Citrix Access Gateway 5.0 Customer Presentation Speaker Name and Title Date of Presentation

What problems are organizations facing? They must support an increasing number of contractors and remote workers. Users expect easy access to apps regardless of location. IT must keep employees productive during prolonged office closures caused by disasters or epidemics. Levels of corporate governance are increasing. Failure to protect sensitive data over the network costs an average of $6.6 Million USD per incident. The Citrix Vision is a world where anyone can work from anywhere

Anywhere Access Allows users to securely access desktops and applications using any device in any location, including home computers and mobile devices. Delivers simple and seamless secure access Introducing HDX SmartAccess

Network and device roaming Enables users’ sessions to transparently and securely move between networks and devices by dynamically adapting access. Delivers simple and seamless secure access Introducing HDX SmartAccess Anywhere Access

Single sign-on Improves the user’s experience by reducing unnecessary authentication prompts and the number of passwords users need to remember. Delivers simple and seamless secure access Introducing HDX SmartAccess Anywhere Access Network and device roaming

Turbo-charged access Empowers users with high performance access to their desktops, applications and data by integrating security and acceleration delivered by Citrix Branch Repeater in a single client with Citrix Receiver. Delivers simple and seamless secure access Introducing HDX SmartAccess Anywhere Access Network and device roaming Single sign-on

Citrix Access Gateway Citrix Branch Repeater Citrix Receiver XenApp XenDesktop XenServer NetScaler Secure access to Citrix app and desktop virtualization An integrated delivery infrastructure Delivery Network

What is Citrix Access Gateway? Citrix Access Gateway™ is the only secure application and desktop access solution that provides administrators with application-level control while empowering users with access from anywhere. Adaptive Policy Control Best Performance & Flexible Deployment HDX SmartAccess

Broad Platform Support Seamless access through Citrix Receiver Citrix Confidential - Do Not Distribute Windows Mac Linux iPhone and iPad Android Blackberry Java

Adaptive Policy Control Citrix Confidential - Do Not Distribute Other SSL VPNs only go this far What Resources? Who and Where? Endpoint Analysis Authentication Access Control Which User What Device What Location What Authentication Web and File Resources Networks Mail Servers Applications How? Application-level Control VPN Access Clientless Access XenApp Applications Virtual Channels XenDesktop Desktops Virtual Channels

Virtual appliance with same functionality as Access Gateway 2010 Designed to upgrade Secure Gateway Capacity for medium-size deployments (500 users per appliance) Available for Citrix XenServer or VmWare ESX (NEW!) hypervisors Ideal for secure access to XenApp and XenDesktop Designed to upgrade Secure Gateway Capacity for medium-size deployments (500 users per appliance) Designed for secure access High capacity (5,000 users per appliance) Upgradable to NetScaler for additional functionality Multi-function appliance (secure access, load-balancing, acceleration) Highest capacity (10,000+ users per appliance) Most reliable hardware Ideal for business continuity across multiple datacenters Appliance Options Access Gateway 2010 Citrix Access Gateway VPX Access Gateway VPX NetScaler MPX 7500 or higher Access Gateway MPX 5500

Which Appliance To Choose Access Gateway 2010 Citrix Access Gateway VPX Access Gateway VPX NetScaler MPX 7500 or higher Access Gateway MPX 5500 How many users? What form factor? Physical or Virtual appliance? Will the appliance be dedicated for remote access? Multi-function appliance required? How many sites need to be supported?

Appliance Failover avoids a single point of failure Basic High Availability Primary Secondary Single External IP Address Single Internal IP Address Available with all appliance models (New! on Model 2010 and VPX) Avoid single points of failure in Access Gateway deployments (including Access Controller servers)

Achieve Business Continuity with NetScaler & Global Server Load Balancing Enable multiple site deployments transparently to users Route users to the nearest and most available datacenter

