39 : À l'horizon : Les nouvelles fonctionnalités d'Horizon 2306 améliorent la sécurité, la flexibilité et la facilité de gestion

WEBVTT

1
00:00:01.820 -> 00:00:09.520
Andy Whiteside : Bonjour ! Et bienvenue à l'épisode 39 d'À l'horizon. Je suis votre hôte, Andy Whiteside. J'ai Philip Sellers avec moi, Philip. Comment ça se passe le 16 octobre ?.

2
00:00:09.750 -> 00:00:11.169
Philip Sellers : Vous partez ? Bien, Andy.

3
00:00:11.770 -> 00:00:13.120
Andy Whiteside : vous

4
00:00:13.180 -> 00:00:18.669
Nous commençons à peine. C'est un lundi, donc je ne sais pas quand les gens écoutent, mais c'est un lundi, et on dirait que vous avez été très occupés aujourd'hui.

5
00:00:19.000 -> 00:00:30.110
Andy Whiteside : J'ai été très occupé. J'ai commencé la matinée par un examen de certification que j'ai passé avec succès, ce qui est toujours une bonne façon de commencer un lundi matin. Et puis..,

6
00:00:30.140 -> 00:00:43.110
Philip Sellers : Oui, j'ai eu de grandes conversations avec les clients tout au long de la journée. J'aime ce genre de journées. Je vais donc vous mettre sur la sellette. Citez un problème que vous avez rencontré avec le client à qui vous avez parlé aujourd'hui. Il essayait de le résoudre.

7
00:00:43.340 -> 00:00:51.580
Philip Sellers : Nous avons donc eu un client qui souhaitait pouvoir gérer tous ses dispositifs d'extrémité à partir d'un seul logiciel, d'une seule console

8
00:00:51.770 -> 00:01:12.589
Philip Sellers : Nous avons eu une excellente conversation sur Workspace one Uem aujourd'hui. Eh bien, pour être franc, c'est à peu près le seul qui peut tout faire. Ouais, je veux dire, c'est une plateforme phénoménale avec tellement de systèmes d'exploitation et de facteurs de forme différents. Il se trouve qu'il s'agit d'un district scolaire. Donc c'est un bon endroit, un bon ajustement parce que

9
00:01:12.590 -> 00:01:39.780
Philip Sellers : Les chromebooks, les ipads et les tablettes androïdes. Et oui, vous savez, les districts scolaires ont certainement ces défis à relever. Je suis donc à la plage. Ce week-end, nous avons eu un petit appartement là-bas. Nous avons fait courir nos clients, nos amis et nos employés, et parfois des gens au hasard, mais je suis là-bas en train de décorer. Ma femme m'a envoyé là-bas pour accrocher des rideaux et toutes sortes de choses folles qui, de toute façon, m'ont frustré. Cependant, pendant tout ce temps. J'avais le podcast, vous savez, qui jouait mon année d'écoute. Et cette société vient pour entrer cette semaine et la technologie d'entreprise

10
00:01:39.890 -> 00:02:02.420
Andy Whiteside : parle de leur solution Mdm. Solution. Et à un moment donné, le gars lui a posé une question sur les appareils Android, et il a dit, oh, nous ne faisons pas encore de systèmes d'exploitation mobiles, comme ios et android, mais qu'est-ce que c'est que ça ? Je viens de perdre 30 minutes pour quelqu'un qui ne fait que gérer Windows en tant que solution Mdm. Solution, quel est l'intérêt ? Nous ne pouvons pas faire plusieurs de ces systèmes, y compris les systèmes d'exploitation des téléphones portables. Alors pourquoi s'embêter ?

11
00:02:02.510 -> 00:02:16.219
Philip Sellers : Et de plus en plus, l'Internet des objets. Vous savez, les choses qui sont simplement connectées au réseau. Et pour moi, la sécurité autour de ces appareils est essentielle. Quand vous commencez à parler d'entreprise et de business

12
00:02:16.320 -> 00:02:19.970
Philip Sellers : Les environnements. Je veux dire que c'est une chose d'accrocher une bague à la maison.

13
00:02:20.000 -> 00:02:34.380
Andy Whiteside : C'est autre chose quand vous mettez cela sur votre réseau d'affaires avec vos joyaux de la couronne, c'est sûr, c'est sûr. Alors, Phil, laissez-moi faire la publicité, très rapidement. Si vous écoutez ce podcast et que vous êtes client de VMware, que ce soit pour le centre de données ou pour l'espace de travail.

14
00:02:34.380 -> 00:02:58.529
Andy Whiteside : et vous ne tirez pas profit de la plateforme. Vous pensez que c'est trop cher. Eh bien, devinez quoi, ce sont des solutions coûteuses, mais vous devez tirer parti de la plateforme. Laissez-nous vous aider. Laissez-nous vous aider. La plupart de ces plates-formes et de ces produits valent largement leur prix. Si vous utilisez ce qu'elles peuvent faire. Si vous utilisez un sous-ensemble de ce qu'elles peuvent faire, ou juste une chose qu'elles peuvent faire. Vous gaspillez votre argent et vous travaillez probablement avec le mauvais partenaire ou les vendeurs qui ne vous aident pas.

15
00:02:58.640 -> 00:03:08.449
Andy Whiteside : Nous pouvons vous aider. Voilà donc l'horizon commercial de Vmware Workspace one aujourd'hui. Il y a beaucoup d'occasions d'aider les gens, n'est-ce pas ?

