Access Essentials The Edition

1
Access EssentialsThe
Edition

• Your Access Infrastructure Distributor!

2
Agenda

• Citrix, the basics
• Citrix Access Essentials
• Why and what
• Requirements Server and Client
• The Technology behind it
• Installation, Quick Start and advanced
  administration
• Licensing
• Subscription Advantage
• Partnership requirements
• Watchguard Firebox SSL VPN Gateway
• Citrix Solutions Conference
• Questions and Answers

3
IDG, who are we?

• Your Access Infrastructure Distributor!

4
Who are we?

• Leading Value Add Distributor for Access and
  Server Based Computing products and services.
• Main distributor in the BeLux for Citrix,
  AppSense, Secure Computing, ThinPrint, NetPriva,
  Igel, Brooktrout and FacSys.
• Service offerings pre-, post-sale support,
  technical consultancy and training.
• Network of more than 300 qualified partners
• Always on the lookout for new partners

5
Access Essentials, why and what?

• Your Access Infrastructure Distributor!

6
Why?

• SMB companies also need Access to their
  infrastructure
• They have the same issues as larger companies
• Bandwidth
• Different Operating Systems on clients
• Latency
• Security
• But they have certain restrictions
• Budget
• Hardware
• Software
• Services
• IT Skills
• Using Terminal services is often used in those
  environments
• Sometimes solves the financial issues but they
  loose functionality

7
What?

• Simple, secure, cost-effective access solution
  for up to 75 users through a central Windows
  server
• Windows Terminal Server CALs included in the
  price and fully integrated into the product
• Derivative of the widely popular Citrix
  Presentation Server technology
• Tailored for the small and mid-sized business
  (SMB) market

8
Citrix, the basics

• Your Access Infrastructure Distributor!

9
How Citrix works?
Input/Output
Processing
Storage
Citrix recreates the  three layers  by
introducing (a) dedicated Citrix Server(s)! All
applications are executed 100 on the server and
keyboard, mouse and screen info are sent to the
workplace! This requires a multi-user operating
system!
The Citrix communication is done via the ICA
protocol, very thin (30 Kb) and virtually client
independent!
The Storage servers are already in place, no
changes here!
Solution WITHOUT CITRIX!
The workstations are already in place, no changes
here!
Network Link (10/100/1000 Mbit)! This link is not
an issue anymore as both systems are in the same
computerroom!
Current computer systems span the three layers!
With storage we mean Exchange, SQL, SAP, E.g.
Data made available for multiple users!
Network Link (10/100/1000 Mbit)! What happens
when this link becomes very thin (ISDN, modem or
even GSM)
Solution WITH CITRIX!
10
Why Access Essentials

• Your Access Infrastructure Distributor!

11
Representation
The network switch
Firewall And/or Router
The outside world, the internet, containing
external users, etc
The DMZ, containing Web Server(s), etc
INTERNET
The internal network, containing the servers,
data and internal users
To explain this, we use a simplifed
representation of a typical network
12
Citrix Traditional config (1)
Most configurations contain multiple Citrix
servers using load balancing for sizing and
redundancy reasons
INTERNET
Citrix needs a license server and a database
server (e.g. SQL)
A traditional Citrix config uses an ICA client to
connect to the Citrix Metaframe servers
13
Citrix Traditional config (2)
External users can also connect to the
Presentation Server(s) by using the same ICA
client This creates some challenges security,
client distribution, etc
INTERNET
14
Citrix Traditional config (3)
So citrix has created the Web Interface solution,
logging in via a webserver in the DMZ eliminates
the need for a local client, a web-browser is
enough!
INTERNET
15
Citrix Traditional config (4)
Web Interface has some security issues. To solve
this, Citrix has created the Citrix Secure
Gateway solution, another server in the DMZ
INTERNET
To make CSG work, you need a ticketing authority
in your secure network!
16
Citrix Result
You end up with a rather complex config, using
multiple servers, complex firewall configuration,
etc
INTERNET
17
Access Essentials solution
The Access Essentials solution groups all these
functionalities on ONE SINGLE SERVER, making it
cheaper and easier to install!
INTERNET
18
Access Essentials solution
No more seperate ticketing authority
server/service in the internal network
Just one Citrix Access Essentials server that
does it all!!
No more seperate license and/or SQL server in the
internal network
No more seperate Presentation Servers in the
internal network
No more seperate Secure Gateway server in the DMZ
INTERNET
No more ICA Client on the PCs, a web-browser is
enough!
No more seperate Web Interface server in the DMZ
19
Access Essentials solution
One important issue, as this server contains Web
Interface and Secure Gateway, where do we put it?
In the internal Network or the DMZ?
If we place it in the DMZ, we put our
applications on the internet! This means an even
bigger security risk!
INTERNET
If we place it in the internal network, how do we
reach it? Opening the ports means a security risk!
20
Access Essentials solution
The solution is to use the Firebox SSL VPN
Gateway in the DMZ to create an SSL based
tunnel, this offers you a secure path to your
applications!
INTERNET
21
What is Access Essentials