Simple & Intuitive Administration Citrix Confidential - Do Not Distribute A New, Redesigned Console Simplifies common configuration tasks Provides more visibility to administrators Update to “Standard” admin interface SmartGroups Simplifies policy control over users, devices, and resources Configuration Snapshots Backup and restore configuration states Quickly recover from admin errors A New, Redesigned Console Simplifies common configuration tasks Provides more visibility to administrators Update to “Standard” admin interface SmartGroups Simplifies policy control over users, devices, and resources Configuration Snapshots Backup and restore configuration states Quickly recover from admin errors

New! Access Gateway VPX for VMWare ESX Citrix Access Gateway VPX Access Gateway VPX Same features as the Model 2010 physical appliance Supported on Citrix XenServer and VMWare ESX Supports up to 500 concurrent users List price $995 Same as XenServer version Includes 1 yr Subscription Advantage Free 5-user VPX Express Edition

Limited rack space or infrastructure is available Agility and rapid recovery is important Virtual appliances enable fast deployment and provisioning Downtime is minimized through hardware independence Cost-cutting is a requirement Energy consumption reduced through consolidation Standardizing hardware creates a pricing advantage with server vendors A low-cost training & testing environment is needed Citrix Confidential - Do Not Distribute Choose a virtual appliance when… Citrix Access Gateway VPX

XenDesktop / XenApp-only licenses on all AG products Secure Access for XenDesktop & XenApp XenDesktop & XenApp Secure Access for XenDesktop & XenApp XenDesktop & XenApp Appliances Included with appliance (Access Gateway and NetScaler models) Full Network & Clientless VPN SmartAccessSmartAccess Universal Licenses 2010 (500 users) MPX 5500 (5000 users) Citrix Access Gateway VPX VPX (500 users) Platinum or Standalone

Secure Gateway Upgrade Seamless support for Citrix Receiver and Dazzle Adaptive Policy Control Single point of secure access for all Citrix solutions Cost-effective (No user licenses required) Flexible deployment options Hardened physical appliance Virtual appliance Business continuity options available Best SSL VPN to use within Citrix environments Use Access Gateway with XenDesktop and XenApp

Access Gateway delivers more value than Secure Gateway and saves 50% Cost Analysis Citrix Confidential - Do Not Distribute Secure Gateway Year 1Year 2Year 3Total Dell PowerEdge R200 with Intel E 3110 and Win 2K8 $1,665 Software Cost$0 Annual Hardware Maintenance incl $0 Monthly patch review $100/mo) $1,200 $3,600 Annual review of SG releases (4 hrs) $0$400 $800 Total $2,865$1,600 $6,065 Access Gateway VPX Year 1Year 2Year 3Total Dell PowerEdge R200 with Intel E 3110 (no Win 2K8) $866 Access Gateway VPX cost$995 Annual Hardware Maintenance incl $0 Annual Subscription Advantage renewal incl$129 $258 Annual review of VPX releases (4 hrs) $0$400 $800 Total $1,861$529 $2,919

Citrix Access Gateway Citrix Access Gateway™ is a secure desktop and application access solution that provides administrators granular application-level control while empowering users with access from anywhere.

Feature Overview Citrix Confidential - Do Not Distribute

FeaturePlatform Feature Requires Universal License Easy Application & Desktop Access Provide secure access to all applications and data from any device with a single point of access that simplifies the user experience. Secure access to XenApp and XenDesktop Provides secure access to XenApp and XenDesktop sessions without requiring a VPN connection. Support for Citrix Receiver, Dazzle, and Merchandising Server is also available and provides a strong reason to upgrade from Secure Gateway. Secure network access Full VPN support enables network-level access to any server within the protected network. Secure browser-only access Provide secure access to web applications and file shares using only a browser (no additional client components required). Single point of access Provides a robust landing page for users to easily access all their applications, files, , and other IT resources. End-user localization User interfaces are localized to English, Spanish, French, German, and Japanese. Broad client support Client support for major platforms including Windows 32 and 64-bit operating systems (including Windows 7) and Mac Os X. Endpoint Analysis Ensure that devices are safe to connect to the network and users have a method to easily update their devices to meet established policies. Integrated Endpoint Scanning Continually scan client devices to determine if client security products (anti- virus, personal firewall, or other mandatory corporate programs) are active. Enhanced machine identity scans Determine machine identity by scanning for known corporate images on client devices. Quarantine Groups / Remediation Provides clients that fail end-point analysis scanning with limited access to remediation sites to bring client devices into compliance with the organization’s security policies. (MPX 5500 or NetScaler) Extensible Endpoint Analysis Endpoint analysis capabilities can be extended using industry-standard development tools. (Requires Advanced Access Control server)

