Citrix Access Essentials 2.0 New Features and Benefits

Citrix Access Essentials™ 2.0 New Features and Benefits Citrix Access Essentials is the easiest, most cost-effective, off-the-shelf software enabling 5 to 75 persons to remotely use corporate Windows programs conveniently and securely over the Web. Unlike inferior alternatives, it performs well across slow connections, strict network firewalls and non-Windows computers without needing to rewrite applications upgrade PCs or increase bandwidth. Its simple role-based rules control which central resources individuals see and where they store and print sensitive information. Newly arriving Internet and internal LAN users are automatically load-balanced among available application servers, bypassing any failed or offline machines. The product comes with or without Microsoft Terminal Server Client Access Licenses (TS CALs).

What’s New in Version 2.0 Citrix Access Essentials 2.0 introduces numerous enhancements to what is already a comprehensive remote access solution. Many of the new features comprise higher levels of software intelligence to automate administrative tasks, particularly as the environment expands beyond a single server. They add up to a richer, more robust access experience with fewer interruptions for the entire organization … and less work for the system administrator.

One or More Servers Access Essentials can now grow in place from one to two or more machines, constituting a centrally managed and co-located server group. In multi-server configurations, one server is designated as the “master server”. It is the central point for administration using the Quick Start tool. The master makes load balancing decisions as well as runs user applications. There can be any number of “support servers” whose primary responsibility is to run applications and store files. Support servers may take over for a master server should it fail or be taken down for maintenance. Single server deployments continue to be supported and benefit from most of the other features described in this section. Note: As with previous versions, the maximum number of supported named users remains at 75 whether running a single server or a group of servers.

Two Modes: Basic and Advanced Access Essentials can be operated in either basic or advanced mode. Basic mode keeps it simple for single server deployments. Advanced mode turns on multi-server features such as load balancing, profile management, and master server failover. A new wizard swiftly guides administrators through the expansion from a single server to a multi-server configuration.

Copyright 2007 – Citrix Systems Inc.

1

New Features in Citrix Access Essentials 2.0 FEATURE

DESCRIPTION

Automatic load balancing across 2 or more servers

Spreads users automatically across two or more centrally managed Windows application servers. New users are assigned to the least loaded server automatically, while bypassing any servers which may be down. Additional servers may join the group at a later time

Profiles automatically follow users across servers

Steps administrators thru largely automated procedure to establish Windows profiles for each user or group of users using AD policies. Each user’s profile automatically follows them to whichever server they are directed to by the load balancing software

Auto-failover of “master server” to designated “support server”

BENEFITS • Minimizes impact of application server failures • Improves response from available servers • Allows one to start small and expand easily to match growing demands • Reduces repetitive configuration and maintenance work for administrators

• Makes it easy for administrators to set up Windows profiles once across group of servers • Ensures users encounter the same settings regardless of which server they have been assigned • Note: Doesn’t affect user’s profile on personal computer Load balancing responsibilities of master server are • Minimizes impact of master server failure automatically transferred to an alternate machine if • Dramatically reduces administrative effort to master server fails or is taken down for maintenance restore a working environment following a major server failure Allows CAE servers to be taken offline with minimal interruption. Disables new logons to the server and prompts users to save their work and exit. Built-in modules providing SSL encryption and external Web portal services may be configured on a separate server between network firewalls. in a “demilitarized zone (DMZ)” After programs have been installed on each server, application publishing parameters can be defined once centrally and applied to the group without having to repeat the procedure on each machine. Automatically replicates print drivers to all servers in the centrally managed group

• Minimizes the disruptions caused when removing a CAE server from duty for planned updates and other maintenance work. • Better shelters internal application servers from Internet security threats • Frees other servers to work exclusively on applications to improve overall performance • Reduces administrative work • Ensure consistent configuration for application publishing parameters across multiple servers

Session Reliability

Masks momentary network disconnections from user by keeping sessions alive then resuming them once connection is restored

• Allows users to continue working uninterrupted despite minor network glitches

Support installation on Domain Controller & Workgroup server

Although discouraged, Access Essentials may be installed on an existing Windows Server 2003 workgroup server or domain controller (if corporate security policies allow it)

• Accommodates very small deployments where the domain controller or workgroup server are the only available central computer systems.

Integration with Web Interface for Sharepoint (WISP)

Cleverly organizes files and programs under SharePoint portals for convenient access over the Web. When a file is selected, the program designated to open it (for example, Excel) will automatically be launched from an application server rather than on the user’s computer

• Easy for users to go into a common SharePoint location for their files and programs • Ensures that authorized users can open files even if their PCs do not have the required application installed • Applications need only be installed centrally without worrying about configuring each user’s computer

Server Maintenance mode DMZ server for Stronger Internet Security Group-wide application publishing Group-wide print driver replication

• Reduces work for administrator • Ensures consistent printer configuration across servers


2

FEATURE

DESCRIPTION

Centralized monitoring and alerting across multi-server group

Generates e-mail alerts to designated personnel • Administrators can concentrate on other regarding important or unexpected system or aspects of their environment knowing that the network events, such as non-operational servers, software will notify them of any serious that can compromise the availability of applications. problems that may arise • They can quickly respond to problems minimizing their impact on users

BENEFITS

Program Neighborhood agent (PN) support

Enables users behind the corporate firewall on the internal LAN to launch server applications directly from shortcuts on their desktops Note: Not installed by wizards, requires PNagent expertise. Caution - Not available to external users

• Provides a familiar “shortcut” alternative for internal users running Windows desktops to launch server-based applications However, it is different from what they would use when externally accessing applications across the Internet

Intuitive Session management tool

Provides administrators with an intuitive interface for overseeing user sessions

• Simplifies how administrators control and monitor user sessions. Comes in handy when they are asked or need to intervene

License Monitoring and Revocation tool

A Quick Start panel lets you see which users are consuming licenses. From this interface, you may revoke licenses

• Simplifies license management particularly when someone has left the organization or is no longer expected to be active, freeing the license for their replacement.

Restricted Privileges for Delegated Administrators

Delegated administrators can view only the Management and Resources tabs, not the Setup tab, of the Quick Start tool. System configuration tasks such as publishing applications and adding servers are available only to full administrators.

• Restricts them to day-to-day administrative tasks such as granting application access to new users and troubleshooting problems with user sessions.

Wizard to go from single server to multiserver deployment

Steps administrators through procedure to gracefully • Simplifies administrative effort to take move from the single server environment to a multiadvantage of added redundancy and load server configuration balancing.

Upgrades from prior versions of Access Essentials

Enables in place upgrade from version CAE 1.0 and • Allows for graceful transition from earlier 1.5 to CAE 2.0, while retaining settings previously versions of product with minimal administrative made via the Quick Start Tool. involvement.


3