1. Superb User Experience, Agile Secure Office
— Huawei FusionCloud Desktop Solution for Application Virtualization
Author/ ID: Fan Jiachao
Dept: Cloud Computing Marketing Dept, IT
Version: V1.0 ( )

2. Please delete this page before you present it to customers.
Author/ID
Fan Jiachao/
Department
Cloud Computing Marketing Dept, IT
Solution Name
Huawei FusionCloud Desktop Solution
Version
6.1(V100R06C10)
Slide Overview
This document describes the background, highlights, practices, and cases of the application virtualization solution provided in Huawei FusionCloud Desktop Solution 6.0.
Intended Purpose
Used for preliminary communication with VIP customers who are interested in application virtualization.
Intended Usage
This document is used for preliminary communication with customers and can be revised based on customer concerns.
Release Date
V1.0
Please delete this page before you present it to customers.

3. Contents 01 02 03
Background
Huawei FusionCloud Desktop Solution for Application Virtualization
Success Stories

4. Customer Pain Points and Requirements
Difficult Security Supervision
Complex Application Deployment
Mobility and Service Continuity
Heavy pressure is put on IT control and security supervision.
Applications and data stored on user devices are facing security risks. Applications installed on user devices may conflict with each other, resulting in slow operation or even breakdown of devices.
Emerging IT systems are in an urgent need of data security supervision
Complex distributed application deployment increases costs.
IT personnel have to upgrade applications running on hundreds of devices from time to time.
Popularity of smartphones
Mobile office requirements
Service outsourcing and service continuity requirements

5. What Is Application Virtualization
Application virtualization is designed to centrally release and manage shared applications and desktops based on Window Server.
Users do not need to install applications and can use secure applications and desktops from various terminals.
Customer Benefits
Simplified IT management
Application publishing in seconds
App
Centralized deployment without data stored locally
Secure and controllable
Windows Server
Desktop transmission protocol
Mobile office
Access anytime, anywhere
Quick fault recovery
Shortened service interruption time

6. Secure Internet access
Application Scenarios
Simple office
Secure Internet access
Task processing and simple O&M
Internet access and centralized application deployment
Branch office
Mobile office
Enterprise expansion and centralized application deployment
Business trip and onsite service processing

7. Contents 01 02 03
Background
Huawei FusionCloud Desktop Solution for Application Virtualization
Success Stories

8. Computing resource pool
Huawei FusionCloud Desktop Solution Architecture
Centralized application deployment
Centralized management and control to ensure data security
Network
Remote application publishing
Access from anytime, anywhere for convenience
FusionAccess
Centralized O&M
Quick service rollout and zero remote maintenance
Windows server
Windows server
Windows server
虚拟桌面（VDI，Virtual Desktop Infrastructure）：
利用虚拟化技术，将物理资源虚拟若干虚拟机，每个虚拟机对使用者而言就 是一个逻辑PC，有独立的CPU、内存、网络和存储，每个虚拟机有独立的操 作系统。
应用虚拟化 （SBC，Server-Based Computing）：
按需交付应用程序的解决方案。在数据中心集中管理应用程序，向任何地方、使用任何设备的用户交付应用。所有后台应用系统部署在数据中心服务器， 终端仅接受交付平台上应用运行的屏幕画面。
FusionSphere
Computing resource pool
Storage resource pool
Network resource pool
Cost-effectiveness
Reduced deployment costs and energy saving
Server
Network
Storage

9. Application Virtualization Implementation
System Architecture
Solution Highlight
Application Scenario
Application Virtualization Implementation
CRM
SAP
Client
HDP PC
Laptop
Mobile terminal
Virtual desktop
Server
Data center
USB Tunnel
Display Tunnel
HDP
Audio Tunnel
Media Tunnel
Mouse Client
Other …
The Huawei Desktop Protocol (HDP) is a bond for server-client input/output and human-machine interaction.