16
00:03:08.790 -> 00:03:21.290
Philip Sellers : Absolument. Et si je peux ajouter à cela nos super pouvoirs, les intégrations, nous aimons faire en sorte que les choses fonctionnent bien ensemble, et c'est ainsi que vous, en tant que client, pouvez obtenir la valeur ultime en commençant par

17
00:03:21.290 -> 00:03:43.570
Philip Sellers : S'assurer que votre workspace one peut s'intégrer à votre horizon, à votre citrix, peut-être à votre service now, et réunir tous ces éléments. Vous m'avez devancé. J'allais vous poser la question plusieurs fois. Nous disons service. Maintenant, dans ce podcast, on va probablement en parler. Oui, j'aime beaucoup cette plateforme. J'en suis très heureux. Quelques

18
00:03:43.570 -> 00:03:54.630
Philip Sellers : Des amis, d'anciens collègues viennent de l'adopter, leur site passe d'un concurrent à un service. Maintenant, il va leur apporter ses dans les processus,

19
00:03:54.630 -> 00:04:15.200
Andy Whiteside : vous savez, dans le siècle actuel. Oui, vous ne pouvez pas épeler itm sans service. Attendez un peu. C'est tout à fait logique. Le blog d'aujourd'hui est celui de Suzette Beardsley, datant d'octobre de cette année. 2 306 améliorations de la sécurité, de la flexibilité et de la facilité de gestion. Alors, Philip ? Pourquoi avez-vous choisi ce blog ?.

20
00:04:15.430 -> 00:04:19.010
Philip Sellers : Eh bien, vous savez, tout le monde est un peu...

21
00:04:19.459 -> 00:04:37.550
Philip Sellers : Je pense que nous sommes préoccupés par le fait que l'acquisition de Broadcom est sur le point d'être finalisée. Je tenais donc à souligner que VMware ne se laisse pas distraire. Cela ne les empêchera pas de continuer à construire et à innover sur leurs produits. 2306 est la dernière version d'horizon 8.

22
00:04:37.550 -> 00:04:51.910
Philip Sellers : Et donc beaucoup de nouvelles fonctionnalités, beaucoup de commentaires des clients qui ont été intégrés dans cette nouvelle version, facilitant les choses pour les administrateurs et aidant également à la sécurité. Ce sont les deux axes principaux.

23
00:04:52.200 -> 00:04:59.879
Andy Whiteside : Oui, des utilisateurs heureux, la sécurité, la sécurité et des utilisateurs heureux. Je ne sais pas lequel est le numéro 1 et lequel est le numéro 2. Ils doivent aller ensemble.

24
00:05:00.370 -> 00:05:15.870
Philip Sellers : Oui, je veux dire qu'ils ne peuvent pas être exclusifs l'un de l'autre, parce que je peux vous dire que travailler dans un endroit où la sécurité est valorisée. Avant tout. C'est une expérience utilisateur horrible. C'est un exercice d'équilibre. Il faut donc que les deux perspectives soient intégrées et qu'elles travaillent ensemble.

25
00:05:16.230 -> 00:05:37.639
Andy Whiteside : Oui. Très bien, première section. La section générale dit : simplifier la gestion et renforcer la sécurité. Le premier appel dit : granular rb, A/C. Privilèges pour les clients connectés au cloud. Rapidement. 2306. Cela signifie que nous ne parlons pas du produit cloud. Nous parlons du produit on Prem. Et cette première section parle de le connecter au cloud. C'est bien cela ?

26
00:05:37.640 -> 00:05:57.270
Philip Sellers : Oui, c'est vrai. Oui, nous parlons du produit sur site, le produit installable, c'est ainsi que je l'appellerais. Nous verrons vmware. On en parle comme d'Horizon 8. Et même si vous avez le produit sur site ou installable, vous pouvez toujours faire du cloud, le connecter au plan de contrôle universel Horizon.

27
00:05:57.330 -> 00:06:25.960
Philip Sellers : Auparavant, il fallait disposer d'un super administrateur, d'un super contrôle pour pouvoir le faire. Et avec 2306. Ils ont introduit un nouveau contrôle d'accès basé sur les rôles, plus granulaire, de sorte qu'il n'est pas nécessaire d'avoir un super administrateur. Et vous pouvez déléguer ces privilèges pour activer le plan de contrôle et le gérer dans un environnement connecté à l'horizon ou au nuage. Et donc c'est une victoire, parce que nous aimons toujours avoir, vous savez

28
00:06:25.960 -> 00:06:28.400
Philip Sellers : juste assez d'administration juste assez

29
00:06:28.620 -> 00:06:35.399
Andy Whiteside : les permissions et ne pas accorder le statut de super administrateur à moins que cela ne soit absolument nécessaire.

30
00:06:36.920 -> 00:06:44.760
Andy Whiteside : Et vous ne pouvez jamais vous contenter de cela. En même temps, il ne faut pas fixer un niveau trop bas. N'en faites pas trop. Parce qu'alors, vous vous mettez dans le pétrin.