• Your Access Infrastructure Distributor!

22
Overview 1/3

• Everything installed on ONE server
• Including Web Interface, Secure Gateway,
  Ticketing Authority, Licensing Server,
  Application Server, TSCALs..
• Cannot be splitted
• Maximum 75 users per server
• Named user model (not concurrent)
• Sold per 5 users
• TSCAL included in the price
• No Load Balancing, no license sharing
• No Installation and Network Management
• Runs on Windows 2003 Server ONLY
• Standard or Enterprise edition (32-bit)
• You need to buy the Windows CALs seperately

23
Overview 2/3

• No INTEGRATION with existing products
• No MIGRATION towards Presentation Server
• Can be combined with other Citrix products
• Password Manager, GoTo products
• Firebox SSL VPN Gateway is the supported VPN
• Other VPNs should work
• Wizard based installation
• Available without Subscription Advantage
• Users without SA can not re-enter
• No SA means no upgrades/updates
• Buy a new version when needed
• Qualifies for Solution Advisor rewards
• From 10.000 SRP (minimum 50 users)
• 45 Days forecast visibility
• Qualifies for CSA Gold partner sales targets

24
Overview 3/3

• Contains new Presentation Server Features
• Based on the most recent PS 4.0 technology
• CPU Optimization
• Memory Optimization
• Virtual IP
• May not be used for hosting services
• Other unsupported actions
• Using OS Level firewall or no firewall
• Install in a multiple NIC Server
• Changing the XML port
• Using PN or PN Agent to launch application

25
This is what the user sees

• Your Access Infrastructure Distributor!

26
Browser Log-in Screen
27
Web Enabling Applications
28
Requirements, Server and Client

• Your Access Infrastructure Distributor!

29
Requirements and Tools

• Server Requirements
• Windows Server 2003
• Same Language as Access Essentials
• NO Domain controller (PDC/BDC)
• Single Network Interface Card (NIC)
• Multiple NICs not supported
• Installed as part of Access Essentials
• J Runtime
• Microsoft Installer 3.0
• Terminal Services
• Terminal Services Licensing Server
• Internet Information Server (IIS)
• ASP.NET

30
Client Requirements

• Access through Web Interface
• Supported Browsers (earliest versions)
• Internet Explorer 5.5 and above
• Netscape 7.x
• Opera 7
• Firefox
• Safari 1.0
• Mozilla 1.0
• Pocket IE 2003
• Internet Explorer 5.21 (Mac OS X only)
• PN and PN Agent launch not supported
• PN and PNA engines can be used with WI launch

31
Installation, Quick Start and advanced
administration

• Your Access Infrastructure Distributor!

32
Installation

• Minimal user interaction but no configuration
  required
• Fully wizard driven
• Meta-installer Tool installs Pre-requisites
• J Runtime
• MSI 3.0
• Terminal Services
• Terminal Services Licensing Server
• Internet Information Server (IIS)
• ASP.NET
• Meta-installer Tool installs Citrix components
• Citrix Licensing Service
• Web Interface (internal and external sites)
• Secure Gateway
• MPS Core product (Access Data Store)

33
Quick Start Tool
34
Getting More Out o/t Server

• CPU Optimization
• Memory Optimization
• Virtual IP

35
Adv. Administration Tools
Advanced Administration Tasks Branding Web
Interface Optimizing for wireless WAN Interaction
with third party products Offloading components
to other servers Note More detailed knowledge
of Presentation Server is advisable before using
these options
36
Access Essentials licensing

• Your Access Infrastructure Distributor!

