XenTegra - The Citrix Session

The Citrix Session: Citrix Features Explained: Browser security in Citrix Secure Private Access

July 01, 2022 XenTegra / Andy Whiteside / Bill Sutton Season 1 Episode 108
XenTegra - The Citrix Session
The Citrix Session: Citrix Features Explained: Browser security in Citrix Secure Private Access
Show Notes Transcript

Swift and easy access to information is the lifeblood of productive remote work. You want your hybrid workers to be able to easily browse the internet for whatever insights and resources they need to do their best work — but how do you protect these users from browser-based attacks? It’s tempting to adopt strict browser policies to liberally block any site or app that might be risky, but draconian internet policies can frustrate your hybrid workforce. This can lead to users devising complex and vulnerable workarounds to access the sites or apps they want to access, which puts your organization at risk.

This is why Citrix Secure Private Access offers remote browser isolation and security capabilities. Using secure browser, Citrix Workspace Browser, and the mobile web viewer for Citrix Workspace, your hybrid workers can easily access the sites and web apps they want in a safe browsing experience. This protects users from browser-based attacks and malware to create proper internet security policies without disrupting the remote work experience.



Host: Andy Whiteside
Co-host: Geremy Meyers
Co-host: Todd Smith

WEBVTT

1
00:00:02.939 --> 00:00:08.370
Andy Whiteside: hi everyone and welcome to episode 108 of the citrix session i'm your host Andy why so i've got to sit rights with me.

2
00:00:09.300 --> 00:00:20.460
Andy Whiteside: here on the call I tell you what guys I JEREMY you would know this place, maybe a spirited cyclist up in Davidson North in I walked in there Friday I didn't mean to I take my son to the dentist.

3
00:00:21.540 --> 00:00:31.260
Andy Whiteside: The bike shop is right beside the dentist I saw exactly the bike i've been looking for kind of looking for, and so I just started talking to the guy and I end up buying it.

4
00:00:33.120 --> 00:00:39.660
Andy Whiteside: You know I i've needed a bike my bike 20 years old, it weighs 1000 pounds it's horrible it's a horrible mountain bike I needed a bike.

5
00:00:40.110 --> 00:00:47.850
Andy Whiteside: I deserve a bike I bought a entry level specialized was not that Nice of a bike but still nice long story short i've got on my citrix shirt.

6
00:00:48.180 --> 00:00:56.430
Andy Whiteside: And the guy who owns the bike shop asked me what a citrate was and he automatically associated with citrix because, as I started talking he started talking about his.

7
00:00:56.880 --> 00:01:05.220
Andy Whiteside: His file storage aka share file aka citrix files so it's it's still out there, people still still have an idea what it is.

8
00:01:06.780 --> 00:01:07.440
Andy Whiteside: that's a while.

9
00:01:08.040 --> 00:01:09.180
Geremy Meyers: that's very well that's awesome.

10
00:01:09.630 --> 00:01:12.570
Todd Smith - Citrix: i've got relatives and either still think I worked for the gotomeeting company.

11
00:01:15.120 --> 00:01:17.640
Andy Whiteside: Well, and you still try to explain to them, where you just let it go.

12
00:01:18.000 --> 00:01:18.840
Todd Smith - Citrix: I just let it go.

13
00:01:18.900 --> 00:01:22.110
Geremy Meyers: You just let it go yeah sometimes it's not the juice isn't worth the squeeze.

14
00:01:24.330 --> 00:01:30.870
Andy Whiteside: Well guys i'm going to share my screen Well, first of all, how are you doing how have you been what's going on in your world JEREMY i'll start with you.

15
00:01:31.470 --> 00:01:39.690
Geremy Meyers: Oh man, so I just got back from vacation I spent a week and Alaska slash the Pacific Northwest so i've never been up there before and.

16
00:01:40.320 --> 00:01:54.330
Geremy Meyers: it's pretty amazing so we did a cruise seven day cruise and we made the trip up the Juno got out and the little hiking saw I saw a glacier that was pretty amazing it made our way back so we're good time good time.

