Thank you to those of you who joined us on Tuesday, November 15th for “From Wow to How 2: Virtual Desktops, Networking and the Cloud” webinar.  I was excited to hear Citrix and Microsoft experts discussing the role of public, personal and private clouds, the power of virtual desktops and ways to provide a single point of authentication for users to securely access ALL applications, including those on hosed Infrastructure-as-a-Service or private cloud platforms. For those of you who missed it you can access the replay here: http://virtualizationreview.com/webcasts/2011/10/citrix-wow-to-how-ii.aspx?partnerref=ARCHIVE

We received quite a few questions from the attendees.  We’ve included them here along with the answers from our panel:

Q: What is the cost – I know its hard to know, but in general what is it going to cost me to use your system?

A: Here is a tool that will take your requirements and turn that into the estimated costs: http://flexcast.citrix.com/analyzeandcompare.html

Q: Are software vendors keeping up with this technology when it comes to software licensing?

A: All ISVs are treating virtualization differently, but in general, we see them understanding user requirements around virtualization and creating licensing to work in these environments.

Q: How is the same document/spreadsheet managed between devices? Do I lose data when moving from one to another? Do I need to save it first, or, what if I am working on one and just move to the other? Can I be on both devices at one time?

A: You can seamlessly move from one device to the next without losing any data.  No, you do not need to save first as your entire session is ported to the new device. No, you can only be logged onto your desktop from one desktop at a time.

Q: XenDesktop licensing includes XenApp?

A: Yes, XenDesktop 5.5 includes the new Citrix XenApp™ 6.5 as an integrated feature.

Q: For companies that have a Citrix environment and use VMware on the server side, do you see a hybrid of implementations leveraging both of these solutions in order to provide a VDI solution?

A: Yes, with Citrix solutions there is no vendor lock-in.  You are free to mix and match.

Q: Especially when using tables or iPads, could you expound a little more on how users can edit content when off-line? Assuming that content remains on the device when off-lie, how is content protected while it is on the device? Does it sync back up to the server when online?

A: Yes, content is sync’d to the servers once you log in again.

Q: Is there any app for PeopleSoft on Citrix Receiver?

A: Yes, Citrix XenDesktop and Citrix XenApp provide Oracle users a variety of optimized implementation and delivery options for Oracle’s Siebel, PeopleSoft, JD Edwards EnterpriseOne and E-Business Suite applications.

Q: Will there be support for Android and Blackberry devices?

A: Yes, Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Citrix supports apple devices, but what about Android phones and tablets, and Linux desktops?

A: Yes, Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Will this work on Android based Tablets?

A: Yes, Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Are non-Windows apps supported?

A: Yes, Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Is Citrix Receiver available on android and black berry?

A: Yes, Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: I don’t know if you already answered this, but will this webcast be available to download or view later? (I came late and am hoping to also share with co-workers who were unable to attend)

A: Yes, a replay is available from the same URL you joined from or you may see it here:  http://virtualizationreview.com/webcasts/2011/10/citrix-wow-to-how-ii.aspx?partnerref=blog

Q: Can Outlook be one of the applications used in XenDesktop?

A: Yes

Q: What are the hardware requirements for running the Citrix server?

A: XenServer technical specs can be found here: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=1681139

Q: We use high-end graphics apps. What product and methods are best for this type environment?

A: XenDesktop with Citrix HDX technology gives users an experience that rivals a local PC, even with Flash multimedia, video collaboration, USB peripherals, and 3D graphics.

Q: What kind of financial savings can we expect with desktop virtualization? Do you have any metrics?

A: XenDesktop frees you from the costs and constraints of traditional computing architectures. Centralized delivery, management and control of virtual desktops bring new levels of efficiency to your IT organization while streamlining security and compliance. Self-service application provisioning, simplified helpdesk support and support for mobile and virtual workstyles give you a foundation to leverage a new generation of IT models and strategies.  We recommend you watch this TCO video: http://www.citrix.com/English/ps2/products/feature.asp?contentID=2300341

Q: How does the CITRIX family of Xen products integrate with an Identity Manager that already provides single sign on?

A: With XenDesktop, you can provide your workforce with any type of application they need, including Windows, web and SaaS apps. Citrix Receiver seamlessly integrates them all into a single interface, so users only need to log on once to have secure access to all their applications.

Q: What is an average ROI to replace current desktops with VDI? Are the upfront cost expensive ?

A: We recommend you watch this video which addresses TCO:  http://www.citrix.com/English/ps2/products/feature.asp?contentID=2300341

Q: What XenDesktop solutions would you recommend for SMB without a huge capex for licensing and server hardware?

A: We recommend Citrix VDI-in-a-Box for small and midsize businesses.  Visit http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437&ntref=prod_top to learn more.

Q: Would it really be affordable for SMEs or small teams like 2-5 users

A: We recommend Citrix VDI-in-a-Box for small and midsize businesses.  Visit http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437&ntref=prod_top to learn more.

