What is VPN and How does it Works

Доброго времени суток, уважаемые читатели. Снова с вами российский голос технической поддержки Citrix.

В версиях Citrix XenApp 6.5 Feature Pack 1 как с так и без него, обнаружена уязвимость службы XML, которая может быть использована злоумышленником для исполнения произвольного кода в контексте сервисной учётной записи на сервере XenApp. Уязвимость может быть использована отправкой особо обработанного пакета уязвимому компоненту.

Смягчающие факторы
Для использования уязвимости, злоумышленнику нужен доступ к сервису XML. В рекомендованных к внедрению конфигурациях, XML сервис недоступен из сети Интернет

Что нужно сделать

Citrix настоятельно рекомендует установить следующие заплатки :.

• Для Citrix XenApp 6.5 for Windows Server 08 R2 Feature Pack 1 с заплатка доступна CTX135025 .
• Для Citrix XenApp 6.5 for Windows Server 08 R2 Feature Pack 1 заплатка доступна CTX135499 .

Оригинал статьи CTX135066.

Also in time for the new year, this version meets the demands of improving the user experience and adds support for StorageZones together with CloudGateway 2. To update your Mac, visit http://receiver.citrix.com/.

As before, you can configure using an email address or a server or activate the opening of a supply or even deploy file using an ESD tool. However, you can not deploy this version via the Merchandising Server. Full documentation is on eDocs.

Here are more details about what is new, what has changed, and what we are working on it. Please continue to let us know where we can improve. Its a great help

SSO Access Gateway :.

• The use of a single session for VPN and clientless access so that a user logs on receiver once for the two types of access and consumes a single license.
• automatic routing ICA traffic through the Access Gateway Proxy ICA for optimal user experience.
• automatic start a VPN tunnel when a user connects. This feature requires that you disable Single Sign-On with Windows setting on the access gateway

The connection and support operations for disconnection Access Gateway SmartAccess controls improved ..

• users are invited to connect to the receiver only when a connection is needed. Actions that require a log on include starting an application from the receiver or the Finder, using the Refresh command applications, viewing or searching for applications, or adding an account. A user is connected only to the account associated with the requested resource.
• Users remain connected until the choice to leave or disconnect Receiver, err on the internal network to an external network, or remove passwords.
• tunnel VPN is established if necessary. Internal users are connected to StoreFront

Other usability enhancements :.

• The application button is removed. Users can now simply click to add an application and, if an application to add the application is required, a dialog box appears.
• The error messages are clearer.
• All Receiver user interface (UI) images are consistent retina display.

StorageZones

• receiver provides support for Sharefile StorageZones that allow the storage of user data to close.

SHA2 Certs.

• You can now use server certificates with 2048 bit RSA public key and a SHA256 hash algorithm signing.

What is new

Access Gateway Plugin for Mac 2.1.4 is required for the new integration Receiver-AG. It supports OXS 10.7 and 10.8 and both Access Gateway Enterprise Edition 10.x 9.3and Click here to update this version

HDX RealTime Optimization Pack ™ for Lync for Mac -. Optimization Pack Lync provides clear, crisp and high-definition video calls in conjunction with Microsoft® Lync ™ by leveraging the user's device for the treatment of local media. Click here to find the update December that supports Mac -mycitrixID requuired.

What has changed

This receptor Mac version can not be deployed or upgraded via Merchandising Server. We decided to focus engineering efforts on ultimately allowing the configuration directly from StoreFront and software updates directly from Citrix, saying it would have the greatest long-term value.

What we are working on

First, we redouble our efforts to meet the recently reported problems. There session reliability and reconnect the questions we hope to conquer in the coming weeks.

From there, the next update for Mac should happen with the Excalibur version of XenDesktop next half year. provided featurings include IPV6, office functions for ease of use, and as mentioned above automatic notifications of updates.

Again, we welcome your feedback on.

In a world BYOD (Bring Your Own Device) you need to control applications and data, not devices and that means you have to go beyond MDM . Organizations are rapidly adopting a better approach that shifts the focus from management devices themselves to manage their content, applications and data.

Check out the brand new MDM kits on Citrix janitor marketing and show your customers how to go beyond MDM to manage the explosion of devices, applications and data impact on their organization and how they can get company information whatever devices their users choose.

On Citrix Concierge MDM market research and you will be able to select and customize

• The business kit Go Beyond MDM Enterprise Mobility (strategic IT - White Papers)
  

• The technical kit: Go Beyond management mobile devices to support BYOD (Functional iT - white Papers)
  

both kits presented above include : 2 copy email blocks an email template, a landing page, a white paper analysts (TechTarget), a Citrix white paper, presentation to customers, a platform of sales and positioning the training and sales reference card.

Share with your customers today!

Follow me on twitter @GabriellaFPinto

Citrix Auto Manager media marketing
Twitter
Facebook
LinkedIn

The new year brings a fresh new series of beginnings and opportunities for all of us, the workplace does no exception. Often, the new year brings with it the historical and fresh challenges and, at a time when we are all trying to do more with less, when it comes to your update your website - is it really so that a you can do more with less? Of course, with Citrix Syndication!

If you are enrolled in the program, you will know first hand why Citrix Syndication is right for you. Now we want to show you how you can implement and make your web content to the next level.

