Deploying XenApp and XenDesktop with BIG-IP Brent Imhoff – Field Systems Engineer Gary Zaleski – Solutions Architect Michael Koyfman – Solutions Architect

2 F5’s Dynamic Control Plane Architecture Users Resources PhysicalVirtual Multi-Site DCs PrivatePublic Cloud Availability Scale HA / DR Bursting Load-Balancing Optimization Network Application Storage Offload Security Network Application Data Access Management Integration Visibility Orchestration Application and Data Delivery Network

3 What does F5 have to do with Citrix? Citrix recommends an application delivery controller to maximize XenDesktop and XenApp –Providing secure remote access –Supporting shared resources –Ensuring best performance –Protecting against attacks Customers need to choose software or hardware load balancing

4 F5 Networks, Confidential BIG-IP APM: High Performance, Low Cost DMZ 4,000 Remote Users 15,000 Corporate Users Internal LAN VLAN 1 Internet 1,000 Wireless Users Internal LAN VLAN 2 Utilize existing user directory Xen Servers 6,000 Corporate Branch Users F5 Access Policy Manager $188K for 26k users 25% of cost $188K for 26k users 25% of cost Consolidation: 6:1 on Access and Acceleration High performance – 26,000 users at $7+ per user Scale up to 60,000 users Flexible and centralized security policy management Integrated endpoint security checking Integrated application acceleration – up to 10x

5 F5 Networks, Confidential Access Sessions –Application Access Proxy SSL offload, full stateful L3 – L7 proxy Up to 42 Gbps forwarding performance (BIG-IP 11050) –Network Access VPN SSL VPN tunnel Up to 10 Gbps forwarding performance –Portal Access VPN SSL offload, HTTP (HTML, Javascript, and CSS) content rewrite Up to 4.5 Gbps forwarding performance –Application Tunnel VPN SSL VPN tunnel Up to 600 logins-per-second Designed to layer with existing F5 Security Modules APM Performance and Scalability

6 F5 Networks, Confidential 6 Citrix XenApp and XenDesktop Auth Problems Costly, complex, and un-extensible Managing authentication in multiple locations Manual scripting for auth integration NetScaler + Access Gateway Directory Mobile Users STA Citrix XML Brokers Auth Mgmt Internal Users Citrix Web Interface Servers with ICA Auth Mgmt

7 F5 Networks, Confidential 7 Simplified Access for Citrix XenApp Manage access from consolidated solution Eliminate Web Interface Servers and NetScalers Replace Web Interface with Portal Mode Directory Mobile Users Citrix XML Brokers Auth Mgmt BIG-IP Local Traffic Manager + Access Policy Manager CapEx and OpEx Internal Users

8 F5 Networks, Confidential 8 Simplified Access for Other Applications Manage access from consolidated solution Leverage Credential Cacheing and Single Sign On Present OWA, VMWare View next to Citrix Apps in Portal Mode Directory Mobile Users BIG-IP Local Traffic Manager + Access Policy Manager Internal Users

9 F5 Networks, Confidential Dynamic Webtop for End-Users Dynamically present Citrix Apps and Desktops Adjusts to mobile devices Unified End User Experience

10 F5 Networks, Confidential Easy Access Policy Deployment Wizards  Deployment-specific wizards for Citrix XenApp/XenDesktop for LTM virtuals, Network Access, and Web Applications Access  Step-by-step configuration, context sensitive help, review and summary  Creates base set of objects and access policy for common deployments  Automatically branches to necessary configuration (e.g., DNS)

11 F5 Networks, Confidential o Global Traffic Manager improves Citrix performance Xen App/Desktop users sent to best datacenter Continuous monitoring of entire infrastructure including network and application health Automatic failover during outages Persistence prevents broken sessions Monitoring via iQuery BIG-IP Global Traffic Manager BIG-IP Local Traffic Manager Geolocation services L-DNS Deploying Citrix Globally with GTM

12 F5 Networks, Confidential Only ADC with Geolocation Access Rules VPE – Geolocation Rules Custom session variables Custom notification messages Logging Client locations Reporting

13 F5 Networks, Confidential Supporting Xen with BIG-IP

14 F5 Networks, Confidential Dev Central Citrix Group

15 F5 Networks, Confidential Key Points about F5 Citrix Solution  Loadbalancing XenApp and XenDesktop –Pre-built deployment templates and deployment guides for XenApp and XenDesktop –TCP optimizations and SSL offload improve user experience and provide server offload –Provides High Availability to Web Interface and XML broker infrastructure  Remote Access to XenApp and XenDesktop –Transparent implementation that requires no special Gateway Direct configurations –Single policy and configuration setup, and SSO for all clients: desktop ICA, PNAgent, Receiver –Eliminates the need for Secure Ticket Authority for remote access –Eliminates the need for Citrix Access Gateway for remote access –Removes troubleshooting complexity and consolidates all remote access troubleshooting to a single point only – F5. –Accelerates ICA data delivery of WAN links  Loadbalancing XenApp and XenDesktop –Pre-built deployment templates and deployment guides for XenApp and XenDesktop –TCP optimizations and SSL offload improve user experience and provide server offload –Provides High Availability to Web Interface and XML broker infrastructure  Remote Access to XenApp and XenDesktop –Transparent implementation that requires no special Gateway Direct configurations –Single policy and configuration setup, and SSO for all clients: desktop ICA, PNAgent, Receiver –Eliminates the need for Secure Ticket Authority for remote access –Eliminates the need for Citrix Access Gateway for remote access –Removes troubleshooting complexity and consolidates all remote access troubleshooting to a single point only – F5. –Accelerates ICA data delivery of WAN links

16 F5 Networks, Confidential Questions.

17 Summary Highest availability Dramatically increase server capacity Cross-site availability and resilience Pre-authenticate users in the perimeter network Seamless integration with systems management

18 Citrix related resources F5 Solution page for Citrix Solutions – Video demo of BIG-IP deployment for Exchange Server 2010 – F5 Deployment Guide for XenDesktop – F5 Deployment Guide for XenApp – Application Delivery Controller Performance Reports – 5 minutes or less video: BIG-IP APM and XenApp – amp.aspxhttp://devcentral.f5.com/weblogs/psilva/archive/2011/01/24/in-5-minutes-or-less-video-big-ip-apm- amp.aspx Press Release - F5 Simplifies and Centralizes Access Management for Citrix Applications – F5 DevCentral Community Group: Citrix / F5 Solutions –