37
Licensing

• Includes TS CAL
• Reserved Named-User licensing
• License increments of 5 users
• Maximum 75 users per server
• Enforced by Licensing System
• License Management Console is not installed
• Citrix Access Essentials is sold via the Easy
  Licensing system

38
TS CALs

• Included with Access Essentials license purchase
• Need to activate TS Licensing server during
  install
• Quick start tool just has check box
• No need to call Microsoft Clearinghouse
• Customer does not receive TS CALs to activate
• TS CALs managed by Citrix and kept for customer
• TS CAL strings available from MyCitrix

39
What is Easy Licensing

• Your Access Infrastructure Distributor!

40
Easy Licensing Highlights

• Easy Licensing is a basic electronic license
  program that enables organizations of any size to
  benefit from electronic licensing rather than
  purchasing packaged products (Shrink Wrap)
• Providing on-demand licensing buy what they
  need, when they need it.
• Allowing customers to add users incrementally to
  existing installations (with as few as five user
  licenses per purchase).
• Operating without any contract paperwork, a
  click to accept EULA at installation time is
  all that is needed. Customers will be able to
  review all relevant terms and conditions at
  registration time or prior to accepting the EULA
  at installation time
• NO RETURN POLICY
• Customer needs to register to buy Easy Licensing,
  contact IDG to guide you through the process

41
Easy Licensing

• Minimum order size 5 Users
• Can be ordered per 5 users afterwards
• Solution Advisor Reward
• Purchase that is greater than 10,000 points
  qualifies for 10 reward
• 10000 LIST equals Minimum 50 users Access
  Essentials
• Easy Licensing qualifies for a Citrix Advisor
  Reward of 10 of the equivalent SRP of the
  purchase order
• Subscription Advantage renewal
• Via MyCitrix

42
A practical example

• Imagine a customer needs 30 users
• You buy 6 5 user packs
• 6 1188 list/5 users 7128
• Or
• 6 997 list/5 users 5982
• Of course you need a server
• E.g. HP DL360 approx. 4000
• And a Windows Operating System
• Approx. 700
• Total approx. 12000 euros
• For a 30 user solution or appriox. 400/user

43
Subscription Advantage

• Interact Distribution Group
• Your Access Infrastructure Distributor!

44
Program Principles

• Citrix is a Channel Company
• Subscription follows Product
• Renewal Events are an Up-Sell and Cross-Sell
  Opportunity
• New Citrix products
• Other vendors (hardware and software)
• Services (install new versions)
• A Technology Guarantee
• Lock in Tomorrows Technology Today!

45
What are the Benefits?

• Citrix Subscription Advantage Membership
• The easiest way to keep business-critical
  computing environments running at maximum
  efficiency. It provides a convenient way to
  budget for your Citrix upgrades annually, without
  having to anticipate variable costs throughout
  the year. In addition, you get priority access
  to important Citrix technology information and
  customer service news all year long.
• Tangible Benefits
• Platform Releases.
• These are defined as a major change to the
  underlying MetaFrame Presentation Server Product
  Architecture.
• Feature Releases
• These releases are defined as an update to the
  feature set of a given MetaFrame Platform and
  Level.

46
Program Illustration
BMW Mark III 750cc Body Redesigned Engine Size
Static Power Increased
BMW Mark IV 750cc Body Redesigned Engine Size
Static Power Increased
BMW Mark II 750cc
If Subscription Advantage were applied to BMW
Motorbikes as each new version is released the
BMW Subscription Membership customer would have
the right to move to the latest version within
their engine class. If the Customer wanted to
Increase their engine class from 750cc to 1000cc
this would equate to an Upgrade
47
How do I get Subscription?

• Purchase Citrix Access Essentials with SA
• Full Product
• Initial 12 month Subscription Advantage
  Membership included
• You can also buy Citrix Access Essentials without
  SA
• No possibility to re-enter the SA
• SA also gives you the right to updates for the
  included Microsoft TSCALs

48
Partnership requirements Certification

• Your Access Infrastructure Distributor!

49
Overview - Certification

• Needs seperate certification
• Next to existing Silver of Gold partnership
• Non- CSA partners need
• Citrix Access Essentials Sales Webinar
• Citrix Access Essentials Technical Webinar
• CTX-04A Citrix Access Essentials 1.0 Sales auth.
  Test
• IMPORTANT Does NOT give you the right to sell
  the other Citrix products!!!
• CSA partners can also sell the product by doing
  the same as above
• Only sold via EASY Licensing model
• Thats why certification is needed!

50
Additional information

• Your Access Infrastructure Distributor!