31
00:06:44.940 -> 00:06:55.929
Philip Sellers : Oui, encore une fois. C'est un exercice d'équilibre, et c'est un art. Vous savez, comprendre beaucoup de ces robots du nuage, les contrôles d'accès. Il y a beaucoup de

32
00:06:55.990 -> 00:07:04.129
Philip Sellers : Les niveaux. Et savoir ce qu'ils peuvent faire et ce qu'ils ne peuvent pas faire. Et puis quand faut-il créer quelque chose ? La personnalisation est très importante, n'est-ce pas ?

33
00:07:04.190 -> 00:07:12.179
Andy Whiteside : D'accord pour le bloc de section, dans la section suivante, bloquer la connexion de l'utilisateur final. Si aucun certificat n'est vérifié, qu'est-ce que cela signifie ?

34
00:07:12.470 -> 00:07:30.609
Philip Sellers : Donc, auparavant et actuellement dans le client horizon, vous pouvez en fait aller dans et dire, Ne pas vérifier pour un certificat de serveur et ne pas vérifier s'il est appliqué. Nous l'utilisons beaucoup dans les laboratoires et ce genre de choses. Mais pour votre environnement de production, vous ne voulez probablement pas que l'utilisateur final contourne les contrôles de sécurité.

35
00:07:30.610 -> 00:07:46.359
Philip Sellers : Il s'agit donc d'un moyen d'empêcher que les contrôles de sécurité du serveur ne soient contournés. De cette façon, vous savez que c'est votre certificat de confiance sur le serveur que vos utilisateurs, en se connectant à aucun homme au milieu, aucun

36
00:07:46.440 -> 00:08:07.030
Andy Whiteside : hacker, vous savez, regarder ce qui se passe et briser votre trafic vous. Vous avez maintenant la possibilité de forcer ce comportement. C'est donc une excellente chose. Cela nous permet d'améliorer notre sécurité de manière générale. Il s'agit de l'accès initial à la page de l'espace de travail. La connexion réelle du protocole. Où cela se passe-t-il ? Où cela joue-t-il ?

37
00:08:07.140 -> 00:08:19.040
Philip Sellers : Oui. Ici, c'est le courtage. Il s'agit donc de l'appel initial du client et de l'établissement de la connexion initiale au bureau virtuel ou au serveur virtuel en arrière-plan.

38
00:08:19.580 -> 00:08:20.260
Andy Whiteside : D'accord.

39
00:08:21.910 -> 00:08:34.260
Andy Whiteside : Très bien. La section suivante parle de la fixation. Oh, au fait, nous devrions dire à nos auditeurs que ce sera probablement une partie en trois parties. Il y a beaucoup de choses à couvrir ici, la prochaine étant la minuterie fixe pour l'élimination des Sso. Références. Renforcer la sécurité.

40
00:08:34.549 -> 00:09:01.729
Philip Sellers : Oui. Je veux dire qu'avec l'authentification unique, l'utilisateur bénéficie d'une excellente expérience. Mais du point de vue d'un administrateur ou d'un professionnel de la sécurité, vous ne voulez pas que quelqu'un ait accès à tout moment. Si son terminal ou ses informations d'identification sont compromis, il faut pouvoir l'obliger à se réauthentifier de temps en temps. C'est donc la possibilité de le faire sur une base fixe que vous pouvez désormais contrôler. Quand définissez-vous

41
00:09:01.730 -> 00:09:05.009
Philip Sellers : La réauthentification doit-elle avoir lieu pour les sessions de bureau virtuel ?

42
00:09:05.090 -> 00:09:05.760
Andy Whiteside : D'accord ?

43
00:09:06.950 -> 00:09:10.220
Andy Whiteside : Et quel est, selon vous, le bon moment pour le faire ?

44
00:09:11.160 -> 00:09:24.989
Philip Sellers : En ce qui me concerne, je dirais dans la semaine. Vous savez, cela peut aller jusqu'à tous les jours. Cela dépend vraiment de ce que vous essayez de faire et d'accomplir. Vous savez. Je peux voir.

45
00:09:25.160 -> 00:09:33.710
Philip Sellers : Vous savez, à long terme sur les choses prem au sein du réseau de l'entreprise, peut-être être un peu plus détendu.

46
00:09:33.840 -> 00:09:53.530
Philip Sellers : Vous savez, et puis, pour les utilisateurs vraiment hors site, à distance, peut-être une chose quotidienne que vous voulez qu'ils aient à s'authentifier à nouveau ainsi que vous savez, qui implique implicitement Mfa, donc dans le cadre de ce processus d'authentification les forcer à le faire. Authentification à 2 facteurs.

47
00:09:53.690 -> 00:10:00.300
Andy Whiteside : Oui. Le suivant indique qu'il faut configurer les mappages de certificats à partir de la console.

48
00:10:00.870 -> 00:10:21.829
Philip Sellers : Oui. C'est un peu geek, mais les mappages de certificats sous l'horizon ont toujours été intéressants. Vous savez, pour certains de vos certificats Ssl. Vous savez, pour certains de vos certificats Ssl. et autres, vous devez aller dans la base de données, ou vous devez aller dans la base de données et changer certains fichiers, toute cette gestion est maintenant possible.