Q: Is there a personal edition or small business edition? I run VMs at home and would like something like this other than using a copy of a workstation virtual product on a beefy box.

A: We recommend Citrix VDI-in-a-Box for small and midsize businesses.  Visit http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437&ntref=prod_top to learn more.

Q: In our economic models, by the time we factor in the server side hardware and licensing and the variables as to how many sessions one server can support, with fewer than 1000 seats, it does not save us any money, and actually costs us more in the initial years. Has anything changed in the last year that would make this model affordable for an agency our size?

A: We recommend Citrix VDI-in-a-Box for small and midsize businesses.  Visit http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437&ntref=prod_top to learn more.

Q: How are you targeting and partnering with healthcare customers (hospital and clinics) to tackle our unique challenges and needs, and be a step ahead of VMware?

A: We have a number of healthcare case studies available on our website including Seattle Children’s Hospital, Emory Healthcare that can be found here: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300391

Q: Could you talk a little more about the options available for controlling or improving screen or display lag when running video “hungry” applications?. i.e. autocad?

A: There are a couple of choices – either Citrix HDX or Microsoft’s RemoteFX. Both solve similar problems but in different ways – and you need to choose the right one for your environment. Check out microsoft.com/remoteFX or Citrix.com/HDX for more details.

Q: So, CITRIX has it’s own LapTops with MS, Microsoft applications?

A: No, Citrix has Citrix Receiver, an easy-to-install client software that lets you access enterprise data, applications and desktops from any computing device including smartphones, tablets and PCs.

Q: Would it be better to use Hyper-v over XenServer enterprise when deploying XenDesktop?

A: Microsoft and Citrix jointly agree Hyper-V is the best hypervisor for Windows 7 virtualized desktops. For other workloads for virtualized desktops, XenServer is often used

Q: Is there any free version of the XenApp, XenDesktop, Citrix Receiver for home users?

A: Free downloads are available here:  http://www.citrix.com/English/ss/downloads/index.asp

Q: A short answer (if possible) difference between AppV delivery and XenApp delivery.

A: Here is some info that can help http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=1863016

Q: What difference does it make which client computer is used, corp or personal if all applications are managed at the service center?

A: Correct.  With a BYO program in place your employees can use their own devices to access enterprise apps.

Q: My main concern is about bandwidth… How will it handle a large number of users, specially the delivery of video over data?

A: Complete network and performance optimizations make desktop virtualization both scalable and practical, even over low bandwidth and high latency WAN connections.  You can read more here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315315

Q: Is Branch Repeater a hardware or software implementation? How does it integrate/compare with secure access gateway?

A: Citrix Repeater for NetScaler SDX is a data center WAN optimization solution that provides remote end-users and branch offices with an “on the LAN” experience from their WAN connections, dramatically reducing bandwidth costs, and simplifying branch infrastructure.  You can read more about it here: http://www.citrix.com/English/ps2/products/product.asp?contentID=1350184 or download a free trial here:  https://try.citrix.com/store?Action=DisplayPage&Locale=en_US&SiteID=citrixtr&id=QuickBuyCartPage

Q: Where can I find a list of supported laptops?

A: Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Does Citrix have any plans to work on desktop virtualization for the mac?

A: Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf.  If you are asking about Mac VM’s, those were showcased at Synergy Sanfrancisco 2011 as a concept, but there are no immediate plans to offer Mac virtualization.

Q: So is XenApp (Receiver) supported on all mobile devices such as different Android/iPad platforms? How about employee personal data on those mobile devices? Also, are all tunnels from mobile device encrypted to the datacenter?

A: Citrix Receiver clients support over one billion devices including iOS, Android, WebOS, Chrome OS, Mac OS, Linux and Windows.  Have a look at this white paper for more information:  http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FCitrix_Receiver_-_Product_O%5B1%5D.pdf

Q: Is XenDesktop 5 still free for 10 users (like 4 was) < NOT A TRIAL?

A: Citrix offers two convenient trial options.  1) a trial for up to 10 users OR 2) a pilot with our Professional Services team.  Visit www.citrix.com/XenDesktop/tryit to learn more

Q: What is the best way to handle high end 3D design apps in the virtual space?

A: Citrix HDX technology gives users an experience that rivals a local PC, even with Flash multimedia, video collaboration, USB peripherals, and 3D graphics.  You can read more here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315315

Q: How about security?

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: Are there security issues with opening the office on your personal laptop? Espeically on a device/laptop where you can download personal and office onto the same laptop?

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: Enterprise Data security in the virtualized network environment continues to be a number 1 concern. How does the MS & Citrix desktop virtualization solution address this?

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: Can you explain how Citrix performs single sign-on functionality such as the one shown in the video on signing in? LinkedIn? Will this also apply to online banking? It sounds un-secure if some portal doesn’t support SSL, or RSA token.

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: Is data encrypted going from the data center to the mobile device and can the data be saved at the mobile device?

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: With Citrix/Microsoft Virtualization, is there a concern for security posture assessment of an end device?

