Secure infrastructure Secure infrastructure for accessfor access
• Multi-farm support for Multi-farm support for flexibilityflexibility
• HeterogeneousHeterogeneous
……Making Access Secure…Making Access Secure………Making Access Secure…Making Access Secure…
Web
Inte
rface
Secu
re G
ate
way
• Based on internet Based on internet standard SSLstandard SSL
• Free for MetaFrame Free for MetaFrame customerscustomers
• 2 Factor authentication 2 Factor authentication supported (e.g. RSA supported (e.g. RSA SecureID)SecureID)
• Zero-footprint “ICA Zero-footprint “ICA VPN”VPN”
……Delivering a Rich User Experience…Delivering a Rich User Experience………Delivering a Rich User Experience…Delivering a Rich User Experience…
Web
Inte
rface
Secu
re G
ate
way
• SpeedScreen Browser SpeedScreen Browser AccelerationAcceleration
• Advanced ShadowingAdvanced Shadowing• Multi-MonitorMulti-Monitor• Panning & scaling Panning & scaling
(handhelds)(handhelds)• Content RedirectionContent Redirection• Text Entry prediction and Text Entry prediction and
Instant Mouse Click Instant Mouse Click feedbackfeedback
• Pass-thru authenticationPass-thru authentication• Business RecoveryBusiness Recovery• Any, Any, AnyAny, Any, Any
Desktop AccessDesktop AccessDesktop AccessDesktop Access
Access applications from:Access applications from:
• Windows Start MenuWindows Start Menu
• DesktopDesktop
• Desktop FolderDesktop Folder
• System Tray Icon (PN Agent)System Tray Icon (PN Agent)
Program Neighborhood (Agent)
• Any client (windows & Any client (windows & non-windows) non-windows)
• Any connectionAny connection
• Any protocolAny protocol
Web interfaceWeb interfaceWeb interfaceWeb interface
• ““Program Neighborhood” for Program Neighborhood” for a Browsera Browser
• Access applications from Access applications from multiple farms in multiple multiple farms in multiple domains using a standard domains using a standard browserbrowser
• Can be integrated with Can be integrated with existing intranet or portal existing intranet or portal solutionsolution
Web Interface – The General Web Interface – The General ConceptConcept..
Web Interface – The General Web Interface – The General ConceptConcept..
Web ServerWeb Server MetaFrame FarmMetaFrame Farm
ICA ClientICA Client
1
1. Web Page Request.
2
2. Authentication Info.
3
3. Web Page displayedcontaining applicationicons that the user isallowed to access.
4. Standard ICA session.
4
..Seamlessly...Seamlessly...Seamlessly...Seamlessly.
Providing a Complete Application Solution!Providing a Complete Application Solution!Providing a Complete Application Solution!Providing a Complete Application Solution!
Network Services
DataRepositories
EnterpriseApplications
Secure AccessGateway
Any client device over any connectionClient/Server
ApplicationHosting
Web AccessInterfaces
Citrix Products Supported on Citrix Products Supported on Windows Server 2003Windows Server 2003
• MetaFrame XP Server for Windows FR3*MetaFrame XP Server for Windows FR3*• Secure Gateway for MetaFrameSecure Gateway for MetaFrame• Web Interface for MetaFrameWeb Interface for MetaFrame• Web Interface Extension for MetaFrame XPWeb Interface Extension for MetaFrame XP• Network Manager for MetaFrame XPNetwork Manager for MetaFrame XP• MetaFrame XP Provider for Microsoft Windows MetaFrame XP Provider for Microsoft Windows
Management InstrumentationManagement Instrumentation• Management Pack for Microsoft Operations Management Pack for Microsoft Operations
ManagerManager
* Availability Date April 24th 2003
Citrix MetaFrameCitrix MetaFrameSecure Access ManagerSecure Access ManagerCitrix MetaFrameCitrix MetaFrameSecure Access ManagerSecure Access Manager
Device & Network Services
Security & Identity
Management Services
Aggregation & Personalization
Services
Presentation & Conferencing
Services
Core & Common Infrastructure for Service Level Management
PeopleApplications
and Information
Common Management Services
MetaFrame Presentation Servers
MetaFrame Secure Access Manager
Security & Identity
Management Services
Aggregation & Personalization
Services
Presentation & Conferencing
Services
HTTP/S & 2-Factor
Authentication
Role-Based Access
Unified Browser Interface
The Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access SuiteThe Citrix MetaFrame Access Suite
Provide secure, personalized access over the Web to applications & information
MetaFrame Secure Access ManagerMetaFrame Secure Access ManagerMetaFrame Secure Access ManagerMetaFrame Secure Access Manager
• Seamless integration with MetaFrame XP Seamless integration with MetaFrame XP Presentation ServerPresentation Server
• Secure connectivity over the InternetSecure connectivity over the Internet
• Personalized user experiencePersonalized user experience
• Easily find enterprise information when its Easily find enterprise information when its neededneeded
• Little to no programming necessaryLittle to no programming necessary
• Seamless integration with MetaFrame XP Seamless integration with MetaFrame XP Presentation ServerPresentation Server
• Secure connectivity over the InternetSecure connectivity over the Internet
• Personalized user experiencePersonalized user experience
• Easily find enterprise information when its Easily find enterprise information when its neededneeded
• Little to no programming necessaryLittle to no programming necessary
Seamless integration with MetaFrame XP Seamless integration with MetaFrame XP Presentation ServerPresentation Server
Seamless integration with MetaFrame XP Seamless integration with MetaFrame XP Presentation ServerPresentation Server
Easily integrates with existing MetaFrame XP Presentation Server or MetaFrame Presentation
Server for UNIX environments.
Easily integrates with existing MetaFrame XP Presentation Server or MetaFrame Presentation
Server for UNIX environments.
Secure connectivity over the InternetSecure connectivity over the InternetSecure connectivity over the InternetSecure connectivity over the Internet
Secures & manages access to information and content
Citrix Secure Gateway Integration for Encryption & Authentication
Secures & manages access to information and content
Citrix Secure Gateway Integration for Encryption & Authentication
Client Workstations
HTTP
ICA/SSL
Internet DMZ Internal Network
3rd PartyAuthentication
Secure GatewayCitrix MetaFrame XP
or MetaFrame for UnixCitrix MetaframeSecure Access
ManagerF
irew
all
Fir
ewa
ll
Fir
ewa
llF
irew
all
Databases and documents
Web content
Personalized user experiencePersonalized user experiencePersonalized user experiencePersonalized user experience
Role-based secure access to applications, company information, corporate databases, intranets and external web sites
Relevant to the role and easy to navigate
Easily find enterprise information when its Easily find enterprise information when its neededneeded
Easily find enterprise information when its Easily find enterprise information when its neededneeded
If the information is not yet there, find it easily with the Search facility
If the information is not yet there, find it easily with the Search facility
Little to no programming necessaryLittle to no programming necessaryLittle to no programming necessaryLittle to no programming necessary
Standards based custom content capability with WebForms and Web Parts
Standards based custom content capability with WebForms and Web Parts
The End ResultThe End ResultThe End ResultThe End Result
Thank You!Thank You!Thank You!Thank You!
Are there any more questions?Are there any more questions?
http://www.citrix.comhttp://www.citrix.comhttp://www.acecostanalyzer.comhttp://www.acecostanalyzer.com
Are there any more questions?Are there any more questions?
http://www.citrix.comhttp://www.citrix.comhttp://www.acecostanalyzer.comhttp://www.acecostanalyzer.com