49
00:10:21.940 -> 00:10:34.550
Philip Sellers : dans la console et vous pouvez donc le gérer directement à partir de là. En outre, ils ont ajouté quelques éléments supplémentaires en termes de Sid based

50
00:10:34.660 –> 00:10:54.070
Philip Sellers: and then x 509 s. Ki like, I said, super geeky, it! It’s you know, the format where you’ve got alternate security identifiers as part of it. And then you’ve also got legacy options for smart cards and things like that for authentication. So

51
00:10:54.140 –> 00:11:13.230
Philip Sellers: when we talk about certificate based authentications, you know, this is an alternative to the traditional 2 factor authentication, you know, this is, having actual cards and things like that, little pieces of of hardware that you carry around so

52
00:11:13.260 –> 00:11:38.959
Philip Sellers: as opposed to, just, you know, being challenged with a Microsoft authenticator, or you know. I don’t know duo or something like that. It’s an app. So you. You’ve got those those options as well. You know. This is probably more in our ultra secure customers. Maybe Dod space same type of customers that may do more disconnected type. Horizon deployments right

53
00:11:39.830 –> 00:11:43.179
Andy Whiteside: instant clone, smart provisioning default.

54
00:11:43.890 –> 00:11:53.049
Philip Sellers: So in in the previous few versions of Verizon there’s been 2 different modes for instant clones. So instant clones

55
00:11:53.140 –> 00:12:12.879
Philip Sellers: can can be created without a parent. Vm. Traditionally mode a. The original mode always created it with a parent. Vm, so mode B has been an available option, it’s now become the default option. So why is that important? You know, we’ve had virtual hardware changes around trusted platform

56
00:12:12.880 –> 00:12:23.789
Philip Sellers: and gpus. And so with those clone operations, we wanna be able to do that and not replicate those those pieces of virtual hardware. So

57
00:12:23.990 –> 00:12:26.689
Philip Sellers: this is a provisioning mode.

58
00:12:27.300 –> 00:12:44.629
Philip Sellers: Change to allow us to kinda scale and go where physical hardware is going as well as the virtual hardware needs to respond and go. You know, windows 11. Change the requirements for us significantly. And so you have to have some of this virtual hardware in order to be able to load and run windows. 11.

59
00:12:45.980 –> 00:12:46.650
Andy Whiteside : Oui.

60
00:12:47.650 –> 00:12:52.610
Andy Whiteside: Improved. Improved with auto debugging for instant Clones.

61
00:12:52.990 –> 00:13:06.180
Philip Sellers: So we’ve always had some amount of debugging but a a and there’s a great screenshot. If you scroll just a little bit further down. They’ve now added it to the more menu, so you can enable and disable instant clone debugging.

62
00:13:06.180 –> 00:13:23.550
Philip Sellers: I love this because as an administrator, you don’t have to go digging through the file system, you know, and turning on a switch and things like that. Now you’ve just got a button, you can click a button, you can get logs. And so that’s a huge usability step forward for Admins.

63
00:13:27.750 –> 00:13:40.940
Andy Whiteside: Instant. Clone, smart provisioning default. That sounds familiar. Yeah. I think that one got put in here twice, for some reason persistent disk for instant calls.

64
00:13:41.070 –> 00:14:09.340
Philip Sellers: Yeah, persistent. This is an interesting one. So this is a carryover for customers who? We’re using dedicated Link Clones. And that’s been deprecated. So linked clone technology was kind of the original way. The original magic behind horizon view that allowed you to make lots of copies quickly. And so this is this is bringing back that persistent disk capability. So

65
00:14:09.740 –> 00:14:19.390
Philip Sellers: you know it. It prevented some customers from actually upgrading to horizon 8, you know, if they were using dedicated link phones in the past, you know they they didn’t

66
00:14:19.500 –> 00:14:31.430
Philip Sellers: choose to upgrade to Horizon 8, because this feature was missing. So this gives us a lot of well, it gives us a very specific use case for certain customers.

67
00:14:31.720 –> 00:14:32.480
Andy Whiteside : Oui.

68
00:14:33.350 –> 00:15:00.560
Andy Whiteside: you know. And I had this conversation earlier today in a different, podcast. Around persistent disk, and persistent machines in general and man, there’s so much more adoption that could happen if you allowed yourself to get beyond non persistent and it’s still goodness in there. You still have it centralized. You still have somewhere. You can manage it. You still keep an eye on it. You remove some of the attack vector from these remote VPN type scenarios. I just don’t think the world thinks about persistent machines and persistent

69
00:15:00.610 –> 00:15:02.269
Andy Whiteside: things that go with it enough.

70
00:15:02.610 –> 00:15:16.339
Philip Sellers: Well, you know, it’s definitely on our friends at Microsoft’s mind. With windows 2 65. I mean, that is the the exact use case that they’re they’re targeting is that persistent use case. And so

71
00:15:16.450 –> 00:15:21.029
cloud. Pcs, you know they’re talking a lot about cloud Pcs, and so

72
00:15:21.100 –> 00:15:30.240
Philip Sellers: you know, this is great to have in your back pocket, because I like the concept. I just want to be able to centralize

73
00:15:30.280 –> 00:15:48.800
Philip Sellers: the user experience so that everything my user needs comes from one place and that they’re able to have no friction and getting to these, and also maybe a better delivery protocol. But that gets a little geeky. So you know, it really is to me about user experience.

74
00:15:48.910 –> 00:15:56.330
Andy Whiteside: Yeah. cloud architectures, cloud pod architecture, session load distribution.