A: An integrated hardened SSL VPN with advanced, policy-based access control lets you give users encrypted access to desktops, applications, and valuable intellectual property from anywhere while eliminating the risk of data theft or loss.

Q: Could you post a link to the video on youtube? Would help to sell to others.

A: A replay is available from the same URL you joined from or you may see it here:  http://virtualizationreview.com/webcasts/2011/10/citrix-wow-to-how-ii.aspx?partnerref=blog

Q: How will Citrix improve Middle School Education?

A: A number of Education case studies can be found here:  http://www.citrix.com/English/aboutcitrix/casestudies/list.asp?c=p&cs=1535497&n=0&ns=0

Q: What benefits does Citrix XenDesktop have over VMware ESXi?

A: A detailed summary of the differences can be found here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300385

Q: How does this compare to VMWare?

A: A detailed summary of the differences can be found here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300385

Q: What’s the biggest killer option that really brings Citrix and Mcrosoft on top of the solutions, specifically VMware?

A: A detailed summary of the differences can be found here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300385

Q: How does provisioning a new desktop compare to that of VMware view?

A: A detailed summary of the differences can be found here:  http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300385

Q: How does the data center know the size of the devices. These pages must fit many sizes so is it XenApp that keeps a table with all of the different devices, characteristics and networks they use?

A: The secret here is Citrix Reciever on the endpoint device.  It is optimized for every type of device to enable  specific features (for example touch screens).  More info here: http://www.citrix.com/English/ps2/products/feature.asp?contentID=2317009

Q: Can single sign on be accomplished by external clients who do not reside on the Citrix domain?

A: Yes, for Web and SaaS apps using CloudGateway. For published apps, SSO would work for clients that access their virtual desktop on the domain.

Q: Is there a mid-term strategy for moving away from virtual desktop and virtual apps that are meant for a specific OS environment, and going towards a “universal” environment where apps can run natively locally, regardless of the local environment?

A: Citrix will continue to deliver enterprise applications to users on any device. However, as for apps running locally, there are a few startup playing around with this idea. For example, BlueStacks: http://bluestacks.com/home.php

Q: Turning old, obsolete desktops into zero clients?

A: Yes, you can turn old PCs into thin clients using things like Windows ThinPC.

Q: One area I’m investigating VDI for my company is with delivering SAP to remote 3rd party warehouses. So rather than having to setup a site-to-site VPN with firewall, a full PC with the SAP GUI, I’d like to be able to deliver OUR SAP system to a Internet connected PC already at the warehouse. My question is this, in this scenario, there is often a need for a printer to be available to accept SAP print jobs. How would that work if we were delivering SAP via some kind of VDI or app streaming and didn’t have a VPN setup?

A: XenDesktop can seamlessly connect to and print from local printers.  In this case, if your warehouse PC has access to a printer, then you can print to it from  XenDesktop.

Q: How does the ICA protocol compare with VMware’s PCoIP for VDI?

A: ICA is superior to PCoIP for several reasons.  Chief among them is performance over WAN or tough network conditions.  With features like Flash re-direction, and Multi-stream ICA for quality of service, the ICA protocol provides a noticably better user experience.  More info is available here: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300385

Q: Is there a combined strategy for providing both a user portal and an orchestration mechanism to make this a true “Cloud” service? If so, is it aimed for the Public clouds or Private clouds?

A: The answer is “yes” and “yes”.  We recently showcased our private and public cloud strategy at Synergy Barcelona.  The CloudGateway product was introduced as the industry’s first unified service broker that aggregates, controls and delivers Windows, web, SaaS and mobile apps to any user on any device.  Together with Citrix Receiver, this provides the user portal and orchestration mechanism you are asking about.  For enterprise access to public clouds, the recently announced CloudBridge extends the datacenter by providing an easy way to securely connect to extra capacity in the cloud.  More info can be found here:  http://www.citrix.com/English/NE/news/news.asp?newsID=2317397

Q: We don’t currently use Citrix, how are you dealing with other virtualization companies, specifically Parallels.

A: Citrix uses an open architecture so that it will integrate with customers existing infrastructure: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315318. As for Parallels, our app delivery infrastructure will work with Parallals to deliver apps to these virtual desktops.

Q: Is there a clearly defined strategy for when it makes sense to utilize Citrix XA alone, and when it makes sense to combine it with MS AppV?

A: Yes, XenApp works seamlessly with AppV and we often recommend AppV in certain circumstances.  A good blog post on the topic is here: /blogs/2010/03/12/go-ahead-use-app-v-no-really-please/

Q: Will I need Remote Desktop Services call licenses in all of these delivery scenarios?

A: You will require RDS CALs for the apps that you are hosting.

Q: In the case of web services (such as LinkedIn mentioned in the video), how are the sign-in credential secured on the XenServer?

