112: The Citrix Session: DaaS or VDI: Which is best for your organization?

Aug 9, 2022

(DaaS) and virtual desktop infrastructure (VDI). There’s a lot to consider, and Citrix gives you flexible options to let you take advantage of the strengths of both.

DaaS and VDI both provide users access to virtual desktops and applications and can free up valuable time and resources for IT teams. So, how do you choose what’s best for you? Running DaaS or VDI depends entirely on your business needs, with various factors such as cost, security, and management to consider. Are you hoping to realize cost savings over time or right away? Do you want your IT to shift their focus away from managing apps and desktops, or do you need greater control? Do you have seasonal employees, or have you recently gone through a merger or acquisition and need to scale up quickly?

As a leading DaaS and VDI provider, Citrix can deliver the technologies you need to meet the unique needs of your organization and workforce, helping you move beyond traditional desktop management.

Host: Andy Whiteside
Co-host: Todd Smith
Co-host: Geremy Meyers
Co-host: Patrick Coble


00:00:03.330 –> 00:00:08.400
Andy Whiteside: hello, and welcome to episode 112 of the citrix session i’m your host Andy whiteside i’m an.

00:00:08.910 –> 00:00:14.969
Andy Whiteside: onsite at the airport, I think I had a guy next to me just no joke into his friend on the phone about living at the Charlotte airport time.

00:00:15.809 –> 00:00:20.730
Andy Whiteside: and say that because usually I fly out at 6am so there’s no time to have time to waste grab a coffee and go but.

00:00:21.540 –> 00:00:27.210
Andy Whiteside: This week, next week and the following week i’ll be hanging out here for the afternoon and try to catch a flight out West so.

00:00:28.140 –> 00:00:39.330
Andy Whiteside: going to get plenty of time to get stuff done at the airport with us, we have a couple of our normal host co host got Todd Smith from citrix Todd is now the director of sales engineers for Canada Todd how’s it going.

00:00:40.260 –> 00:00:42.690
Todd Smith – Citrix: Very good Andy I share your.

00:00:43.890 –> 00:00:45.000
Todd Smith – Citrix: Your travel close.

00:00:46.170 –> 00:00:54.510
Todd Smith – Citrix: To me, was coming back from Columbus Ohio last Friday and it probably could have walked back to Boston faster than I was able to get there and.

00:00:55.020 –> 00:01:04.980
Todd Smith – Citrix: Had the infamous luggage didn’t show up until late Saturday night from a Friday morning flight so yeah it, you know, for those of us who are wishing to get back on the road.

00:01:05.820 –> 00:01:13.860
Todd Smith – Citrix: we’re living living the dream, right now, so can’t wait to start traveling up to you again like we talked about last week.

00:01:15.150 –> 00:01:22.230
Andy Whiteside: I was just holding up one of my bottomless Patagonia bags, which I somehow managed to get four or five days worth of clothes in every time.

00:01:24.030 –> 00:01:27.660
Andy Whiteside: Central man I can’t imagine checking luggage at this point yeah.

00:01:30.210 –> 00:01:36.990
Andy Whiteside: But we also have JEREMY monitors as JEREMY is the director of sales you doing for the East coast now JEREMY what the official two weeks, three weeks.

00:01:37.710 –> 00:01:46.320
Geremy Meyers: Two weeks ish yeah yeah for sure you know what maybe we do this one together next week i’ll be in the airport actually in the airport in a couple hours but also be the airport.

00:01:47.550 –> 00:01:59.730
Geremy Meyers: Making a very strange flight to raleigh from Charlotte which is you know, is an entire I think it’s a seven minute flight but it’s only because my my next leg will be down the fort lauderdale and the only way to make it work.

00:02:01.140 –> 00:02:07.110
Geremy Meyers: Because I got to stick my truck somewhere is to flatter raleigh from Charlotte So there you go.

00:02:08.190 –> 00:02:15.780
Andy Whiteside: I can, I can relate I think i’m driven to raleigh phone back to Charlotte had to get to raleigh to get my car and drive it back somewhere it’s.