17
00:01:54.690 --> 00:02:00.840
Andy Whiteside: I did that trip the reverse order from anchorage down to Vancouver when I was 13.

18
00:02:02.520 --> 00:02:05.670
Andy Whiteside: wasn't wasn't the most exciting cruise for a 13 year old to go on.

19
00:02:07.650 --> 00:02:17.460
Andy Whiteside: But yes i've been there i've been there twice since then for work which has been awesome to go, and you know spend some time and work and how you can do stuff if you haven't been gotta go.

20
00:02:17.910 --> 00:02:22.860
Geremy Meyers: You gotta go you gotta go so you've done citrix work up in September work up in Alaska.

21
00:02:23.550 --> 00:02:25.740
Andy Whiteside: citrix work up and enrich.

22
00:02:28.110 --> 00:02:39.750
Andy Whiteside: I am I left there thinking Oh, I need open an office here there's so much opportunity well working with the state in the organization and there's, no, no, not allowed citrix partners up there yeah yeah.

23
00:02:42.060 --> 00:02:49.350
Geremy Meyers: there's a there's a there's a town and so i've found out because it wasn't you know right before she moved to juneau she lived in kings cove I want to say.

24
00:02:49.770 --> 00:03:04.620
Geremy Meyers: Okay talk, which is, it is the last peninsula before the illusions, you know shoot out towards roster right and she mentioned to me that the next closest big town was anchorage which was 1000 miles away so just to put the whole thing in perspective, like how big that state is.

25
00:03:04.800 --> 00:03:06.840
Geremy Meyers: yeah it's ridiculous.

26
00:03:07.590 --> 00:03:08.490
Andy Whiteside: I was listening to.

27
00:03:10.800 --> 00:03:19.020
Andy Whiteside: Something recently I think on national parks or maybe it was something else yeah Maybe it was like the Andrew Jackson error of politics and.

28
00:03:20.190 --> 00:03:31.050
Andy Whiteside: Oh no, it was actually related to yeah it ended up in the civil war and steward the Attorney General or the Secretary of State at the time, he was the one trying to buy Alaska.

29
00:03:32.250 --> 00:03:40.950
Andy Whiteside: Actually, they tried to buy it before the civil war and then after the civil war, they revisit it and nobody understood why and now it's a no brainer that was that was that was a deal.

30
00:03:41.490 --> 00:03:42.780
Geremy Meyers: It wasn't deal yeah.

31
00:03:43.470 --> 00:03:46.770
Todd Smith - Citrix: It was originally called seward's folly because of because of that.

32
00:03:47.490 --> 00:03:48.180
Is.

33
00:03:49.800 --> 00:03:56.670
Andy Whiteside: Before I go to Todd here for what's new and todd's world JEREMY I have to ask how did your virtual desktop performed from a cruise ship, I know you tried.

34
00:03:57.000 --> 00:03:58.860
Geremy Meyers: I didn't try I didn't even remotely try.

35
00:03:58.920 --> 00:04:09.870
Geremy Meyers: With the Internet, first of all, they had the Internet on the cruise ship is notorious and that stretch of of water for not working in general, so we got a little Internet the ports, but when you were cruising up and down the straight.

36
00:04:10.230 --> 00:04:17.520
Geremy Meyers: yeah even the whatever satellite service they've got was was not good, so I tried to turn it off, I thought about it.

37
00:04:17.910 --> 00:04:18.690
Andy Whiteside: But I didn't.

38
00:04:18.810 --> 00:04:19.530
Geremy Meyers: I didn't try it at all.

39
00:04:20.370 --> 00:04:20.610
Todd Smith - Citrix: well.

40
00:04:20.700 --> 00:04:30.990
Andy Whiteside: I mean kudos to you for turning it off it's also then that's pretty a guidance right, I mean what we do in the world of uc digital workspace vdi, if you will, in some cases, many cases.

41
00:04:31.320 --> 00:04:45.360
Andy Whiteside: Look, I mean there's a there's a time to know when the whole time and time to know when to fold them and, in some cases it's not the right solution because of that pesky your network thing that you know it's extremely important to be stable, reliable vast.