A: There are couple of options for this, but the best is the recently announced CloudGateway which provides the ability to aggregate and control SaaS apps and services such as LinkedIn.  More info is here: http://citrix.com/English/NE/news/news.asp?newsID=2317397

Q: What about printers? You are obviously away from the Office. But what if I want to print something away from the office which is part of the Citrix Virtual Desktop?

A: XenDesktop can seamlessly connect to and print from local printers.  So if a user is accessing XenDesktop from  home, XenDesktop easily identifies and prints to printers connected to the home computer.

Q: What is the network speed requirement in order to run the XenApp server smoothly in a corporation?

A: The following whitepaper provides a detailed answer: http://support.citrix.com/article/CTX124457

Q: Where are logs kept (for things like forensics)?

A: The SmartAuditor feature included in XenDesktop and XenApp Platinum is often used by organization needing to keep track of access and application usage for compliance reasons.  More info is here: http://www.citrix.com/English/ps2/products/feature.asp?contentID=2300372#top

Q: Is there a hypervisor for netbooks?

A: The XenClient hypervisor has a long list of supported laptops.  The full list is here: http://www.citrix.com/ready/list/products?page=1&partnerPage=1&currentTab=product&rss=false&currentComparison=&h_Product_Citrix+Products=XenClient&h_0Categories_Categories=Notebooks+and+Desktops&pageSize=50&sortBy=Alpha&showGridExists=&gridOn=1&pageSizeSelect=50&partnerSortBy=Alpha&pageSizeSelect=50

Q: Can an attacker who knows Google and some simple facts about cloud services authentication, easily find the access codes, passwords, and secret keys needed to unlock data stored in public cloud services environments if an attacker?

A: No

Q: What happens if you attempt to use the same app/data with two devices simultaneously?

A: Smooth roaming means that the same user pulls the app or VM with them the next time they log in.  So they cannot be logged in twice.

Q: What is the key component that provides high performance of hundreds of VMs runnning on a Hyper-V or XenServer ?i.e. memory /CPU/disk/VM image ?

A: Memory and disk I/O.

Q: What about streaming to a tablet? for offline use?

A: Currently there is no option to stream to tablet for offline use

Q: I would like to see these solutions diagramed.

A: http://www.citrix.com/English/ps2/products/feature.asp?contentID=2300336#top

Q: Is there any comprehensive guide to deploy and configure citrix virtual solution?

A: Yes, check out SuccessAccelerator:  http://www.citrix.com/successaccelerator//

Q: How does Citrix work when there is no internet connection available?

A: There are some options here.  For offline access to apps, you can use Application Streaming. http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=1683975.   For offline access to Desktops, XenClient is the best option: http://www.citrix.com/English/ps2/products/product.asp?contentID=2300325&ntref=prod_top

Q: How do you deal with user data? folder redirect? roaming?

A: Windows Folder Redirection is one of the ways to address user data: http://www.citrix.com/English/ps2/products/feature.asp?contentID=2316932

Q: Is the receiver’s application pool integrated with active directory?

A: Yes.

Q: How does Citrix XenDesktop/Citrix Receiver provide solutions for legacy applications for an enterprise who are trying to migrate to Windows 7/8?

A: Yes, XenApp, a key component of XenDesktop, will run legacy applications (such as IE6) and publish them to Windows 7/8 so that your applications will work in your new environment.

Q: What are the depedencies between the products that were mentioned? (ie if we wanted Xen App functionality only, what are the other ‘must haves’?)

A: Here are the system requirements for XenApp: http://support.citrix.com/proddocs/topic/xenapp6-w2k8/ps-system-requirements-w2k8-xa6.html. You will also need RDS CALs for the applications you are using.

Q: Application streaming from the AppStore can only be packaged with Citrix XenApp? Or can we use Microsoft AppV, or VMWare thinstall, or Symantec SWV?

A: XenApp or App-V packages can be published via the App Store.

Q: What would we do to our application software to make it compatible to this system? Can my software put on datacenter as is, or should I change it somehow?

A: Every application will be different. Using AppDNA (recently acquired by Citrix), you will be able to determine which application will work and which will need to be changed when moving to XenApp: http://www.app-dna.com/application-migration-solutions/virtualize-on-citrix-xenapp/

Q: Is Citrix Receiver cost competitve to solutions from VMware for VDI, even for small offices (35 or fewer PCs)?

A: Remember Citrix Receiver is the client software and is free. There is now a great option for small offices, Citrix VDI-in-a Box that is simpler and more cost effective than Vmware.  More info here: http://www.citrix.com/English/ps2/products/product.asp?contentID=2316437&ntref=prod_top

Q: I need a portal or gateway to authenticate users and give them access to citrix apps and other apps. What solution do you suggest?

A: There are a couple of options for this, but the best is the recently announced CloudGateway which provides the ability to aggregate and control SaaS apps and services such as LinkedIn.  More info is here: http://citrix.com/English/NE/news/news.asp?newsID=2317397

Q: All those different citrix flavors are interesting but It’s hard for me to exactly understand which flavor does what exactly. Is there a quick graph that quickly differentiate the products and what thy can do exactly?