Thursday 31, we will hold an exclusive 30 minutes 'how' webinar dedicated to guiding you through the way in January to implement the Citrix content directly to your website. Discover how you can quickly get the most out of your Citrix Syndication registered account to restart the content, generate leads and maximize your marketing efforts - all in just a few simple steps. And if you have not registered the program? Do not worry, its as simple as 1,2,3. For more information, click here.

This 30 minutes webinar will provide an update of content and resources available to you with a detailed step by step demonstration how to implement and get the most of your Citrix account Syndication

Citrix Syndication 101: How to implement
Date: Thursday, January 31, 2013
Time :. 10:30 - 11: 00 pm ET / 16: 30 to 17: 00 CET
Duration: 30 Minutes

therefore if you saved, not sure what the next steps are, or maybe you had organizational changes and the need to bring someone to speed, then this webinar is the perfect way to see and learn how syndication can be easy.

about Citrix Syndication
Citrix Syndication is a free service that allows you to host quickly and seamlessly Citrix Content in your own site. Enjoy new leads and sales opportunities by offering your visitors with a timely content Citrix and downloadable assets such as videos, white papers, industry and briefing notes.

With Citrix Syndication you remain in complete control in selecting the content you want to view from your own private dedicated partner console where you can customize the syndicated content, add your own resources, view statistics, lead management and more. With content available in several languages, Citrix Syndication is the ideal way to offer content rich quick Citrix, easy and free.

Not registered?
Visit Infocenter Citrix Syndication for details about how content syndication and to register. Take a look at our sample of partner sites, see the available content, test lead capture forms and see the variety of resources, including white papers, videos, and technical specifications.

Eligibility
Citrix Syndication is available to all Citrix Platinum specialists, Gold, Silver and SMB LAR and distributors.

Last year, with version 5.1, VDI-in-a -Box introduces the ability to take advantage of two separate data stores for VDI-in-a-Box for better use of direct storage servers. When you use Hyper-V or ESX hypervisors, VDI-in-a-Box allows you to set a second datastore for separate storage of gold images and linked clones. Now with version 5.2 of VDI-in-a-Box, we introduced the possibility for a third datastore. In addition to the datastore options for images and gold desktops, there is now an option to store the personal vDisk associated with personal computers on a separate datastore. Administrators now have the ability to store images, workstations, and personal drives separately or together on the datastore of their choice. Best of all, this option is available on all supported hypervisors.

During the initial setup, vdiManager uses a single datastore. This primary database contains all the gold images, desktop instances, and vDisk associated with personal computers. Enabling multiple datastore function in advanced vdiManager properties can separate these three types of data in their own data stores.

The flexibility of multiple databases can be exploited by storing desktops on a pooled database for SSD IOPS performance improved. Since the workstations pooled require much less space, better IOPS performance can be obtained by adding small amounts of SSD to a server. Using SAS drives for primary datastore will provide more storage capacity to store the largest gold images. Using both SAS and SSD storage in servers enables VDI-in-a-Box to avoid being constrained by the limits IOPS SAS disks or low capacity SSD. With this combination of IOPS and storage space, administrators can pack more workstations than ever on each server in the VDI-in-a-Box network.

The third datastore option for personal records allows the administrator to place the PvD on SAS or SSD datastores. If there will be a lot of personal workstations and personal records will have a large amount of space, it may be advisable to place them on SAS drives. If there is not a lot of PCs in an environment, and they do not take a large share of space, they can be placed on the SSD datastore to improve reading and writing performance. Another option when running the VDI-in-a-Box environment on Hyper-V hypervisors 2012 or ESX datastore is to configure the personal drive to use shared storage. Doing this creates the added benefit of allowing personal computers to survive a server failure without the need for manual backup and restoration of personal records. In this scenario, each server in the VDI-in-a-Box network will be configured to use the same shared storage to keep personal records. When a server is hosting a personal computer, the personal record associated with that office would be stored on discs that can be played on all servers in the grid. In case the server hosting a personal computer should fail, a new office can be spun on a running network server and the new office can be reconnected to the same personal record, because it is being reading from the shared storage.

For more information on how the use of multiple datastores can improve performance, run more virtual desktop per server, and improve high availability of personal computers, please see the following reference links:

http://support.citrix.com/article/CTX136080

http://www.citrix.com/tv/# videos / 7397

Last week, we published a new multi XenServer guide:

CTX136354- multipathing configuration for XenServer

http://support.citrix.com/article/CTX136354

This guide provides significantly improved guidance on how to configure XenServer multipathing, including iSCSI, Channel and ALUA fiber. It also provides procedures to help you validate your configuration is correct. This guide revise significantly the previous guidance, in particular as regards the creation of SR for use with multipathing. Although this guide applies to XenServer 6. x family, it is probably useful for all versions of XenServer

Some highlights :.

Test your computer (p. 55)

procedures in this guide include those to help customers validate their multichannel configuration all active paths and data on all paths is balanced. If multipathing is misconfigured, it is possible, in some cases, both paths to be active, but less than optimal throughput or even have a road that barely works (but is still marked active). The procedures in this section help to ensure this is not the case.

XenCenter Wildcard (*) Option (p.49)

(XenCenter SR Wizard > Location page > Target IQN box.) not select the generic option whenever it appears. Just select on the basis of guidelines on pages 50-52. Using the generic option when it is not appropriate may actually slow storage performance.

This guide also provides iSCSI HBA configuration, zoning requirements Fibre Channel, preliminary troubleshooting information, and the list of additional references. As always, your suggestions and comments are welcome.