42
00:04:47.010 --> 00:04:47.310
Geremy Meyers: yeah.

43
00:04:48.660 --> 00:05:00.210
Geremy Meyers: yeah, although I will say this we've got I don't think I can name drop, but we do have some cruise lines that we're leveraging our branch for Peter, you know, for that kind of use case just working from the ship's doing that sort of thing.

44
00:05:00.990 --> 00:05:11.700
Andy Whiteside: Well Todd you may remember, and I know we got a limited amount of time here so don't that memory lane year, but there was somebody on my team has a citrix se that was like a week or two at a time got to go on a cruise ship and do you see where do you remember this.

45
00:05:13.920 --> 00:05:26.130
Todd Smith - Citrix: yeah there was a one of the one of the one of the cruise lines out of Miami had they had a couple of things that they were that they were investigating right one of them was the entertainment system.

46
00:05:27.150 --> 00:05:45.600
Todd Smith - Citrix: was going to be delivered via PBS right so they're going to have all of the devices booed off of you know, an image, based on what type of device, it is so if it's a crew facing device, it was going to have a obviously a crew image, if it was going to be something in a state room or a.

47
00:05:46.680 --> 00:06:03.570
Todd Smith - Citrix: or any of the the hotel areas of the the ship, they were going to have that and then there was another one for purely entertainment right yeah so very similar to some of the old wise use cases that they had with some of the hotels yeah where they wanted to be able to deliver.

48
00:06:04.800 --> 00:06:11.670
Todd Smith - Citrix: You know, Internet access via a PC experience, without giving them putting a PC in every single room.

49
00:06:12.390 --> 00:06:19.050
Andy Whiteside: yeah I love that you just touched on, I think three different types of potential virtualization concepts, one would have been streaming virtualization.

50
00:06:20.280 --> 00:06:27.600
Andy Whiteside: One would have been presenting virtualization which would have been the virtual desktop but, most people call the virtual desktop streaming that's not provisioning services is streaming.

51
00:06:28.170 --> 00:06:33.630
Andy Whiteside: presentation is that one, and then you know machine virtualization potentially with what was called Zen client.

52
00:06:34.590 --> 00:06:37.800
Andy Whiteside: would have been another use case and all the things you just said and.

53
00:06:38.250 --> 00:06:45.780
Andy Whiteside: You know the truth is that the day the presentation virtual desktop hosted virtually you know back on some containerization solution.

54
00:06:46.170 --> 00:06:58.860
Andy Whiteside: And then presented to wherever has ultimately one out and that's because of that network thing we're just talking about has gotten better and better and better, to the point where on airplanes now sometimes it's a great experience and sometimes it's still crap but it's getting there.

55
00:06:59.370 --> 00:07:03.690
Geremy Meyers: Believe it or not, this is going to be a good segue today's topic so i'll just go out there there's a tease.

56
00:07:04.260 --> 00:07:07.440
Andy Whiteside: All right, real quick Todd anything, important that we know about, in your role going on.

57
00:07:07.770 --> 00:07:21.180
Todd Smith - Citrix: yeah so a couple of things up in the Boston area, we had a we finally hit 90 degrees over the weekend, so people are complaining about the heat, whereas three months ago they were complaining about the cold, so you know so cycle of life up here.

58
00:07:23.010 --> 00:07:32.580
Todd Smith - Citrix: But other than that you know it's great seeing everyone seeing everyone's kids graduate from high school college kindergarten you know nursery school.

59
00:07:32.970 --> 00:07:42.750
Todd Smith - Citrix: it's you know it's that time of year and it's great also to hear people are taking some time off and enjoying themselves and kind of finding a way to disconnect from work either.

60
00:07:43.320 --> 00:07:54.660
Todd Smith - Citrix: By doing it intentionally by not paying attention or not not trying to work while they're on vacation or unintentionally like having a ship that doesn't always have great reliable Internet access.

61
00:07:56.160 --> 00:08:08.460
Andy Whiteside: So this week is the week is integrity gives away our bronco or Ford bronco with our work has no boundaries campaign, and you know, I think, as I say that out loud sometimes i'll make work has no boundaries yay and then i'm like work has no boundaries, no.

