Citrix FlexCast – Interesting Security Considerations

The Virtualization Security Podcast on 10/21 was the third in a series of Virtual Desktop Security discussions we are having. The special guest panelist was Chris Mayers of one of the Chief Security Architects for Citrix, the makers of XenServer, XenClient, and the FlexCast solutions. FlexCast provides an all encompassing method to provide virtual desktop and applications that include the following mechanisms:
Let us look at each of these mechanisms in a bit of detail then discuss how they work to provide Security and how to secure them.

Transforming Desktop Computing

While at VMworld 2010 in San Francisco this year, I got to meet up and talk with Robert from Atlantis Computing. Our conversation was about VDI and he was quite proud of the capabilities that Atlantis ILIO brings to the table in the VDI space. The conversation went well and got me interested in investigating a little further on the technology. Atlantis ILIO or “VDI Booster” as they like to call it, is a solution to address the complexity and high costs of VDI Deployment and management. ILIO has been architected to support most of the main VDI players like VMware View, Citrix XenDesktop, Microsoft Hosted Virtual Desktop (HVD),and Quest Software vWorkplace to name a few.

RES Virtual Desktop Extender – the missing piece in the VDI puzzle?

On the heels of receiving United States patent approval for its RES Virtual Desktop Extender (VDX) technology, RES Software have announced that it will also be offering VDX as a standalone product. A feature within RES Workspace Manager (formerly RES PowerFuse), VDX serves as a fundamental component in the successful deployment of virtual desktops. It enables local applications that typically do not run smoothly, or at all, in virtual environments to run seamlessly within a virtual session. However, while VDX’s functionality allows wider access to hosted desktops, organisations need to ensure that the management and maintenance of that legacy environment isn’t overlooked to the point where it impacts user experience and the organisation’s security.

Client Hypervisor Security

The Virtualization Security Podcast on 10/7 was the second in a series of Virtual Desktop Security discussions we will are having. The special guest panelist was Simon Graham of Virtual Computer, the makers of NxTop a client side hypervisor based on Xen. On this podcast, we went into the details of NxTop.
The engineers at Virtual Computer have thought about nearly everything when it comes to a Client Hypervisor. NxTop operates as a standalone or as a centrally managed client hypervisor. The difference is fairly stark. I feel that most people in the Enterprise unless this is a one off situation would want to use the managed client hypervisor.

VMware rethinks it plans for a mobile hypervisor

In a surprising about-face VMware has stepped back from its previously announced plans to release a type I hypervisor in support of its bid to address the mobile hypervisor market. Instead at VMworld 2010 in San Francisco during Session DV7701 “Embracing Employee-Owned Mobile Phones – The Why and How”, Stephen Deasy (Director, R&D, VMware) and Srinivas Krishnamurti (Senior Director, Mobile Solutions, VMware) shared their new plans for a type II mobile hypervisor platform.