75
00:15:56.740 –> 00:16:24.499
Philip Sellers: You know, I was on the phone call phone call with an a user the other day, and we were talking about their pod architecture and how you know, session load, balancing and stuff happens, you know, and that was just within on-prem pods of horizon infrastructure. When you go to cloud pods, it’s it’s a elevated problem. But the problem that you run into is, you know, having the resources you need coming from the correct pod.

76
00:16:24.760 –> 00:16:31.290
Philip Sellers: sourcing and making sure users go to the closest pod, but also making sure one pod doesn’t, you know.

77
00:16:31.380 –> 00:16:37.429
Philip Sellers: have to handle all of the sessions and and handle all of the load together. So

78
00:16:37.440 –> 00:16:56.400
Philip Sellers: cloud pod architecture and and this particular feature in 2306 helps distribute the load more equitably. And so there’s there’s more intelligence as the brokering is happening things are happening behind the scenes so that users get routed to the best pod. And

79
00:16:56.400 –> 00:17:11.329
Philip Sellers: again, that’s a configurable thing of of how you determine what’s the best pod but being able to more adequately share the load across your cloud pods is certainly something of interest, because.

80
00:17:11.390 –> 00:17:13.239
Philip Sellers: you know.

81
00:17:13.310 –> 00:17:19.589
Philip Sellers: there’s a lot of different factors that we talk about to get great performance. But having you

82
00:17:19.650 –> 00:17:44.869
Philip Sellers: go across the country to the wrong pod, well, that’s going to be a performance killer. So come back for the data. Well, and you know it’s it’s not uncommon for us to talk to customers who have outsourced resources around the world follow the sun type support organizations are notorious for this, but call centers, too. And so yeah, I mean, there’s very real

83
00:17:45.180 –> 00:18:08.930
Philip Sellers: physics that get involved. Speed of light is what it is. It’s a fixed speed. And so we fight that latency a lot particularly in the Bdi space. Yeah, that’ll give me a chance to bring up my common conversation around. Don’t give me your bandwidth situation. Tell me your latency, that’s it. Latency is ultra important for us when we’re talking about Vdi delivery, or

84
00:18:09.600 –> 00:18:17.600
Andy Whiteside: really anything. I mean, it’s it’s as important as how close is the data and that data gravity conversation that we have with customers.

85
00:18:17.680 –> 00:18:20.499
Philip Sellers: How how much bandwidth is good. But

86
00:18:20.660 –> 00:18:31.090
Andy Whiteside: it’s not often the greatest limiting factor. It’s it’s not the limiting factor. It’s it matters. But you know, getting from here to there. You’re going to get there so fast if there’s traffic that makes it worse.

87
00:18:31.230 –> 00:18:52.970
Philip Sellers: Yeah. And I mean it. It’s true. You can have a bottleneck, I mean, if we had a hundred Meg circuit or something like that. Yes, we may need to have a conversation, but you know, it also depends on how large of an environment, too. If if we’re talking about 2030 users and 100 Meg, then probably okay. But thousands and thousands of users. That may be your bottleneck.

88
00:18:52.980 –> 00:19:02.490
Andy Whiteside: Alright. Next section now is horizon agent 2306. Enhance compatibility and user experience. Why does it matter to be talking about the agent.

89
00:19:03.110 –> 00:19:19.800
Philip Sellers: So the agent here is super important, because, as we step through this, you’ll see that vmware is pushing more and more capabilities outside of just windows, you know, horizon does windows pretty doggone well.

90
00:19:19.820 –> 00:19:29.940
and Vmware wants to have more options, particularly around Linux, and also compatibility for the client. And Mac

91
00:19:30.150 –> 00:19:31.830
there’s so much

92
00:19:31.840 –> 00:19:49.460
Philip Sellers: happening from an Ios and from Mac devices as users have choice, and so, being able to support those endpoints as well, is a huge thing for vmware. And again, this is responding to requests from the field requests from customers.

93
00:19:50.740 –> 00:19:55.759
Andy Whiteside: So on that note, let’s talk about Linux and the actual agent for the Linux scenario.

94
00:19:55.950 –> 00:20:16.249
Philip Sellers: Well, you know I’m not a die hard penguin head over here. So for me, the beginning of this doesn’t have a ton. You know, when I run Linux, it’s generally used to be red hat but you know, they’re building on support now, 2306 supports, rocky Linux.

95
00:20:16.250 –> 00:20:30.989
Philip Sellers: and it’s one I hear a lot about. I couldn’t tell you why. It’s a better Linux, or why people prefer it. But support for Rocky is there? More importantly, across all Linux versions horizon desktop recording is there?

96
00:20:31.070 –> 00:20:58.249
Philip Sellers: That’s key, especially when we’re working with call centers and and places that need recording, either from a troubleshooting standpoint or just from a compliance standpoint. Sometimes it’s just coaching and seeing what’s going on in a session as a user works. And so these things can be added. Lastly, they they mentioned that integrated printer can also add a watermark

97
00:20:58.280 –> 00:21:08.060
Philip Sellers: to the beginning of a document set. So you know, very incremental type things. But you know, rocky fans resource.

98
00:21:10.020 –> 00:21:16.800
Andy Whiteside: Have you had a chance, Philip, to do a a single implementation pilot Poc with Linux being the

99
00:21:16.860 –> 00:21:18.180
Andy Whiteside: the virtual desktop.