62
00:08:08.460 --> 00:08:09.000
No.

63
00:08:12.900 --> 00:08:18.180
Andy Whiteside: Well i've committed to work to live live to work live to work so i'm toast anyway.

64
00:08:19.770 --> 00:08:27.030
Andy Whiteside: Alright, so for today's topic we have a concept from citrix I want to review, let me share my screen.

65
00:08:32.370 --> 00:08:38.790
Andy Whiteside: And this concept around citrix is where you guys are using your blog workspace is workspace.

66
00:08:39.450 --> 00:08:49.620
Andy Whiteside: To talk about explain features and I, you know centered so over the past 10 years has really come out with new things to try to move beyond not run away from the move beyond.

67
00:08:50.040 --> 00:08:59.910
Andy Whiteside: The virtual desktop virtual APP presentation world i'm a huge fan of the the old product name presentations server because, as a truest I thought it really.

68
00:09:00.300 --> 00:09:04.800
Andy Whiteside: It really did exemplify what the product did of course marketing guys didn't like it too much.

69
00:09:05.520 --> 00:09:13.950
Andy Whiteside: But now we're talking about things like you know how to how to allow people to work remotely but work securely without having to go through that.

70
00:09:14.400 --> 00:09:29.580
Andy Whiteside: Virtual presentation layer guys any just kind of general ideas and we're going to do a bunch of these features explain this one's called this is, I Stephen bells bills citrix features explain this one's a browser security in citrix secure private access.

71
00:09:30.600 --> 00:09:37.080
Andy Whiteside: Can you give any comments on just the overall concept of why it's important that citrix starts to break down each feature and explain them one, at a time.

72
00:09:38.700 --> 00:09:49.950
Geremy Meyers: um man, so I know from a security perspective, we like to talk about citrix being a part of a layered approach to security so there's lots of parts and pieces that make up a security strategy right so.

73
00:09:50.310 --> 00:09:58.980
Geremy Meyers: You know, trying to walk in the door, with a customer with just an organization and have a discussion around you know just citrix security, I mean that's a that's a loaded question right so.

74
00:09:59.370 --> 00:10:09.690
Geremy Meyers: You know, there is a lot that sectors can do as a part of that strategy, I think it's very helpful to break down just where some of these parts and pieces fit, so I mean secure browser is a.

75
00:10:10.230 --> 00:10:15.540
Geremy Meyers: First of all, is a great use case but I mean listen, you know, at the end of the day, you know Andy before I even took this job.

76
00:10:15.960 --> 00:10:24.780
Geremy Meyers: 10 years ago if you were to ask me the question what's the number one published application in a presentation server farm, so what I did there, what would you tell me.

77
00:10:26.400 --> 00:10:38.910
Andy Whiteside: Well, so I would tell you and I don't know if you're saying this question because you know i'm going to answer answer different events I say windows like windows Microsoft windows, is that application that's most widely available through a presentation phone.

78
00:10:39.780 --> 00:10:43.140
Geremy Meyers: or you're not wrong, but what would be the second most.

79
00:10:43.770 --> 00:10:44.880
Geremy Meyers: yeah popular.

80
00:10:45.030 --> 00:10:46.080
Geremy Meyers: Published application.

81
00:10:46.470 --> 00:10:57.540
Andy Whiteside: And that's the Andy answer and people look at me weird but I truly believe that is the answer, however, the second most widely and probably the one I did the most of in my career as an admin is a browser.

82
00:10:57.960 --> 00:11:00.210
Geremy Meyers: it's a browser yeah yeah, so I think.

83
00:11:01.290 --> 00:11:05.250
Geremy Meyers: You know, and why were folks doing that right, I mean the biggest thing was number one.

84
00:11:06.690 --> 00:11:14.220
Geremy Meyers: A lot of cases, honestly, it was trying to get users access to an internally based APP right, so you know how do you do that without a vpn that's all part of the story.

85
00:11:14.910 --> 00:11:18.720
Geremy Meyers: But at the same time, you know, even if it's an externally facing APP you know, can I.