A: Here is a great site to explain all the different delivery models: http://flexcast.citrix.com/

Q: Can you grant or deny access to a Citrix App based on where a user is coming from? For example, home vs office.

A: Access Gateway provides dynamic access control: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300442

Q: Is there a solution for sharing one GPU between several concurrent users.

A: Yes. XenDesktop integrates with Microsoft RemoteFX to do just this.

Q: What’s the best solution for a user base that requires persistant customizations to their personal VDI and minimal management by the administrators?

A: With Citrix’s recent acquisition of RingCube, XenDesktops VDI desktops can do just this. http://www.citrix.com/English/ps2/products/feature.asp?contentID=2316932

Q: Who are creating the user passwords for Single-Sign-On in the public cloud, the user or admin?

A: For SAML-based SaaS apps the only passwords created by users or admins are the corporate network logins (e.g. Active Directory, maybe dual factor – whatever authentication mechanisms are set up for the organization).

Here is what happens when CloudGateway is deployed to provide SSO to 3rd party SaaS apps:

Administrators contact the SaaS provider and let them know that they want to use CloudGateway to authenticate and authorize their users. The SaaS provider does the following:

1) Establish a specific URL for the customer such as companyx.salesforce.com – this is the only URL that can be used by the customers end-users to log into the 3rd party app, and restricts users such that they always need to get to that app through their corporate login

2) Establish a trusted connection between CloudGateway and the 3rd party SaaS app – the 3rd party app knows that for all users from company x it defers to CloudGateway for authentication and authorization.

3) When users see the 3rd party app on their screen and try to launch that app, CloudGateway leverages the named internal corporate directory resources to determine whether or not that user authenticates properly AND whether or not that user is authorized to use the app. CloudGateway generates SAML tokens and communicates directly with the SaaS app to either connect the user (if they authenticate properly and are authorized to use it) or reject the connection. There is no additional ‘password’ for the 3rd party app in this case.

For non-SAML apps (e.g. ‘form-fill’) the administrator generates a ‘random’ password and provides that password to the end-user, who only needs to log in once to activate the single sign-on for that app. After that CloudGateway knows how to fill in the login ‘form’ for that user and all they need to do is launch the app.

Q: Can the I use 2-factor authentication (such as tokens) prior to the user getting access to my systems running Citrix, regardless of which product I use – XenApp, Xen Desktop or something else?

A: Yes.

Q: What other major software manufacturers are certified to run in the Xen world?

A: Here are the list of partners that are supported on Citrix: http://www.citrix.com/ready

Q: Why not just keep using XenApp with the Receiver than all these other methods.

A: XenApp with Receiver is a great solution for providing users access to the applications they need. However, many users require more than just application access. Here is a link to help you understand what methods are best for your different users: http://flexcast.citrix.com/

Q: How scalable is this, and what are the risks of a user infecting the backend data with malware or virues?

A: Citrix has many customers with many more than 10,000 users on XenDesktop. As for security, you will need to secure your data from malware in the same way you secure your data in a physical environment. That said, Citrix is working with partners, such as McAfee, to create security solutions optimized for XenDesktop.

Q: As far as anti-virus/spyware, does the image of a VM need to have one? Or is the software only on the “server” and not on the actual clients itself?

A: As for security, you will need to secure your data from malware in the same way you secure your data in a physical environment. That said, Citrix is working with partners, such as McAfee, to create security solutions optimized for XenDesktop.

Q: Can I now “run” a FLASH app on an iPad using this?

A: You can use your iPad to access XenDesktop or XenApp applications running in the data center.  If the application you are accessing is a web browser such as Internet Explorer, then yes you can “run” Flash on the iPad.

Q: We currently use the Citrix web plug-in to access the data center. How does Receiver change that experience?

A: Receiver provides the best performance and enables new features like Instant App Access and Multi Stream ICA that require Receiver.

Q: Is two factor authentication available for Receiver on a iOS environment such as iPad?

A: Yes, two factor authentication (such as RSA) is available.

Q: Is it possible to prevent content to be copied from an enterprise virtualized environment to a local installed application on the user’s device?

A: Yes, this is based on policy.

Q: Can I download Citrix XenDesktop on a home PC from the Chrome store if i am running the Chrome browser?

A: XenDesktop runs in the data center.  Users download Citrix Receiver for the end point device to access XenDesktop in the Datacenter.  Citrix Receiver can be downloaded from any browser for a PC.  There is also a specific HTML Receiver for Chromebooks.

Q: Can the client side run on the Mac, native, not on a VM?

A: There is a Citrix Receiver client for Mac that can access XenDesktop in the data center.  In this case XenDesktop is running in the Data center, not on the Mac itself however.

Q: It is great to be able to use old desktop machines as XenApp clients. What are the minimum requirements for older hardware to be able to become a XenApp client?

A: There is not a specific set of requirements on the hardware.  On the software side, Windows Thin PC may provide an option.

