A Quick Tour of Ceedo Deliver environments to un-managed PCs

When working beyond organization, the administrator needs to manage the unmanaged. How to deliver org. apps? How to separate the org. environment from the host? How to manage and revoke rights? How to update\add\remove apps? VDI\TS is not always an options (price, complexity, performance, etc.), and even when it is, managing it is a huge challenge.

Hard DiskAnother HDD Operating System Desktop Environment Applications Conceptually… If you could some how create a barrier – an abstraction layer – in the PC stack, you could: Move entire discrete desktops Hard Disk Operating System Desktop Environment Applications

Abstraction Layer = Virtualization

Ceedo’s virtualization engines - overview Disk virtualization Ceedo has an internal VHD-based virtual disk-mounting system Disks are mounted through internal OS disk interface Disks can be mounted from local files, over UNC or via our Disk over IP protocol Disks can be mounted with no mount point Create child disks, merge disks, etc. VHD Hard Disk Operating System Desktop Environment Applications Full environment virtualization Complete capture of all R/W transactions at kernel-level Every operation the environment tries to execute is manipulated and redirected Includes all system tweaks, device drivers, settings, files, etc. Can create fully captured layers for use on other Windows PCs Hard DiskVHD Operating System Desktop Environment Applications

How do we isolate windows components? Think of regular firewalls: Internet\network firewalls allow companies to decide which applications can have incoming or outgoing connections to the network depending on rules Now think of PCs: Our Kernel Firewall allows companies to decide which applications can have access to the OS and other apps! Completely isolating apps depending on rules

Extending IT reach beyond the organization Hard DiskVHD Operating System Desktop Environment Applications

Computing beyond the organization One of the major problems facing modern IT, is delivering Windows software applications and working environments (i.e. data, permissions, etc.) to users that are not directly managed by the organization, or that use un-managed machines.

Computing beyond the organization Managed machines Administered and secured via traditional means, and applications are delivered in various ways. Unmanaged machines Administer and secure: VPN, 2FA and DLP Desktop (workspace) Delivery: ???

Current solutions for applications delivery Fully managed corporate PCs Companies provide laptops, desktops and sometime entire cloud infrastructures to contractors and outsourced assets, with a huge bill at the end. Virtual applications Require companies to go through a tedious task of packaging applications, infrastructure to deliver them, supporting only ~65% of applications and with limited management over WAN. Remote unattended installation Requires companies to create MSI packages that install themselves on a client machine with hopes that no conflicts will arise and with very limited management and auditing possibilities. VDI and Terminal Sessions Expensive to implement, works only online, and might diminish user experience to an unacceptable level (usually appropriate only for basic task workers)

Ceedo in applications delivery context Hard DiskVHD Operating System Desktop Environment Applications

Ceedo in applications delivery context Deploy an entire desktop without the OS or hardware With Ceedo companies can deploy an entire desktop without the OS itself, that works offline on the end-point machine with all the applications the users require (not a VM!). Applications “Layer” Applications are not packaged separately and do not require any packaging or special tweaking. Simply “record” an application installation, and “playback” on a client machine. Manage permissions and secure data Applications are stored in encrypted containers locked to a specific machine ID and user SID. Application Layers can be deployed internally inside organization Same workspaces used for beyond-premise, can be deployed to internal employees desktops, allowing for single- image management (esp. important in VDI).

Ceedo’s application and workspace delivery 1) “Record” applications – capture everything an installer does

2) “Playback” applications – merge “layer” with underlying OS

3) Store all components in a locked-down encrypted container

4) Update and manage remotely from a central location Management Console Layers Repository