10. Seamless Interconnection with VDI
System Architecture
Solution Feature
Application Scenario
Seamless Interconnection with VDI
Unified architecture
Unified user access
VDI and SBC supported by a same set of FusionAccess system, including:
Unified HDP access protocol
Unified management components (including AG, LB, HDC, License, and DB)
Same user access interface
Shared desktop
Virtual desktop
Remote application
Architecture
User access
Unified service provisioning
Unified O&M
Service provisioning
O&M
Unified O&M portal
Unified upgrade tool
Virtual desktop and application virtualization services provisioned by a same set of FusionAccess system
Unified warning and monitoring
Unified report management

11. Mobile Phone and Tablet Service access from anywhere, anytime
System Architecture
Solution Highlight
Application Scenario
Mobility — Support for Multiple Terminals
Personal Computer
Thin Client
HDP Client
Mobile Phone and Tablet
Laptop
Service access from anywhere, anytime

12. Mobility — Native Windows Server Gestures
System Architecture
Solution Highlight
Application Scenario
Mobility — Native Windows Server Gestures
Tapping
Holding
Three-finger tapping
Two-finger zooming
Dragging and rotating
Right-to-left flipping
Left-to-right flipping
Top/Bottom-to-middle flipping

13. Mobility — Integration with AnyOffice to Provide a Unified Platform
System Architecture
Solution Highlight
Application Scenario
Mobility — Integration with AnyOffice to Provide a Unified Platform
Solution
Application virtualization integrates MDM (such as Huawei AnyOffice) to support single sign-on on a unified platform.
Unified application interfaces are provided for desktops, Windows applications, native applications, and Web applications.
Virtual desktop
Native application
Customer Benefits
SaaS
Windows application
Integrated enterprise applications facilitate employee use and improve work efficiency.
Mobile OA improves work efficiency by at least 15% (according to Huawei statistics).

14. Security — Comprehensive Security Mechanisms
System Architecture
Solution Highlight
Application Scenario
Security — Comprehensive Security Mechanisms
Security access gateway (software vAG or hardware SVN)
Transmission protocol security
WAN
Secure application access
HDP
HDP
Policy-based control
Policy control on the desktop transmission channel
Two-factor user authentication
Any Device
Integration with MDM
Encryption transmission
Identity authentication
(Two-factor authentication)
Cloud servers centrally providing computing and storage resources
Centralized application management

15. Cloud platform management
System Architecture
Solution Highlight
Application Scenario
Reliability — System-level Reliability Protection
FusionAccess
FusionAccess
User connection
Client
Server HA
Desktop management
Client
Agent
Agent
LB/AG
FusionSphere
FusionSphere
App
App HA
Cloud platform management
Windows
Server
Windows
Server
Users
Optimal resources are selected based on loads:
Lightest CPU loads
Lowest memory usage
Least session connections OS OS
APS session servers VM VM
Management nodes
User connection reliability
Management node reliability
Client network
Server
Desktop management
Cloud platform management
APS server load balancing
Fault isolation and scheduled restart
Process-level monitoring and service restart upon failures
Clearing sessions that are disconnected for a long time
Key nodes do not depend on Windows OSs and Huawei Desktop Controller (HDC) does not depend on the domain controller.
Service status detection, and automatic fault isolation and recovery are supported.
Redundancy of management nodes
Automatic VM fault recovery
Automatic monitoring for memory, CPU, and hard disk status of management nodes
Management data backup
Automatic reconnection upon network intermittent disconnection
Network status automatic detection

16. Application Virtualization and Desktop Virtualization Comparison
System Architecture
Solution Highlight
Application Scenario
Application Virtualization and Desktop Virtualization Comparison
Desktop virtualization (exclusive desktop)
Independent Windows 7/Windows XP desktops (1:1 or N:M)
Low resource reuse and application update efficiency, small number of users supported by a server, and high requirements on storage
Excellent peripheral and application compatibility
High capital expenditure
Applicable to users with high requirements on personalization and peripheral compatibility
SBC
VDI
Terminals
Profile
Desktop management
App
App
VDI Management
SBC Management
App OS
Application virtualization (including shared desktops and applications)
Application or desktop provisioning for multiple users based on Windows Server RDS
High resource reuse and application update efficiency, large number of users supported by a server, and low requirements on storage
Poor peripheral compatibility
Low capital expenditure
Applicable to users with low requirements on personalization and peripheral compatibility
Cloud platform VM VM VM VM
Windows server
Windows server
Cloud platform
Servers and storage devices
SBC: Server-based Computing
VDI: Virtual Desktop Infrastructure

