Citrix Cloud - TechCitrix Workspace – Track Network

Claudio MascaroSenior Systems Engineer / Trainer / ConsultantBCD-SINTRAG AG13. NOVEMBER 2018

Workspace App

User

Tablet

Laptop

Phone

Workspace

User

Tablet

Laptop

Phone

Workspace AppOverview

Citrix Workspace App

Engines

Native access to SaaS apps with enhanced security

Remote access to virtual desktops, apps and browsers

Secure and optimized connectivity to backend resources

Integrated access to all cloud and on-prem storage repositories

Seamless auto-update and centralized management

User and device behavior monitoring and risk analysis

Embedded BrowserHDX

NetworkingAnalytics

Management

Content Collaboration

PersonalPhone/Tablet

Public Kiosk

Workspace AppOverview

Workspace

User

Workspace App(Desktop)

Workspace App(Mobile)

Workspace App(Web)

Corporate Device

XenApp & XenDesktop

Endpoint Management

Gateway

Access Control

XenApp & XenDesktopCloud Connector

Content Collaboration

Secure Browser

Resource Feed

Citr

ix C

loud

Se

rvic

esIT

M

anag

ed

• Engines – deployed as needed

• Platforms–Windows–Linux–Mac–iOS–Android–HTML5

Workspace AppDesign Considerations

Citrix Workspace App

EnginesEmbedded Browser

HDX

NetworkingAnalytics

Management

Content Collaboration

Secure BrowserService Browser Apps

Workspace Virtual Apps/DesktopsService

Endpoint ManagementService

User

Content CollaborationService

Access ControlService

Storage Apps

Virtual Apps and Desktops

SaaS and Web Apps

Local Apps

BYO Identity

BYO IdentityWhy

User Box Identity

SalesForce Identity

Workday Identity

SAP Identity

Office 365 Identity

BYO IdentityOverview

User

Workspace

Single Sign-on µ-service

WindowsActive Directory

Azure Active Directory

Identityµ-service

or

• Set Identity and Access Management authentication

BYO IdentityConfiguration

• Set Identity and Access Management authentication

• Set Workspace authentication

BYO IdentityConfiguration

• Azure AD with Virtual Apps and Desktops–Users prompted for a Windows AD account–Or setup Federated Authentication Services (FAS)

BYO IdentityDesign Considerations

Deployments for Virtual Apps & DesktopsCloud & On-Premises

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User Gateway

On-Premises (IT Managed)

Director Studio

License Database

https://login.firma.ch

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License Database

User

WorkspaceInternal User onlyNo Citrix Gateway

https://firma.cloud.com

Gateway disabled

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License Database

User

StorefrontInternal User onlyNo Citrix Gateway

StoreFront

https://storefront.firma.local

Gateway disabled

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License Database

User

CombinedWorkspace & StorefrontInternal User onlyNo Citrix Gateway

StoreFront

https://storefront.firma.localhttps://firma.cloud.com or

Gateway disabled

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License DatabaseWorkspaceInternal & RemoteCitrix Gateway Service

Gateway Service

User

https://firma.cloud.com

Gateway Service enabled

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License DatabaseStorefrontInternal & RemoteCitrix Gateway On-Prem

User

StoreFront

Gateway User must knowGateway on-premFQDN !

https://login.firma.ch

Gateway disabled

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License DatabaseWorkspaceInternal & RemoteCitrix Gateway On-Prem

User

StoreFront

Gateway

https://firma.cloud.com

Gateway on-prem enabledhttps://login.firma.ch

Windows Apps

Windows Desktops

Linux Apps

On-Premises (IT Managed)Cloud (Citrix Managed)

Cloud Connector

Virtual Apps/DesktopsService

Workspace

Delivery Controller

Director Studio

License DatabaseCombinedWorkspaceInternal & RemoteCitrix Gateway On-PremCitrix Gateway Service

User

StoreFront

Gateway

Gateway Service

User must knowGateway on-premFQDN !

https://login.firma.ch

https://firma.cloud.com

Gateway Service enabled

Site Aggregation

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User Gateway

On-Premises (IT Managed)

Director Studio

License Database

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User Gateway

On-Premises (IT Managed)

Director Studio

License Database

Cloud (Citrix Managed)

Workspace

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User

On-Premises (IT Managed)Cloud (Citrix Managed)

Workspace

Director Studio

License Database

Gateway

Cloud Connector

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User

On-Premises (IT Managed)Cloud (Citrix Managed)

Workspace

Director Studio

License Database

Gateway Service

Cloud Connector

StoreFront Delivery Controller

Windows Apps

Windows Desktops

Linux Apps

User

On-Premises (IT Managed)Cloud (Citrix Managed)

Workspace

Director Studio

License Database

Cloud Connector

User

Site EU (Internal Only)Cloud (Citrix Managed)

Connector

Site EU (Remote Access)

Site NA (Remote Access)

Connector

Connector

Gateway

Windows Apps

Windows Desktops

Linux Apps

Gateway Service

Workspace

Site Aggregation

• Gateway–Add STA to Cloud Connector

Configuration

Site Aggregation

• Gateway–Add STA to Cloud Connector

• Workspace Configuration:–Select resource location–Identify delivery controller

Configuration

Site Aggregation

• Gateway–Add STA to Cloud Connector

• Workspace Configuration:–Select resource location–Identify delivery controller–Configure connectivity

Configuration

Site AggregationTechInsight Video

YouTube: https://www.youtube.com/watch?v=i9qL3clzPzQ&t=6s

Cloud Connector

Cloud ConnectorWhy

User

Gateway Service

Workspace

Cloud ConnectorVirtual Apps/Desktops

Service

Resource LocationCitrix Cloud Services

Windows Desktops

Management Traffic

Session Traffic (ICA)

Cloud ConnectorOverview

User

Gateway Service

Workspace

Cloud ConnectorVirtual Apps/Desktops

Service

Resource LocationCitrix Cloud Services

Windows Desktops

Management Traffic

Session Traffic (ICA)

• Requires VDA version 7.18

• Automatic fallback

Cloud ConnectorDesign Considerations