1. Product Specialist Enterprise Mobility Technical Readiness EMEA
Tech Talk: How to secure native mobile apps for business use 
Mobile Application Management with Citrix CloudGateway Enterprise 2.5
Rob Sanders
Product Specialist Enterprise Mobility
Technical Readiness EMEA

2. Agenda Introduction to Citrix CloudGateway Enterprise 2.5
Mobile Application Management with CloudGateway Enterprise 2.5
MDX Architecture
MDX Vault
MDX Secure
MDX Interapp
mobile application family

3. Enterprise mobility for all apps and data
Citrix CloudGateway™
aggregate | control
Enterprise mobility for all apps and data

4. How Mobile Feels Today

5. Want access to all apps and data from any of their devices
User Needs
Want access to all apps and data
from any of their devices

6. Enterprise Mobility in Numbers
BYO Devices
Average per Employee
3 Devices
Multiple Locations
Work in multiple locations
65% Employees
App Proliferation
Average Citrix customer portfolio
200+ Apps
Unmanaged Data
Use unmanaged cloud storage
80%+ Fortune 500
Source: Citrix and leading analysts

7. Need to Balance End Users and IT
Freedom
Compliance

8. Need to Balance End Users and IT
Mail,
Browser,
Docs
Manage Devices
Freedom
Any App,
Any Device
Compliance
Secure
Apps
Control Network
Access
Log In
Once

9. Consumerization in the mobile world
BYO Devices
Manage BYO
Manage BYO
MDM
Manage Devices
Manage
MAM
Corporate Devices
2000
2012

10. CloudGateway + ShareFile
Express
Enterprise
CloudGateway + ShareFile
Adopt an App Store to mobilize your XA/XD Apps
Extend your App Store to mobilize all your Apps
A Unified StoreFront to mobilize all apps and data

11. CloudGateway Enterprise 2.5 components
Citrix AppController 2.5
Virtual appliance for XenServer or ESX
Citrix Access Gateway Enterprise build e
Enhanced version of Access Gateway Enterprise with new logic for MDM and MAM
Citrix Receiver
Receiver for iOS 5.7
Receiver for Android 3.3
Citrix StoreFront (optional)
Unified storefront needed when also providing access to Citrix XenDesktop resources

12. CloudGateway Enterprise architecture
Citrix
CloudGateway
Mobile
Web
NetScaler/
Access Gateway
StoreFront
AppController
SaaS
Citrix Receiver
FMD ShareFile
XenDesktop/ XenApp

13. Simple fit into existing Citrix environments
CloudGateway
Mobile
NetScaler/
Access Gateway
Web
Citrix Receiver
Web Interface
AppController
SaaS
FMD ShareFile
XenDesktop/ XenApp

14. Citrix Mobile App Management
Overview
Full support for both personal and corporate usage (BYOD)
Corporate apps and data secure even on employee-owned devices
New consumer-driven devices supported immediately
No risk of corporate data loss or compliance exceptions when:
Device is lost or stolen or employee leaves organization
Collaboration / file sharing apps used on the device
Governance is built-in
Policies can be updated on hundreds of apps with no requirement to change source code
No requirement for developers to change the way they develop apps or learn mobile security standards

15. @ Life
@ Work

16. @ Life
@ Work
MDX Vault

17. @ Life
@ Work
MDX Interapp

18. @ Life         MDX Policy Allow Camera InterApp Sharing
iCloud Backup 
@ Life
Enable DLP 
Require Authentication 
Trusted Network Only 
Disable printing 
Restrict outbound URL 
Offline lease period
24 h

19. Secure container that enables app and data containment, wipe and lock
MDX technology
MDX Vault
Secure container that enables app and data containment, wipe and lock
MDX Access
Micro-VPN tunnel to corporate resources from mobile apps along with access control policies
MDX Interapp
Control inter-app communications with external apps, cloud, clipboard & devices

20. MDX Vault Citrix Receiver Native mobile Apps MDX Policies
MDX Interapp
Native mobile
Apps
Citrix Receiver
Deny SMS
Disable iCloud
Disable screenshots
Force authentication
Block jailbroken device
MDX Policies
during app wrapping
app private data vault
app private data vault
CloudGateway
private data

21. MDX Access Access Gateway CloudGateway clientless VPN mode
private data
Citrix Receiver
MDX Interapp
Access Gateway
clientless VPN mode
SSL SSL SSL SSL
CloudGateway

22. MDX Interapp Citrix Receiver CloudGateway Open with… Deny access
to in-secure
applications
CloudGateway
private data

23. MDX Architecture Receiver CloudGateway Managed Applications
MDX Access (MicroVPN)
Gateway Services
MDX Interapp (Secured IPC)
logon
policies
MDX App Vault
MDX App Vault
MDX App Vault
Receiver
CloudGateway
app private data vault
app private data vault
app private data vault
App vault shared data
MDX Framework provided by MDX Packager

24. MDX Packager Two versions of MDX Packager:
MDX Packager for iOS applications
MDX Packager for Android applications
MDX Packager requires Mac OS X
Takes a pre-compiled native application bundle for iOS (.ipa) or Android (.apk) as input
Produces repackaged application bundle with Citrix MDX logic inserted (.mdx)
Recertifies the repacked app with the enterprise distribution profile of the customer

25. Mobile Application Policies

26. First time logon: lightweight mobile device registration
Receiver silently registers device with AppController
Receiver provides device unique token and selected device information
AppController issues unique device ID  Receiver
AppController links device ID/tokens to users
Admins can view all devices registered to users
Devices can be locked or marked for app data wipe
Receiver and MDX apps poll CG current lock/wipe status
Gateway must be reachable, but no logon needed

27. mobile application family
Citrix
mobile application family
@WorkWeb
Secure Browsing
@WorkMail
, calendar & contacts
ShareFile
Follow-me Data
GoToMeeting
Integrated Collaboration
Podio
Social Team Collaboration
mobile apps
Citrix

28. Mail, calendar, contacts Enterprise class security
@WorkMail
@WorkWeb
Mail, calendar, contacts
Enterprise class security
Beautiful native experience
Full inter-app integration
MDX-secured
Secure browser
Internal web app access
Full inter-app integration
Consumer experience
MDX-secured

29. Why introduce a new mail client?
is:
Secure
All messages and attachments are encrypted
Content can only be used by other CloudGateway managed applications
Access Exchange servers via an app specific SSL VPN connection
A better user experience for work
Designed to work specifically with Microsoft Exchange and ActiveSync
Allows effective meeting creation and scheduling
Intuitive for existing Outlook users
Integrated queries to the Global Address List for all address actions
Integrated with Citrix Receiver and ShareFile
Manages data and access to apps not available on mobile devices

30. Secure Mobile Mail start
inbox
create new message
add attachment

31. Secure Mobile Mail start
calendar view
(portrait)
create new invite
add people

32. set time
check availability

33. complete invitation
add attachments
review & send