1. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Ceedo Client Workspace Concept and Technology Overview Ceedo Client Workspace Virtualization Technology About Ceedo The Ceedo Client Concept The Workspace Ceedo Enterprise overview and use cases Security overview

2. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. We are a privately held company, established in 2005 We specialize in developing IT solutions, aimed at the toughest issues confronting modern IT Our products are based on our proprietary run-time virtualization technology – Workspace Virtualization

3. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Our products have been shipped to over 4,000,000 users worldwide (consumer and businesses alike)

4. © 2012 All rights reserved to Ceedo. Managed Workspaces for Productivity and Security Beyond the Organization

5. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Zero-install portable computing environment that can run Windows applications in plug-n- play mode on any PC, and with central management…

6. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Supports any type of portable device including: Encrypted USB Drives

7. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Supports any type of portable device including: Two-Factor Authentication Devices

8. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Supports any type of portable device including: Locally installed, and more...

9. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Mount Applications on Portable Devices

10. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Mount Applications on Portable Devices Workspaces Regular installation into workspace Workspace deployed on portable device

11. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Let users work from anywhere

12. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Manage Apps/Workspaces Remotely

13. © 2012 All rights reserved to Ceedo. Workspace Virtualization

14. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Most virtualization technologies focus on separating specific layers or components of the stack. Virtualize Applications Each app is packaged separately Lots of configuration and packaging overhead Problems for apps to inter-communicate Management requires installed agent

15. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Most virtualization technologies focus on separating specific layers or components of the stack. Virtualize ApplicationsVirtualize Users But the user is this…

16. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Most virtualization technologies focus on separating specific layers or components of the stack. Virtualize DesktopsVirtualize ApplicationsVirtualize Users Heavy Extra Licenses

17. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. We focus on converging these layers and treating them as a single block…

18. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Provides the environment with OS-like resources (not VM): apps are installed normally (no special packaging needed) and inter-communicate freely. Can provide varying degrees of transparency to the host (resource access, processes, etc.). Cross-windows compatibility (Windows 2000 and above). Does not effect or pollute the hosts OS (including user-installed apps) Can be fitted for plug-n-play mode on USB drives, streamed at file level from the cloud, or installed locally. Self-contained Sandboxed Compatible Unobtrusive Versatile

19. © 2012 All rights reserved to Ceedo. Implementations, Features and Benefits Ceedo Client family Unmanaged Desktops / USB on a Stick

20. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Ceedo Enterprise Workspaces are deployed to portable devices with central management allowing administrators to manage corporate applications on un-managed PCs. Used as lap-top replacement (PC on a Stick) Or for special needs: Ceedo for Citrix Ceedo for Avaya Secure browsing/remote connections… Ceedo Personal Workspaces are embedded on portable devices for consumers as PC on a Stick. OEMs, manufacturers and suppliers + Ceedos online shop. Applications Policies Ceedo management tools Main mission: Dealing with portability, home PCs, and allows for managing applications on unmanaged machines beyond the organizations boundary. Or as OEM supplement for portable device…

21. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. A centrally managed Workspace that can be mounted on portable devices or installed locally. Prepared by simply installing apps into the workspace and freezing it. Admin can control host workspace relations Block access to drives, printers, removable drives, etc. Prevent from running on PCs without anti-virus. Prevent specific processes from running. And more… User can run without admin rights in a plug-and- play fashion. Zero footprint + Full sandbox

22. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Laptop replacement / roaming users / home office enabler Allow contactors to use corporate applications Disaster recovery / backup system during critical infrastructure failure Used for pin-point solutions with specific components Ceedo for Citrix: Mount Citrix Receiver, a sandboxed browser, VPN-SSL and PKI middleware - on Two-Factor Authentication devices or Encrypted drives. Ceedo for Call Center: VoIP, messaging, VPN SSL, etc. for call center employees. Ceedo for Safe Browsing: A sandboxes browser pre-configured with self-certificates and made to run a specific URL, with VPN SSL, fully sandboxed, etc. And: deploy applications to end-points… Plug-and-Play Centrally Managed Online/OfflineSecure

23. © 2012 All rights reserved to Ceedo. Mitigating Risks and Elevating Security

24. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Use hardware with encryption and active anti-malware scan Add soft Two Factor Authentication (or deploy on physical 2FA hardware devices) Whitelist processes that are allowed to run in Ceedo (+MD5 signatures) Turn-on Ceedos antivirus detection and OS patch level. Use a VPN-SSL solution with strong Access Control benchmark settings Use an independent browser rather than the virtualized mapped IE Add to the internal browser safe browsing add-ons and configurations Configure Ceedo Enterprise to block writing to host drives, printers, etc. Leave the data in the datacenter or use Citrixs ShareFile / similar solution Employ 3 rd party anti-malware, security applications, soft-biometric apps, etc. * In 2FA devices - Mount components on read-only partition

25. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. User plugs in device Encrypted drive password check Encrypted drive runs antivirus scan Drive is decrypted Ceedo checks host antivirus, firewall, network connection, etc. Ceedo checks processes MD5 signature (continuous throughout session) Ceedo enforces host recourse accessibility and Ceedo updates Ceedo sandbox fires-up with independent runtime environment Second antivirus and/or antimalware scan Two Factor Authentication software/middleware VPN SSL (can include second access control check, such as Juniper SSL) External solutions security (such as Citrixs own security features)

26. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Device Binding Workspaces licenses are device-bound and cannot work if copied to unauthorized devices + most cases of copying a workspace will break it.

27. © 2012 All rights reserved to Ceedo. Flexible Desktops. Dynamic Workplace. Mount pre-configured, ready-to-run, plug-and- play PKI middleware and remote connection solutions on 2FA devices flash memory HARDWARE Extend 2FA USB devices with plug-n-play pre-configured Public Key Middleware and remote office applications such as Citrix Receiver, VNC, VPN-SSL tunnels, etc. Mount pre-configured, ready-to-run, plug-and- play 2FA security SOFTWARE tokens With software based 2FA solutions, such as RSA SecurID Software Token, installed into Ceedos Workspace, any portable storage device can turn into a 2FA device.

28. © 2012 All rights reserved to Ceedo.