86
00:11:19.020 --> 00:11:28.260
Geremy Meyers: publish that through citrix and, more importantly, route some security around it right, you know so a lot of the reasons folks were publishing things for presentation service, because they can control copy and paste printing.

87
00:11:29.280 --> 00:11:35.250
Geremy Meyers: You know, things like that you know, but you introduce that into a browser you know what are your options yeah.

88
00:11:36.270 --> 00:11:45.060
Todd Smith - Citrix: If I can add one thing on here as well, there were so many applications out there that were being accessed via browser.

89
00:11:45.540 --> 00:11:51.090
Todd Smith - Citrix: That any change to that browser could render that application either not performing at all or.

90
00:11:51.480 --> 00:12:01.800
Todd Smith - Citrix: subpar right so so having the ability to publish out a specific version of the browser with the plugins already added in and all of the features in the security settings.

91
00:12:02.280 --> 00:12:14.730
Todd Smith - Citrix: built in there, it really kind of it became a stopgap measure to restricting people's access but also providing something that the it folks could actually support and support well.

92
00:12:15.270 --> 00:12:23.010
Andy Whiteside: So Todd true or false malicious people took down my company application portfolio.

93
00:12:24.090 --> 00:12:27.870
Andy Whiteside: More then Andy whiteside the systems administrator did.

94
00:12:30.300 --> 00:12:33.030
Todd Smith - Citrix: i'm gonna say it depends.

95
00:12:33.150 --> 00:12:33.360
Right.

96
00:12:34.410 --> 00:12:38.520
Todd Smith - Citrix: But but it's true true or false, it would be oftentimes it's a user error.

97
00:12:39.300 --> 00:12:40.200
Todd Smith - Citrix: it's causing us.

98
00:12:40.260 --> 00:12:55.470
Andy Whiteside: yeah I took the whole thing down the middle day flicked the switch okay that fixes that Issue No problem next thing you know the phone's ringing everybody's down because I systematically made a change to something and, at least in the world of presentation, I can put it right back.

99
00:12:55.710 --> 00:12:58.890
Andy Whiteside: versus getting the button that says okay roll that back and roll this in.

100
00:12:59.640 --> 00:13:00.450
Andy Whiteside: which can take forever.

101
00:13:00.990 --> 00:13:13.260
Todd Smith - Citrix: Well, and the other thing end that a lot of a lot of the software vendors, the the browser vendors have trained us to do is just click randomly and just to accept all updates except.

102
00:13:13.860 --> 00:13:29.850
Todd Smith - Citrix: by default when we add in a plugin or we we add or change the configuration settings right so taking that control away from the SIS admins and the security professionals has really cause some havoc out there, and a lot of organizations.

103
00:13:31.800 --> 00:13:42.600
Todd Smith - Citrix: what used to be under the control of the IT folks is now being pushed over towards the end users, which can have a huge impact on both security, as well as performance yeah.

104
00:13:43.620 --> 00:13:49.110
Andy Whiteside: hey so guys i'm in the world of citrix when it comes to secure private access related to a browser.

105
00:13:49.830 --> 00:13:55.200
Andy Whiteside: I think there's at least three items to be covered i'm not sure exactly which one's this one's covering.

106
00:13:55.560 --> 00:14:00.210
Andy Whiteside: Where we're actually controlling the flow of the data back and forth through some type of.

107
00:14:00.540 --> 00:14:10.740
Andy Whiteside: You know proxy mechanism there's the secure browser which is embedded in the workspace APP and then there's a secure browser workspace service where it's actually launching the browser.

108
00:14:11.190 --> 00:14:23.490
Andy Whiteside: Somewhat seamlessly very seamlessly to the end user, but in some other data Center where you're totally isolating it other than the screen shots to come across what is this blog specifically covering or is it covering all of them.

109
00:14:25.380 --> 00:14:35.730
Geremy Meyers: I think it's covering all of them right So the first thing first it talks about to that last thing to flow right or, I guess, maybe i'm going to i'm going to i'm going to butcher the flow here but.