Q: Do I need a Citrix backend in-house or can I use a hosted solution and just use Citrix Receiver?

A: XenDesktop can be hosted on-premise or in a hosted/cloud environment. Citrix Receiver will connect and work with both.

Q: What is the hardware requirements or specification to run the apps normally.

A: Streamed apps run on any Windows device that run an installed application.

Q: Given that the solution is served from the datacenter, can you further explain how “offline” work is done?

A: XenClient and Streamed apps are examples of desktop and applications running in “offline” mode. In both of these cases, the desktop and app are managed in the data center but stream to the endpoint for execution. This means you can unplug from the network and still have access to your desktops and apps. Any changes made to the master desktop or app image will be streamed to the endpoint version next time the user connects.

Q: How are the users passwords secure when using the Cloud Gateway?

A: SAML-based apps: no app passwords; authentication/authorization performed with existing directories

Form-fill web apps: account/password are stored using AES 256-bit encryption in the local data store by default (this data store is a MySQL database). Admins can also configure CloudGateway to use an external database to act as a credential data store. CloudGateway currently supports MySQL or Microsoft SQL Server as external password stores, and in all of these deployments CloudGateway uses AES 256-bit encryption so it is highly secure.

Q: We are running Citrix Metaframe Server 4.0 – can we run Citrix Receiver or what’s the minimum server version I need to run Citrix Receiver?

A: You will need to be on XenApp to support Receiver.

Q: How does licensing of the desktop OS work when using XenDesktop? Do you maintain a license pool to draw each instance from?

A: http://www.google.com/url?sa=t&rct=j&q=microsoft%20vda%20license&source=web&cd=1&ved=0CBwQFjAA&url=http%3A%2F%2Fdownload.microsoft.com%2Fdownload%2FC%2F6%2F7%2FC673E444-6DDD-40B8-B29F-625354F2A8F7%2FLicensing_Windows_for_Virtual_Desktops_Whitepaper.pdf&ei=eZzGToKIE6rjiALx-YT5Dw&usg=AFQjCNFVSHX_5GZICVF8-ceOdEdNasKWFg

Q: How are user profiles managed in the XenDesktop Environment? If profile redirection is used does it have to be enterprise wide?

A: Information on Profile Management can be found here: http://www.citrix.com/site/jumpPage.asp?pageID=1453077

Q: Do you have any licensing program for service providers who wish to provide desktop as a service model?

A: Yes, it’s called the Citrix Service Provider program www.citrix.com/csp

Q: How do you take care of applications that require install and setup with your C:\ drive, when in VDI the home pc C:\ drive does not exist?

A: XenDesktop with vDisk (based on our acquisition of RingCube) that supports “user installed apps” on the local, VDI desktop. Here is more information on this: /blogs/2011/08/24/personal-vdisks/

Q: How can we deliver all those bit streams to a workforce of 2,000 PCs?

A: Citrix solutions support organizations with hundreds of thousands of PCs.

Q: When should I use Hyper-V or XenServer?

A: Microsoft and Citrix jointly agree Hyper-V is the best hypervisor for Windows 7 virtualized desktops. For other workloads for virtualized desktops, XenServer is often used.

Q: Is there a way to easily determine what pieces of software and licensing is required thru both Citrix and Microsoft?

A: Citrix XenDesktop and XenApp are licensed though Citrix. RDS, App-V, MDOP, System Center, etc. are licensed through Microsoft.

Q: Is the Citrix solution completely independent of any type of Microsoft HyperVisor (IE. purchasing the Citrix product will be enough to leverage our existing Windows 7 based PCs and VMware hosted Windows Server 8 based servers)?

A: Yes, Citrix is hypervisor agnostic. See this: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315318

Q: Is the single sign platform available in the mobile devices?

A: Single sign on is completed through CloudGateway and all devices can leverage CloudGateway.

Q: If you have applications that require being able to save files to a local system and then being uploaded up to a server is this possible to do within a vdi setup with them also needing to have local admin rights at the same time?

A: Yes. XenDesktop with vDisk (based on our acquisition of RingCube) that supports “user installed apps” on the local, VDI desktop. Here is more information on this: /blogs/2011/08/24/personal-vdisks/

Q: Is there a network access control functionality included or planned?

A: Citrix already includes all of the features that many of the features that you would get in a NAC solution. Access Gateway provides dynamic access control: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300442

Q: What is the cost – I know its hard to know, but in general what is it going to cost me to use your system?

A: Here is a tool that will take your requirements and turn that into the estimated costs: http://flexcast.citrix.com/analyzeandcompare.html

Q: Are software vendors keeping up with this technology when it comes to software licensing?

A: All ISVs are treating virtualization differently, but in general, we see them understanding user requirements around virtualization and creating licensing to work in these environments.

Q: So was the demonstration for VDI using Hyper-V or XenServer for the hypervisor?

A: XenServer

Q: I had hoped XenClient would allow me to use the same installation image across many devices… since it talks through to the hardware does this negate this option?