100
00:21:18.390 –> 00:21:31.310
Philip Sellers: I’ve definitely done it in my lab. And it works great. Yeah. But I’m not having a ton of users asking for Linux. We are having some interesting conversations around

101
00:21:31.430 –> 00:21:39.039
Philip Sellers: browsers and Linux and being able to deliver those. Which is a very interesting use case just controlling

102
00:21:39.060 –> 00:21:45.620
Philip Sellers: malware controlling. Yeah, entry points for ransomware. And so

103
00:21:45.670 –> 00:22:01.429
Philip Sellers: yeah, that that may be something that we end up doing a lot more of we. We certainly have other people in the Vdi space who are making a lot of noise around Linux based browsing and how we deliver that for users right?

104
00:22:02.110 –> 00:22:15.760
Andy Whiteside: Alright next section enhancements in remote experience and codec support via blast blast being the the vmware remoting protocol. First section says, Vst, Rx. Feature allowance. What’s that?

105
00:22:15.950 –> 00:22:19.510
Philip Sellers: Yeah. So these get pretty

106
00:22:19.540 –> 00:22:30.830
Philip Sellers: pretty geeky, really? Quick. You know the blast secure gateway. Remote experience. That’s what Bsgr stands for. It’s it’s

107
00:22:31.960 –> 00:22:39.730
Philip Sellers: it is a set of configurable things within the blast protocol. You know. basically here.

108
00:22:39.760 –> 00:22:48.030
Philip Sellers: they’re adding some additional things so that we can safeguard and restrict features at the Uag itself.

109
00:22:48.100 –> 00:23:16.489
Philip Sellers: The u unified access gateway is that edge device. It’s a hardened Linux appliance, but it does have some features that we can set from a security standpoint like we can turn off USB direction universally from the uag, and so these features allow us, to to set this as a different set of policies for external users than what we allow for internal users. And I think that’s the simplest way to put this is.

110
00:23:16.490 –> 00:23:26.500
Andy Whiteside: it gives us another place to kind of set those security settings for that external use case. A. V one. Codec enhancements.

111
00:23:26.810 –> 00:23:53.620
Philip Sellers: So this is neat. There’s huff hardware offload hardware and code support. Now, in conjunction with Nvidia Gpus. So the the ability for Codex to be offloaded just improves performance. And so if you do have Gpus available within your horizon host, you can make use of that. They’ve also extended support for Linux clients to be able to use the

112
00:23:53.690 –> 00:23:57.540
Philip Sellers: underneath blast. So that’s

113
00:23:57.810 –> 00:24:05.969
Philip Sellers: just an evolutionary step of you know us moving through technologies and improvements. You know.

114
00:24:05.980 –> 00:24:14.380
Philip Sellers: at some point something else will replace AV one. But it is probably the best codec we can use for encoding today.

115
00:24:14.560 –> 00:24:17.340
Andy Whiteside: Audio video sync improvements from Mac.

116
00:24:17.930 –> 00:24:34.699
Philip Sellers: Yeah. So this is something extending on the support that that vmware did for windows. You know there, there can be times with AV where things get a little out of sync, and you can kind of notice a little bit of latency

117
00:24:34.700 –> 00:24:57.739
Philip Sellers: within your sessions and stuff. So they’ve been working hard within windows, clients to to pick this up. And so now that’s come to the Mac client as well. And so that’s that’s really what we’re talking about is just making sure that we don’t have a a dubbed film effect going on. When we’re watching video inside of a Vdi session.

118
00:24:58.030 –> 00:24:58.720
Andy Whiteside : Non.

119
00:24:59.640 –> 00:25:11.010
Andy Whiteside: and this is important to call out to. I mean this, this is Mac as an endpoint client.  we love our Mac users. But someday, someday, sometimes I got to get the windows stuff.

120
00:25:11.070 –> 00:25:40.540
Philip Sellers: Yeah, I mean, you look behind me. I’ve got Mac posters all over the wall. You know I love my Mac, and I will tell you I’ve tried to work from Mac office, and it just doesn’t work for me. I need full blown excel, and it’s no knock on what Microsoft delivers in excel for Mac. But there’s just differences, and I much prefer to work in a Vdi all day long.

121
00:25:40.740 –> 00:25:47.670
Andy Whiteside: Because I get the right tools. Yeah. next one’s 3D hardware support for Linux. Vdi.

122
00:25:48.020 –> 00:25:57.050
Philip Sellers: yeah, this is this is really nice, because, you know, the Linux agent on physical desktops did not support Gpus in the past. So

123
00:25:57.100 –> 00:26:16.900
Philip Sellers: this is something where you can harness that. And and we all know the benefit that comes from gpu acceleration. So having this for Linux delivery, that’s gonna make things move forward at a lot faster speed again. A lot of these things I feel like is vmware investing?

124
00:26:17.030 –> 00:26:27.080
Andy Whiteside: For where things could go in the future? On a non windows operating system. Yeah. And Mac in the back end.

125
00:26:27.400 –> 00:26:36.639
Andy Whiteside: And look you, did you didn’t say a non Microsoft Linux, I mean, could Microsoft at some point? In fact, they should especially in the security where we’re living in. But

126
00:26:37.030 –> 00:26:40.159
Andy Whiteside: you know. Non, a non-windows option on the input, of course.

127
00:26:40.450 –> 00:26:46.880
Andy Whiteside: But on the back end, yeah, why not should be should be Linux all the way. That’s the next best way to host

128
00:26:47.120 –> 00:26:50.010
Andy Whiteside: those client-server related apps.