110
00:14:36.300 --> 00:14:45.390
Geremy Meyers: Ultimately there's there's two things that this this blog that are definitely hits on is what does that user experience like what is the user clicking on and what's launching whatever they do the clicking so.

111
00:14:45.540 --> 00:14:50.430
Geremy Meyers: If i've got a URL that i'm clicking you know I think there are two ways for that URL to be presented to that end user.

112
00:14:51.330 --> 00:14:59.580
Geremy Meyers: The first one is there is a service that citrix hosts called the secure browser service, and that is basically a.

113
00:15:00.210 --> 00:15:03.600
Geremy Meyers: You know we'd like to call it, throwing browser but it's a browser instance that.

114
00:15:04.350 --> 00:15:15.030
Geremy Meyers: will launch that URL inside of containerized browser that's off your data Center so think about the original discussion where you publish the URL Andy off your presentation server farm here's an F bar.

115
00:15:15.360 --> 00:15:23.310
Geremy Meyers: That that black that browser actually sat in your data Center this one actually sits off site in fact citrix hostess they manage it, they update it and maintain it.

116
00:15:23.640 --> 00:15:30.480
Geremy Meyers: And the nice thing about it is, is once you click the link and it fires up, you know that instance is created, it renders your your web page.

117
00:15:30.900 --> 00:15:37.890
Geremy Meyers: will skip the flow right now, just to say that it also works with internal Apps within your data Center so we can broker into an internal web APP.

118
00:15:38.160 --> 00:15:45.390
Geremy Meyers: But as soon as that user closes the tab guess what that browsers gone so along with any of the data that presented so that's an pretty important concept.

119
00:15:46.920 --> 00:15:57.240
Geremy Meyers: The other thing that this article hits on is there's also a browser embedded within any of the modern workspace Apps so if you're launching this not from.

120
00:15:58.290 --> 00:16:02.790
Geremy Meyers: Not from the workspace for web, but from your local workspace APP.

121
00:16:03.360 --> 00:16:17.940
Geremy Meyers: Then it'll actually initiate that local browser session within workspace which by the way, the security controls that you give the same ones, you get in the browser services just whereas that browser hosted either a in the browser service or be launched from the workspace APP so.

122
00:16:19.020 --> 00:16:19.890
Geremy Meyers: Does that make sense.

123
00:16:20.970 --> 00:16:33.240
Andy Whiteside: No, it does for me I just find that, for whatever reason, a lot of legacy citrix customers, or even new ones they're just so understanding that citrix is this presentation virtualization company.

124
00:16:33.600 --> 00:16:47.520
Andy Whiteside: That they don't even know these options exist and and you really don't even think that way until you start thinking digital workspace as a solution and then all of a sudden, you know left turns right turns go straight turn around go backwards l become doable within one pane of glass.

125
00:16:48.300 --> 00:16:55.170
Geremy Meyers: Yes, I had a customer recently that we went down this path with and they showed me what their user experience was for their positions right.

126
00:16:55.590 --> 00:17:03.960
Geremy Meyers: And the way it works is they launched their emr and once they were inside their your margin their emr was hosted within the data Center it's being delivered with you know see bad right.

127
00:17:04.410 --> 00:17:11.730
Geremy Meyers: And once they got into that emr sitting on a desktop inside their data Center we noticed that there was another page that popped up and guess what that was it was literally.

128
00:17:12.270 --> 00:17:21.450
Geremy Meyers: A URL they just had a web mix and they would click any of those web links and it would take them somewhere else now Andy you and I both know that physicians don't like a lots of clicks.

129
00:17:22.140 --> 00:17:25.620
Geremy Meyers: Right, they want to, they want to click something to get right into it, and so, when I showed them.

130
00:17:26.130 --> 00:17:35.250
Geremy Meyers: You know, and this was literally a list of maybe 1620 different web links, I said hey you know what if we took those web links outside of this internal portal and presented those right inside of workspace.

131
00:17:36.090 --> 00:17:46.800
Geremy Meyers: And they could click that link it was like a game changer for them right they had no idea that that was even an option, why no one had ever talked to them about it, so we did to your point, we did, and it just kind of opened up a lot of possibility that and considered.