A: XenClient allows a single image to run on many devices.

Q: Can you talk about Software Licensing and multiple device usage (non concurrent and concurrent usage)?

A: Citrix XenDesktop supports both concurrent and non concurrent licensing. It is up to you which will be more cost effective in your environment.

Q: Are there any ROI’s we can have access to regarding the move to a VDI environment?

A: Here is a tool that will take your requirements and find your estimated ROI: http://flexcast.citrix.com/analyzeandcompare.html

Q: How are multiple displays handled?

A: Multi-monitors are supported by Receiver for Windows, Mac, and Linux distributions.  This capability allows for both Windows scaling and panning across multiple monitors. http://support.citrix.com/article/CTX115637

Q: What is the bandwidth required to be successful with XenDesktop?

A: Here is a lab testing report about bandwidth requirements depending on what you are doing: http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FMiercom_CitrixXD5vsVMWView456_09Jun11.pdf

Q: Follow up on security: That solution protects your enterprise network, but what happens when you have a BYOC that is infected and infects other people’s BYOC when they connect to the network… even though the enterprise apps are protected, your endpoints are at risk… and how have you seen firms adderss that or manage that?

A: BYOC device will not infect other devices if they leverage Access Gateway’s ICA Proxy capabilities to cut off direct access between untrusted devices (e.g. BYOC) and the datacenter.

Q: What threat if any would there be from a BYOC device on a network if that device were infected with malicious code such as a computer virus?

A: None. If they leverage Access Gateway’s ICA Proxy capabilities to cut off direct access between untrusted devices (e.g. BYOC) and the datacenter

Q: Would keylogger type viruses still pick up the keystrokes?

A: Yes, if there is a keylogger on the host machine, it will capture all keystrokes of the user. The exception to this is XenClient. Because each virtual machine is directly on the hypervisor, a piece of malware in one machine will not impact or capture anything in another.

Q: Speaking of storage requirements and acquisition of RingCube, when will Personal vDisk be released in production (out of “Early Release?”)

A: It was released in August: /blogs/2011/08/24/xendesktop-5-5-is-here/

Q: Are there any compatibility issues when trying to provide for access to older software, i.e., older Quickbooks versions which CPA firms need access to for historical data?

A: XenApp enables you to host your legacy apps in the data center and continue to run them on newer Oses.

Q: When a user is streaming a desktop from the Data Center will support staff still be able to join them in session via GoToAssist?

A: Yes, GoToAssist works with virtual desktops.

Q: Just looking at the Citrix Receiver on Citrix home page…..so it’s a replacement now for the Citrix client or web client ?? I can use it now with ouur PS4.5 servers?

A: Yes, Receiver includes the on and off load plug in. It will work with Presentation Server 4.5.

Q: What would be the best way to provide quick functioning AutoCAD using Citrix/Virtualization over my corporate MPLS WAN? (We do use appliances like Riverbed for WAN acceleration)?

A: HDX RichGraphics will help with this: http://hdx.citrix.com/hdxrichgraphics This will work with both XenDesktop and XenApp.

Q: How well do virtual desktops handle multiple screen environments? We have 3 screens for each user, to make our paperless workflow environment more efficient. Will the virtual desktop recognize these independent screens?

A: Multi-monitors are supported by Receiver for Windows, Mac, and Linux distributions.  This capability allows for both Windows scaling and panning across multiple monitors. http://support.citrix.com/article/CTX115637

Q: Can app delivery decisions be made based on whether a device has a Company certificate on it (indicating that it is owned by the Co)?

A: Yes – using Access Gateway’s Endpoint Analysis and SmartAccess capabilities

Q: Does Citrix have bandwidth recommendations or case studies on how sending a desktop over the wire affects a branch with a T-1 and other users launching XenApp sessions?

A: Here is a lab testing report about bandwidth requirements depending on what you are doing: http://www.citrix.com/%2Fsite%2Fresources%2Fdynamic%2Fsalesdocs%2FMiercom_CitrixXD5vsVMWView456_09Jun11.pdf

Q: What is the advantage of VDI vs. application virtualization with XenApp?

A: Both have advantages.  The nice thing about XenDesktop is that either option is available with one license by virtue of the FlexCast model.  More details are available here: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315314

Q: Right now we use Citrix to connect to our own desktop to access our own web based enterprise application when we are out side network. What kind of solution you recommend?

A: This sounds very similar to our GoToMyPC product. You can also use XenDesktop with XenApp to connect to a internet browser inside the firewall which will be able to access your internal web apps.

Q: Is sccm required as part of this demo?

A: No – the demo didn’t use SCCM.

Q: What role does MedV fill?

A: MED-V removes application incompatibility with Windows 7 and delivering applications in a Windows XP-based application compatibility workspace.

Q: How about malware/viruses being sent in by the client? Will a ahcker be able to send code in via Excel, etc.?

A: You still need anti-malware. Citrix has partnerships with many vendors to provide this. In terms of Microsoft, we have System Center Endpoint Protection (formerly Forefront Endpoint Protection) that is integrated with System Center Configuration Manager to provide this protection.