129
00:26:50.300 –> 00:26:55.550
Andy Whiteside:  Linux makes ton of sense. Yeah, I mean, we’re seeing

130
00:26:56.010 –> 00:27:00.490
Philip Sellers: we’re seeing the world of containerized things starting to in in

131
00:27:00.930 –> 00:27:16.129
Philip Sellers: impact our world here in this space. And so it’s gonna be really interesting to see in the next few years. You know how how we may be able to improve security by, you know, changing the borders of what we’re running in on the back end.

132
00:27:16.520 –> 00:27:30.420
Philip Sellers: Alright, Philip, couple more here enhanced the Mac and Linux support abilities. We talked in the endpoints here, the back end, obviously the endpoint. Right troubleshooting, you know any of those

133
00:27:30.940 –> 00:27:40.189
Philip Sellers:  disconnect, or or you know, black screen where you just don’t get output coming to your machine. So it’s really around logging

134
00:27:40.390 –> 00:27:48.549
Andy Whiteside: and then finally, I think this last one we’ll cover is high definition and high dynamic range for hevc Codex.

135
00:27:48.600 –> 00:27:52.280
Andy Whiteside: Hip. Do you pronounce that HVEV. C. Or HIV.

136
00:27:53.090 –> 00:28:13.070
Philip Sellers: You know, I actually don’t know how to pronounce it. So we’ll we’ll go with HE. DC. Codex just to be safe. Maybe maybe somebody can comment. And let us know how you actually say it. But yeah, I mean high definition how to arrange. Yeah, we, we saw this come out on Tvs.

137
00:28:13.090 –> 00:28:15.990
Philip Sellers: First, you know our our video

138
00:28:16.220 –> 00:28:37.670
Philip Sellers: applications for movies and having greater color depth. But in business it has a lot of applicability, especially in like graphics, houses and places that are doing color grading. And so, you know, even, you know, possibly in engineering and architecture applications where they’re building, you know large things. And

139
00:28:37.790 –> 00:28:57.329
Philip Sellers: they need to be able to see shading. And and, you know, build out these things. So these Codecs. Just help but it’s a response to where we’ve gone from a hardware perspective. The things we just saw in the living room have now moved to the enterprise. And now we’ve got monitors and things with with these capabilities.

140
00:28:58.030 –> 00:29:09.149
Andy Whiteside: I guess historically, we would have dummy this down, but now we’re allowing it if we turn it on. And then, of course, that’s when Gpus in our back end systems, either a shared or even a physical pass through become

141
00:29:09.320 –> 00:29:10.320
Andy Whiteside: more important

142
00:29:10.660 –> 00:29:16.450
Philip Sellers: it is, and and you know we’ve we’ve seen a lot in the endpoints change you know, with

143
00:29:16.570 –> 00:29:29.719
Philip Sellers: OLED displays. And then, whatever came after that, I can’t keep up with the acronyms in it. But yeah, we have those in our hands with phones and and ipads and android tablets. Those

144
00:29:29.820 –> 00:29:41.090
Philip Sellers: those have been some of the first adopters of of this technology when it comes to superior colors and and depth and things so pretty cool to to see.

145
00:29:41.940 –> 00:30:00.830
Andy Whiteside: Alright, look, we got a couple more minutes here, let’s hit the unified communication piece, and then we’ll wrap it up for part one I guess it’s you can’t go without saying that in today’s age you need to be able to use a centralized, presented virtual desktop or app solution. But you also need to be able to meet remotely with tons of people simultaneously.

146
00:30:00.880 –> 00:30:08.679
Andy Whiteside: And that’s where unified communications comes in simulcast streaming for superior quality with Microsoft teams.

147
00:30:08.810 –> 00:30:20.240
Philip Sellers: Yeah, so simulcast streaming is is interesting. It’s a way of syncing up things when you’re doing kind of a coordinated  stream. And so

148
00:30:20.500 –> 00:30:33.390
Philip Sellers: now, with this, each participant E, each participants gonna independently connect into the call and and it will automatically bring things together. So you know, this is really trying to to help.

149
00:30:34.130 –> 00:30:35.360
Philip Sellers: The

150
00:30:36.540 –> 00:30:46.380
Philip Sellers:  Awkwardness, I guess, is the right word, the awkwardness sometimes of of doing these live events and things. Because.

151
00:30:46.600 –> 00:30:52.020
Philip Sellers: yeah, I saw comedians make fun of this, especially in the beginning of Covid. You know, you know.

152
00:30:52.720 –> 00:31:03.980
Philip Sellers: making fun of how etiquette happens, how we act on these calls. And so this is just technology responding to help us

153
00:31:05.050 –> 00:31:19.650
Philip Sellers: provide a better experience as we, we kind of create these live events. And you know, th, this is one, and we don’t use the teams platform for it here. But it’s one where we do a ton of workshops and webinars and things, and so we run into it a lot.

154
00:31:19.650 –> 00:31:38.910
Andy Whiteside: and it. You know, the simulcast feature from teams is pretty cool and and different than what we had in some of the other platforms. Well, it’s just a matter of time before we consider using teams. When we feel like it’s ready for that. Yeah. Well, you know, we’ve made a huge step forward in the past week. I don’t know if you tried. The new teams client, but there’s a new optimized

155
00:31:38.980 –> 00:31:46.940
Philip Sellers: runs, better less resources version of teams that is starting to make its way out into the wild. And it’s pretty good

156
00:31:47.050 –> 00:31:57.820
Andy Whiteside: next one, says Mac. Clients get teams, background blur. You would assume that has been around for a while, but not necessarily in the Vdi world. Sounds like we’re treating our Mac friends as first class citizens on that one.

