1. Citrix Synergy Session Application Layering May 2015

2. Introduction Doug Brown – Founder DABCC.com  Author of many books including Methodology in a Box  CTP, Microsoft Expert, VMware vExpert  Former Citrix SE Jason E. Smith – Director User Mgmt and Application Layering, Liquidware Labs  Product Management and Go-to-Market strategist for 19+ years including Citrix, Scriptlogic, RES, and Red Hat

3. Methods for Application Delivery Application Layering  Examples include Liquidware Labs ProfileUnity FlexApp and VMware App Volumes Whole System Layering  Example includes Unidesk Virtualization through isolation  Examples include Microsoft App-V, VMware ThinApp Image Masking/Cloaking  Examples include FS Logix Application Rights Management – deny/allow  Examples include AppSense, ProfileUnity

4. © 2015 Liquidware Labs Traditional Application Virtualization Examples: Microsoft App-V Citrix App Streaming (former) VMware ThinApp

5. Traditional Application Virtualization Advantages:  Let’s you run two applications in the same environment on different OS  Supports streaming and off-line modes Disadvantages:  Can be difficult to assign to users  Isolation not compatible with many applications that need to interact with others  Difficult to package into containers

6. Application Virtualization ThinApp Limitations: Kernel Mode Drivers Anti-Virus Firewall Software Disk Management VPN Scanner & Printer Drivers Device Drivers Shell Integration Using DCOM Services that are network-visible Implementing libraries that use global hooks. Source: Limitations to application support in ThinApp, VMware KB1007424

7. Application Virtualization App-V Limitations: Applications that start services at boot Applications that require device drivers Applications that are required by several applications for information or access Applications that are part of the OS Applications that use COM+ COM DLL surrogate virtualization Source: App-V 5.0 Sequencing Guide

8. What is Application Layering? Delivering applications to desktops and servers as a non-obtrusive layer onto an existing base image build. This image is VMware’s so it needs to be recreated.

9. © 2015 Liquidware Labs New: Application Layering

10. Application Layering Advantages:  No isolation; more compatible with many more types of applications, interaction with OS and other Apps  Packaging is straightforward  Users can package their own apps (UIA)  Administrators can assign apps for groups (DIA); create application “stores”  When paired with strong UEM solution; delivery of apps to users is seamless Disadvantages:  No isolation; there are certain cases for isolation

11. Advantages with ProfileUnity UEM including User Persona, Dynamic IT Policies, & Application Rights Management Application Rights Management – Ability to restrict application access per user or group Privilege Elevation –Elevate user for single app – not machine Advanced Data Migration and Sync capabilities – Move data in background seamless to user Advanced Filters and Triggers –Over 300 options to customize workspace + capture app settings outside profile Layering integrated into UEM console –Single management console for ease of use Physical, Virtual, CTXS or VMW – One solution for multiple delivery options More cost effective – $39/user for ProfileUnity FlexApp (both)

12. Advantages with FlexApp Application Delivery More scalable –Scale with existing infrastructure – using existing file shares HA ready –Follow suit with existing infrastructure HA structure – using existing file shares More secure –No need to be make users an administrator Higher Application compatibility –Apps with services and file system drivers can be assigned at user level Integrated with UEM console –Single management console for ease of use Physical, Virtual, CTXS or VMW –One solution for multiple delivery options More cost effective –$39/user for ProfileUnity FlexApp ( both)

13. ProfileUnity v6.5 Management Console

14. FlexApp DIA Packaging Console

15. FlexApp Department Installed Application Assignment

16. FlexApp DIA Packaging Console

17. Application Rights Management Application Rights Management goes hand in hand with Application Layering and not all solutions are capable. Elevate applications that need admin rights for standard users –standard user does not need to be admin for just an application. –benefits Server Based Computing because applications needing admin rights have not been compatible with SBC. Allow application installations on persistent virtual or physical for standard users –Controlled by policy, from location, by certain manufacturers, securely locked down

18. ProfileUnity v6.5 (FlexApp 2.0) Demo

19. Citrix + Liquidware Labs VDI Application Publishing and SBC Basic User Monitoring Profile Tool User Installed Apps Department Installed Apps User Environment Management Application Rights Management Privilege Elevation Self Elevation Admin Policies User Data Disk with HA Assessment Advanced User Experience Monitoring XenDesktop Platinum XenDesktopXenAppDirectorUPMPvD With Liquidware Labs FlexApp ProfileUnity FlexDiskStratusphere FIT Stratusphere UX

20. Thank You