Q: Licensing Questions. Is MS going to change any licensing practices for Cloud computing?

A: We don’t comment on futures, but cloud is a significant strategic direction for us at Microsoft and we are continually evaluating market needs.

Q: Similar to my earlier question, is there a clearly defined strategy for when it makes sense to use MS RDS alone versus Citrix XD?

A: We find customers that require any of the following : increased scalability (or more complex infrastructures), performance over Wide Area Networks, and/or non Windows clients as the end points for desktop virtualization usually need the combined Citrix/Microsoft Solutions.

Q: What is need to be set up on the server side in a company to allow an end user in a company to run ERP software (for example Microsoft ERP) in Windows and Mac?

A: Its hard to answer that question hypothetically – we would advise you build a proof of concept environment where you can virtualize the app and test the delivery of it using the different solutions available. XenApp and XenDesktop offer different ways of delivering those apps to Windows and non Windows clients. Have a look at: http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315314 for more info

Q: Which is the best hypervisor choice for desktop virtualization, Hyper-v or XenServer?

A: Microsoft and Citrix jointly agree Hyper-V is the best hypervisor for Windows 7 virtualized desktops. For other workloads for virtualized desktops, XenServer is often used.

Q: Will I need to upgrade my Windows 7 Enterprise licensing in order to utilize virtualization or is it included?

A: Check out http://download.microsoft.com/download/C/6/7/C673E444-6DDD-40B8-B29F-625354F2A8F7/Licensing_Windows_for_Virtual_Desktops_Whitepaper.pdf

Q: How are my current licenses with Citrix and Microsoft affected with implementing VDI? I understand that licensing scheme has changed and that if a client is not careful, they could become non-compliant very easily by deploying virtual servers and desktops.

A: If you look at http://blogs.technet.com/b/virtualization/archive/2009/07/13/microsoft_1920_s-new-vdi-licensing_3a00_-vdi-suites.aspx you can find links to licensing in a virtual desktop environment

Q: What is the typical process cycle for mobile apps on a system powered by Citrix with a MS Hyper-V?

A: I’m not sure I understand the question, but if you check out http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2315314 then you can see the different ways of delivering apps to devices, whether they re mobile or not.

Q: Approximately how big is PowerPoint packaged as an application to be streamed to the desktop? Is it realistic to send this to devices that are not on my network?

A: Check out http://flexcast.citrix.com/ for more understand of the choices you have to make when deciding how to deliver an application to a user on and off your network.

Q: What about licensing for MS Office for all user desktops?

A: Check out http://www.microsoft.com/licensing/about-licensing/product-licensing-faq.aspx#tab=3 – this describes this scenario.

Q: Any VDI performance Data on Hyper -V download?

A: Yes- check out http://www.microsoft.com/download/en/details.aspx?id=3045

Q: If I have a Windows 7 Desktop License, do I need to purchase additional Windows 7 licenses when I implement a Citrix Solution?

A: The whitepaper at http://download.microsoft.com/download/C/6/7/C673E444-6DDD-40B8-B29F-625354F2A8F7/Licensing_Windows_for_Virtual_Desktops_Whitepaper.pdf will explain all this.

Q: What are you doing to deal with Windows 8 default of secure boot for users with private and corporate OSs.

A: We will make more details about Windows 8 available as we get closer to launch.

Q: Do we have some action in the near future about the license for this VDI XENAPP/Microsoft today we pay about $260, per Citrix license +$45 on the Microsoft side to have a VDI infrastructure. but the price is to high? Example: 1 user cost us about $320, just for the license we did not add the Thin/fact client yet nor the Server infrastructure.

A: We work hard to make sure that our products meet the needs of the customers and provide significant value. We are confident that the cost is reasonable when you look at the amount of flexibility and functionality that the products provide.

Q: How would LYNC realtime voice be handled in a virtualized environment?

A: Check out http://support.microsoft.com/kb/2560826 for info.

Q: What are the minimum specs for a client to access the virtual desktop?

A: Check out http://www.citrix.com/English/ps2/products/feature.asp?contentID=2304443 for all the information on Receiver (the Citrix technology that runs on the device and connects it to the environment).

Q: How do you manage a packaged App-v app that can reliably delivered to an XP device, as well as a windows 7, or 2008, or 2008 R2 – without maintaining different App-v packages?

A: If the application supports the deployment to multiple OS’s then the App-V package will work Please see http://blogs.technet.com/b/appv/archive/2009/12/14/do-i-need-to-re-sequence-my-applications-when-i-move-to-a-new-os.aspx for more details.

Lastly, congratulations to the following individuals who won an Xbox 360 courtesy of Microsoft:

–       Kim from Monterey Peninsula College

–       Brian from Danaher Motion

–       John from Raytheon

Be sure to check http://citrix.com/events often for the most up-to-date list of events.

We look forward to seeing you online again soon!