157
00:31:57.950 –> 00:32:08.819
Philip Sellers: Yeah, the teams calls with the blurred background. I mean, we we get take it for granted. In Zoom, for instance, it made its way into teams. And now we can do that with

158
00:32:08.880 –> 00:32:20.159
Philip Sellers: the the experience and offload from a horizon client. So if some of these features. And we’ve talked about this on the podcast before. You see, features were

159
00:32:20.430 –> 00:32:38.729
Philip Sellers: delayed. Certainly not. First there, when we we went into Covid. And so a lot of these optimizations to make you see work. Well, have continued to develop over time. This is just another feature being added in for parity. During an offload session.

160
00:32:38.890 –> 00:32:42.859
Andy Whiteside: Next, one is screen snipping on teams for Mac client, what does this mean?

161
00:32:43.250 –> 00:32:54.699
Philip Sellers: Yeah. So now, we can actually do screenshots and things like that from a a Bdr running in full screen. For some reason this was always just a a little problem.

162
00:32:54.840 –> 00:33:16.740
Philip Sellers: you know, it worked most of the time, but then there were times where it created like a black void. When you you tried to screenshot it, and so now the screenshot is taken on the end point first and then saved to the vm, so they’re changing the way that it works inside of the client. The the horizon software client on Mac

163
00:33:16.810 –> 00:33:19.249
Philip Sellers: to make this a little more reliable

164
00:33:19.950 –> 00:33:22.310
Andy Whiteside: breakout rooms in teams.

165
00:33:22.640 –> 00:33:34.470
Philip Sellers: Yeah, I don’t know a ton of people that use breakout rooms. Yeah, I’ve I’ve used them a couple of times. This is definitely more of a conferencing type feature. So

166
00:33:34.740 –> 00:33:42.970
Philip Sellers: now there’s support for that within the offloaded client for horizon on Mac.

167
00:33:43.200 –> 00:33:49.610
Andy Whiteside: Actually, no, this one’s not just Mac. This one’s across the board, actually, right? It’s left to our reactions and teams.

168
00:33:49.640 –> 00:34:18.909
Philip Sellers: Yeah, we we love our emojis, we we’ve I’ve talked to educator friends about how? you know, kids these days. God, that feels old to say, kids these days use their emojis. But yeah, I think about our collade man, Andy. And we’ve we’ve got that in one of our communication apps. And that’s just our our way of saying way to go breaking through. It’s awesome.

169
00:34:18.960 –> 00:34:40.779
Philip Sellers: so you know. Now you’ve got those reactions. During our our last quarterly meeting of the whole team, I saw a lot of people using emojis, and, you know, rallying behind friends and announcements and things that we made as a company. And so I think this is great to have that kind of feedback and feature across the board for the offloaded

170
00:34:40.800 –> 00:34:42.730
Andy Whiteside: same experience.

171
00:34:43.659 –> 00:34:52.989
Andy Whiteside: Yeah. one of my podcasts, we can talk about the Us. Government spend a million dollars or 20 million dollars or something for, like one of the universities to study emojis.

172
00:34:53.020 –> 00:34:55.030
Andy Whiteside: you know it’s it’s just a reality.

173
00:34:55.440 –> 00:34:56.929
Philip Sellers: it is, I mean.

174
00:34:57.270 –> 00:35:05.669
Philip Sellers: who would have thought these little pictures? Would, you know quickly take over the world. But yeah, they have their own language. And

175
00:35:05.840 –> 00:35:08.810
Philip Sellers: yeah, I think it was telling a few years ago when

176
00:35:09.240 –> 00:35:19.209
Philip Sellers:  apple came out with their release, and it like quadrupled or quintupled the number of emojis that you had

177
00:35:19.410 –> 00:35:30.669
and then you’ve got all the different variations and permutations for each one of these. So yeah, it’s it’s a while kind of thing. But it’s how we communicate these days.

178
00:35:31.080 –> 00:35:39.009
Andy Whiteside: Alright, Philip, I’m gonna pause. This there, that’s part one. We’ll cover the horizon client updates in a minute or next time for part 2.

179
00:35:40.140 –> 00:35:54.590
Andy Whiteside: That sounds good. Thanks so much, Andy. Yeah. Hope you enjoy the rest of your week, and I look forward to finishing this conversation. amazing to watch the amount of progress horizon vmware is making with horizon product.

180
00:35:54.620 –> 00:36:04.909
Philip Sellers: Yeah. I mean, if there’s any clear signal, this is one where they’re not sitting idle, they’re they’re very busy. They’re very productive. So

181
00:36:04.920 –> 00:36:07.709
Andy Whiteside: certainly, we’re all gonna be watching. Yup.

182
00:36:07.930 –> 00:36:16.650
Andy Whiteside: yeah, don’t let the broadcom think in the way the technology advancements there that trains keeping on absolutely. Yeah. Alright, sir, enjoy the rest of your week.

183
00:36:17.030 –> 00:36:18.380
Philip Sellers: See? Y’all, next time.