FeaturePlatform Feature Requires Universal License Scenario-based Policy Control (SmartAccess) Provides control to configure the most secure access to data and applications by dynamically adjusting access based on device configuration, location, and identity. Adaptive access control Provide access control on resources based on endpoint analysis results. Adaptive access control for virtual hosted applications and desktops Provide adaptive access control to applications and desktops controlled by XenApp and XenDesktop. Adaptive application and action control Control the behavior of XenDesktop and XenApp sessions by preventing operations that may compromise data to unsecure devices. Adaptive session policies Dynamically adjust the user’s session based on the endpoint analysis results. Application and Data Security All data transmitted between the client and gateway is kept private and protected. Standards-based security Ensure all communications are secure with SSL/TLS encryption. Extensive authentication support Provide strong authentication with 2-factor methods and authenticate users against LDAP and RADIUS servers to leverage existing directories within the organization. Accelerated Secure Access A unique solution that ensures users has an access experience that is both secure and optimized to avoid common networking performance issues. Branch Repeater Integration When used together with the Citrix® Branch Repeater™ and Citrix Acceleration plug-in, Citrix Access Gateway can optimize connections to XenDesktop, XenApp, and other traffic within a VPN connection to ensure the best performance over a WAN and overcome common usability problem that exist as a result of network issues. Client certificate support Validate certificates prior to granting access to protected resources in order to verify managed client devices. Basic Split Tunneling control Disables access to all network resources not hosted on the protected network. Enhanced Split Tunneling control Split tunneling can be disabled on clients to shut down direct Internet access but still permit access to resources on the client’s local subnet. (MPX 5500 or NetScaler) Browser cache cleanup Removes objects and data stored on the local browser during the SSL VPN session. (MPX 5500 or NetScaler)

FeaturePlatform Feature Requires Universal License Fault Tolerance Create secure access deployments that guarantee a high-level of availability and reliability. Basic high availability configuration Link appliances to create an active/passive pair, ensuring sessions remain active if the master fails. Optional Global Server Load-balancing (GSLB) Route client connections to the best VPN site based on availability, health, proximity, and responsiveness. (requires NetScaler) Simplified Administration Maximizes efficiency of the IT organization by simplifying common installation and management tasks. Centralized administration Configure and manage Access Gateway appliances from a single management console. Wizard-driven configuration Provides an intuitive series of click-through screens and simple instructions to guide administrators through installation and configuration. Multiple Virtual VPN Servers A single appliance can emulate multiple SSL VPNs by hosting one or more virtual servers each with a unique IP, FQDN, and certificate. (MPX 5500 or NetScaler) Historical Charting Provides administrators with a graphical view of system and user activities. (MPX 5500 or NetScaler) Administrative Auditing Monitor all configuration changes made by administrators to ensure accountability and easy roll-back of configuration errors. (MPX 5500 or NetScaler) Auto-downloading / Auto-updating client plug-in Automatically downloads the Citrix Secure Access plug-in when the user connects to Citrix Access Gateway and ensures they always receive the latest version of the client software. Support for automated distribution of Access Gateway Plug-in Simplify client installation by allowing deployment of the Access Gateway Plug-in through systems and client management solutions.

What’s What? Access Gateway & NetScaler

NetScaler Application Delivery Networking Platform Load Balancing App Firewall Access Gateway SSL VPN GSLB Content Switching SSL Acceleration AppCache EdgeSight AppCompress NetScaler Functional Modules

Access Gateway Functional Modules NetScaler Application Delivery Networking Platform Load Balancing App Firewall Access Gateway SSL VPN GSLB Content Switching SSL Acceleration AppCache EdgeSight AppCompress Not Enabled