132
00:17:48.210 --> 00:18:02.070
Andy Whiteside: Well, and I, and I blame citrix because of the success of all the other stuff people just kind of you know there's still people this day that are just now learning about routing protocols and how magical, that is, I saw my first one in 1999.

133
00:18:03.600 --> 00:18:08.670
Andy Whiteside: The success of that is kind of dwarfed all this other stuff but this other stuff is where it's going next.

134
00:18:09.810 --> 00:18:14.310
Andy Whiteside: As you know, the world of SAS becomes more and more mainstream every day for everything.

135
00:18:17.370 --> 00:18:27.870
Geremy Meyers: yep nope you're absolutely right you're absolutely right now I think what's different is the fact that you can apply those same policies that were used to doing with presentation server.

136
00:18:28.620 --> 00:18:34.920
Geremy Meyers: to any of these web links and that's a game changer right so certainly I can do some single sign on these websites that's great.

137
00:18:35.220 --> 00:18:48.930
Geremy Meyers: But being able to wrap that same level security to it, and you know, then today also bypass the vpn just like I couldn't before again that touches on that that network flow you just discussed, but you know we've got a way to broker internal websites.

138
00:18:50.250 --> 00:18:52.920
Geremy Meyers: Even if they're rendered locally on my device yeah.

139
00:18:54.900 --> 00:19:03.060
Todd Smith - Citrix: Well, not only that, but also being able to control the access right, so you have it, based on role based access, controls, but also being able to.

140
00:19:03.600 --> 00:19:20.430
Todd Smith - Citrix: to manage and control cut and paste and clipboard functionalities and printing printing functionalities as well within the browser even though it's you know, coming from a from a secure browser service or from a secure browser inside the workspace APP.

141
00:19:23.220 --> 00:19:37.860
Geremy Meyers: yeah and that link right there you've got up right now Andy that's a great flow, so what that does is, if you launch that i'm not saying do it here, but it takes you through the flow of the same web APP with a security controls turned on or not turned on so again it's policy driven.

142
00:19:40.500 --> 00:19:42.090
Andy Whiteside: has helped me understand where.

143
00:19:43.290 --> 00:19:44.880
Andy Whiteside: Where the networking for some I.

144
00:19:45.900 --> 00:19:59.130
Andy Whiteside: can't believe i'm drawing a blank on this, but the overall concept of routing your client in user browser traffic through in and out of some technology to make sure it's clean or sanitized first what is that called.

145
00:20:02.220 --> 00:20:08.010
Geremy Meyers: You are we have what we have two different solutions here so i'm not i'm not quite sure which one you're hitting on we've got.

146
00:20:08.310 --> 00:20:23.280
Geremy Meyers: Secure Internet access, which is really more filtering out based outbound traffic yeah but then we also have you know another solution that will basically it's client lists access into internal web Apps you know that sort of thing too so which one, are you are you thinking of.

147
00:20:25.140 --> 00:20:28.320
Andy Whiteside: I guess i'm thinking of client list X some.

148
00:20:29.910 --> 00:20:39.840
Andy Whiteside: I can't i'm drawing a blank on the concept of being able to have in users proxy through something you know the old days of a Microsoft proxy.

149
00:20:40.380 --> 00:20:53.160
Andy Whiteside: But now we're doing it through a service that is expecting inspecting the traffic along the way, so that if things that we know are bad or malicious type of activities are happening in that traffic we're able to call it out and stop it.

150
00:20:54.660 --> 00:20:56.820
Geremy Meyers: Are we taking a laugh so.

151
00:20:57.030 --> 00:20:58.530
Geremy Meyers: yeah like a like a web APP firewall.

152
00:20:59.370 --> 00:21:05.040
Andy Whiteside: Well, not really i'm not really on the endpoint the end user, the thing like eyeballs type technologies What are those call.

153
00:21:05.040 --> 00:21:15.330
Geremy Meyers: I gotcha I gotcha so that is a citrix secure internet access and the idea behind that guy is there's an agent that would sit on either the employment or even within a virtual.