17. Simple Office Application Scenario Solution Highlights VM 1 VM 2
System Architecture
Solution Highlight
Application Scenario
Simple Office
Application Scenario
This solution applies to office scenarios with simple peripherals and low personalized requirements, such as hotel front desks, education, and network management (light-load).
Solution Highlights
Adoption of shared desktops reduces hardware resource consumption of virtual desktops as well as investment.
Employees on the same post share a linked clone VM. VM OSs or applications are centrally upgraded on the desktop management platform.
Applications and data are deployed on the cloud, which provides higher data security than PCs.
Post A
Post A
Post B
Post B
Multiple employees share a VM and are assigned independent desktops based on sessions.
VM 1
VM 2
Server
Network
Storage

18. Virtual application UI transmission
System Architecture
Solution Highlight
Application Scenario
Branch Office
Application Scenario
Applications are centrally deployed and managed at the headquarters. Users in branch offices can access applications using terminals without the need of deploying applications.
Solution Highlights
Resources are allocated on a unified desktop cloud platform to quickly deploy branch offices.
Centralized O&M simplifies terminal management and reduces O&M loads of branch offices.
Compared with conventional SSL VPN, virtual applications can be accessed more quickly, and data streams are reduced.
No valid data is stored in branch offices, providing high security.
PC or laptop
PC or laptop
PC or laptop
Branch office 1
Branch office 2
Branch office 3
Virtual application UI transmission
Enterprise OA
ERP system VM VM
Virtual application publishing platform
HDP stream

19. Application publishing servers
System Architecture
Solution Highlight
Application Scenario
Mobile Office
Application Scenario
Users access remote applications or shared desktops using smart terminals over various networks without the need of installing applications locally.
Solution Highlights
New clients do not need to be developed for mobile terminals, which enables quick application deployment and reduces costs.
All applications and data of service systems are stored on the cloud, and only image data is delivered to mobile terminals. No data is stored in mobile terminals, which ensures data security.
Applications are centrally upgraded and maintained on the cloud, reducing maintenance workloads of applications.
Security authentication is implemented when mobile terminals connect to the Huawei application virtualization system, and data is encrypted for transmission. This ensures information security for enterprises.
3G/4G/WiFi
HDP Over SSL
WEB
Exchange
Security gateway
3G/4G/WiFi
CRM
ERP
Application publishing servers

20. Application virtualization servers
System Architecture
Solution Highlight
Application Scenario
Secure Internet Access
Application Scenario
Employees access the Internet based on application virtualization, which meets security control requirements of the enterprise as well as Internet access requirements of employees.
Solution Highlights
Employees access the Internet using browsers published by application virtualization. Internet data cannot be transmitted to the intranet, so that intranet security is ensured.
Employees access the Internet using shared desktops published by application virtualization and download data to the intranet using the file transmission function.
In the secure Internet access solution, the existing office architecture does not need to be changed, and the second PC does not need to be deployed for Internet access, which greatly reduces investment.
Secure office network of an enterprise
Internet
HDP over SSL
Security gateway
Application virtualization servers

21. Contents 01 02 03
Background
Huawei FusionCloud Desktop Solution for Application Virtualization
Success Stories

22. Xinhua News Agency
Application virtualization + Mobile office for efficient interviewing and editing
The unified mobile office platform, along with terminal access authentication, network transmission encryption, and data security protection, provides comprehensive information security.
News interviews from anywhere, anytime increase news publishing efficiency by 30%.
Review and decision making efficiency improves by 40%.
"This is just what we want." Xinhua News Agency Lab (for emerging technology investigation and research)

23. Thank You