51
Extra resources

• Public Product Informationwww.citrix.com/accesses
  sentials
• Product Demonstrations TestDrivewww.citrix.com/
  demowww.citrix.com/testdrive
• Knowledge Basesupport.citrix.com/kb
• Courses/eLearning/Certificationswww.citrix.com/tr
  aining
• Product Downloadswww.MyCitrix.com
• Marketing Programswww.MyCitrix.com

52
Summary Access Essentials

• Your Access Infrastructure Distributor!

53
Summary Access Essentials

• Simple to install, one server solution
• Centralised application hosting with remote
  management
• Know the possibilities AND the limitations
• Provide secure, remote, web access to
  applications and folders from any device, at any
  time, over any connection
• Publish specified applications and content to
  specified users
• SSL/TLS encryption and multi-factor authentication

54
Firebox SSL VPN Gateway (Watchguard/Citrix)

• Your Access Infrastructure Distributor!

55
Overview

• This will be brief as the rest of the day already
  handled/handles this
• Citrix has his own box, the Citrix Access Gateway
• Watchguard has licensed the Citrix SSL technology
  and has a similar box, the Watchguard Firebox SSL
  VPN
• Technology is identical, the Citrix solution has
  some more options and is somewhat more powerful,
  but these are not relevant for this solution

56
SSL VPN Gateway products

• Universal SSL VPN providing access to all
  internal IT resources, including IP telephony
• Hardened appliance, supports 205/2000 concurrent
  users
• Integrated end-point security and Always-On
  roaming
• Easiest to deploy, use, and manage SSL VPN on the
  market
• Inexpensive to purchase and own

Firebox SSL VPN Gateway
57
Universal SSL VPN The Advantages Of IPSec and
SSL
IPSec VPN
Inexpensive to purchase
Desk-like remote access experience
Can enable/disable split tunnelling
One solution for all application and protocols
Easy to deploy client
Low clientsupport costs
Traverses firewalls and proxy servers
SSL VPN
58
Without the Disadvantages
IPSec VPN Disadvantages
SSL VPN Disadvantages

• High cost of ownership difficult and expensive
  to deploy and manage
• IPSec traffic blocked by firewalls, home routers,
  and some ISPs
• Worm traversal between client and network
• Difficult to deploy and use clients
• No seamless reconnection

• Does not support all applications and protocols,
• May still need to keep IPSec to support specific
  apps, e.g. IP Telephony
• Confusing mixture of different technologies
• Expensive to implement and manage
• Cannot enable/disable split tunnelling

59
Firebox SSL VPN Gateway Pricing

• Back to our 30 user example again
• The box itself costs 2723 (5 users included)
• 25 extra licenses cost 2415
• Total cost is 5138 or 171/user

60
Firebox SSL VPN Gateway

• Universal SSL VPN
• Hardened, secure appliance
• Solutions for simple and advanced access needs
• Most advanced policy based access

The Only Integrated Access Solution
61
Price The total picture

• Interact Distribution Group
• Your Access Infrastructure Distributor!

62
Price The total picture

• Citrix Access Essentials
• User licenses 1188/5 users
• Server OS 5000
• Watchguard Firebox SSL VPN Gateway
• Device licences 5138
• Thin Clients
• IGEL-364CE Compact 349/unit
• For a basic 30-user config, this means
• 12000
• For a full-option config, this can mean
• 27500, for secure access (SSL VPN, Smartcard),
  anywhere, anytime, from any device, including 30
  client devices! Buying 30 PCs will cost you
  approx. The same amount!

63
Citrix Solutions Conference 2005

• Interact Distribution Group
• Your Access Infrastructure Distributor!

64
Solutions Conference 2005

• Where Antwerp Hilton Hotel
• When
• November 15th, 2005 Opening Golden Earring
• November 16th, 2005 Actual seminar (keynote by
  Mark Templeton, President and CEO Citrix Systems)
• Special hotel rates for people who want to stay
  in Antwerp (limited number of rooms)
• What More than 500 executives and IT
  professionals learn how they can use on-demand
  access to grow their business

65
Solutions Conference 2005

• Combines Partner Exchange (Resellers) and
  Solutions Seminar (end-users) for both Belgium
  and Netherlands
• Registration Free
• For agenda, registration and more info
• www.solutionsconference.com
• Contact Interact Distribution for more info

66
Questions (and answers -)

• Interact Distribution Group
• Your Access Infrastructure Distributor!