154
00:21:15.750 --> 00:21:20.760
Geremy Meyers: Virtual desktop you know share desktop and you know you need the traffic that's outbound would get scrubbed.

155
00:21:21.090 --> 00:21:27.030
Geremy Meyers: You know, through the service so let's say, for instance republishing that browser you know even there was an APP session or adapt session.

156
00:21:27.750 --> 00:21:40.620
Geremy Meyers: You know any of that outbound traffic is being scrubbed and the policies that we enable or everything from you know just just site content to you know dlp I mean the list of what you can scrub and again manage that data.

157
00:21:41.790 --> 00:21:47.940
Geremy Meyers: is pretty lengthy, but the idea behind that is scrubbing the traffic within the session that makes sense.

158
00:21:48.510 --> 00:21:54.960
Andy Whiteside: Now boy, and that agent, you talked about the beautiful thing is you're already going to have the citrix workspace APP on there it is inside that that workspace APP correct.

159
00:21:55.410 --> 00:21:56.430
Geremy Meyers: It is yeah.

160
00:21:57.720 --> 00:22:05.910
Andy Whiteside: Well guys, I know you both had to go at the bottom of the hour, I do too so it's probably fine I think what we'll do is as a follow on to this conversation will do secure access.

161
00:22:06.420 --> 00:22:12.060
Andy Whiteside: Next, so we take the the browser story and then this story time to together, and then we move on to the other.

162
00:22:12.300 --> 00:22:21.810
Andy Whiteside: 20 features, we got to cover for our listeners and try to expand everybody's horizons beyond see that and beyond presentation server and when frame and metaphor.

163
00:22:22.470 --> 00:22:31.440
Andy Whiteside: All the beautiful successful things that we all thought was a magical in, and still is, I mean I don't want to diminish that still is, but there's so much more that we need in a digital workspace strategy.

164
00:22:33.120 --> 00:22:34.410
Geremy Meyers: Absolutely i'm looking forward to it.

165
00:22:36.270 --> 00:22:40.290
Andy Whiteside: tada got the New York excel thing coming up right, so you just.

166
00:22:40.290 --> 00:22:50.310
Todd Smith - Citrix: We do we have a CDC XL event coming up on July 27 it's going to be a Yankee stadium, we got a we've got a great lineup of.

167
00:22:51.420 --> 00:23:01.560
Todd Smith - Citrix: presenters including Joe Kim who is our chief product officer we've also got Christian Riley who's one of our he's our chief product strategist when it comes to technologies.

168
00:23:02.400 --> 00:23:12.540
Todd Smith - Citrix: We also have several CT peas and other folks that are going to be joining us it's a full day event registration is available go to my cdc.org.

169
00:23:13.140 --> 00:23:24.060
Todd Smith - Citrix: And it'll probably prompt you to create a new account because the platform did change but go ahead and register for that event once again it's a great opportunity it's free of charge.

170
00:23:27.060 --> 00:23:27.660
You know.

171
00:23:28.710 --> 00:23:32.430
Todd Smith - Citrix: There is a limit on the number of people can register so register now.

172
00:23:33.450 --> 00:23:45.300
Todd Smith - Citrix: it's a great opportunity to go here what's the latest and greatest from not only citrix, but a lot of our innovation partners and ecosystem partners, as well as well as going to visit to the hallowed halls of Yankee stadium.

173
00:23:46.410 --> 00:23:50.490
Geremy Meyers: Is that going to be virtual as well, but they're going to do a an in person, but also make it virtually.

174
00:23:50.520 --> 00:23:53.340
Todd Smith - Citrix: No, this is a fully in person event.

175
00:23:55.200 --> 00:23:57.030
Andy Whiteside: Well Todd i'm going to go ahead and start planning my trip.

176
00:23:58.620 --> 00:23:59.220
Todd Smith - Citrix: i'll be there.

177
00:24:00.150 --> 00:24:01.680
Andy Whiteside: And they gotta run we'll see you next week.

178
00:24:01.710 --> 00:24:01.980
alright.

179
00:24:03.240 --> 00:24:04.200
Todd Smith - Citrix: Have a safe fourth of July.