00:02:17.640 –> 00:02:26.100
Geremy Meyers: Just I saw myself a scenario where I would land somewhere ago where the heck is my vehicle it’s not on the fourth floor of the deck it’s in a different city that would.

00:02:26.640 –> 00:02:33.540
Andy Whiteside: Be oh that’s interesting you where do you where do you park your car I parked on the fourth floor of the daily deck in the same area every time period.

00:02:34.110 –> 00:02:39.330
Geremy Meyers: I park on the fourth floor of the daily deck every time in the same spot period.

00:02:40.050 –> 00:02:50.400
Geremy Meyers: It depends on that well, let me, let me say this right, so I try to be a good steward and i’ve noticed the prices in the deck have gone up so i’ve started go I used to be the hourly deck now move the daily deck and it just depends on when you show.

00:02:50.400 –> 00:02:55.680
Geremy Meyers: up, so my last two or three times out who have been on the roof, because people are flying again.

00:02:56.010 –> 00:02:56.970
Andy Whiteside: A lot yeah.

00:02:57.180 –> 00:02:57.780
Geremy Meyers: And the day.

00:02:57.840 –> 00:02:58.740
Geremy Meyers: Before yeah.

00:03:00.060 –> 00:03:00.240
Todd Smith – Citrix: But i’ve.

00:03:00.480 –> 00:03:01.680
Andy Whiteside: gotten used to my truck.

00:03:03.120 –> 00:03:03.540
Andy Whiteside: But I thought.

00:03:04.230 –> 00:03:15.450
Todd Smith – Citrix: I was gonna say i’ve gotten you back in the habit of dropping a pin on where I parked the car and also taking photographs of the the actual room numbers.

00:03:17.460 –> 00:03:25.710
Todd Smith – Citrix: You know where where i’m staying at hotels and things like that, so no that’s a sign of age or sign and we’re getting back to somewhat normal travel schedules.

00:03:26.190 –> 00:03:29.130
Geremy Meyers: we’ve never we’ve never sounded more old in our lifetime.

00:03:29.520 –> 00:03:31.470
Todd Smith – Citrix: Exactly exactly well.

00:03:31.770 –> 00:03:33.240
Andy Whiteside: it’s also a fun how much you drink.

00:03:34.590 –> 00:03:34.950
that’s fair.

00:03:36.120 –> 00:03:36.540
Geremy Meyers: that’s fair.

00:03:38.640 –> 00:03:48.630
Andy Whiteside: Well guys, we are fortunate to have with us a citrix legend Patrick coble at nashville Tennessee Patrick is the leader of the nashville or one of the leaders of the national nashville.

00:03:49.230 –> 00:03:56.790
Andy Whiteside: citrix user group community and and a huge contributor to the citrix Community just in general for as long as i’ve known him Patrick how’s it going.

00:03:57.780 –> 00:04:05.460
Patrick Coble: doing good doing good i’m a i’m a little tired, I did 25 miles of kayaking with my son with the scouts this weekend so.

00:04:05.550 –> 00:04:06.480
Geremy Meyers: I guess that’s awesome.

00:04:07.260 –> 00:04:14.160
Patrick Coble: So it was super fun, it was hot and i’ll probably get caught up on sleep in a day or two.

00:04:15.420 –> 00:04:19.170
Andy Whiteside: yeah that sounds like a lot of fun with it like rapids are just flat water.

00:04:20.250 –> 00:04:25.170
Patrick Coble: Just a little baby things every they’re the best part was is, we decided to.

00:04:25.920 –> 00:04:35.700
Patrick Coble: You know crash land at like a sandbar so that we could all have lunch together and we picked the best sandbar to go to because it was 100% entertainment because.

00:04:36.090 –> 00:04:43.980
Patrick Coble: There was a nice shallow section, but on the left hand side of that bank, it was it was it was gusher rapid with a tree stump that and fallen down.

00:04:44.370 –> 00:04:53.640
Patrick Coble: So people were crashing left and right canoes and the canoes so it was it was entertaining I saved two Dudes phone in a ziploc bag.

00:04:54.510 –> 00:05:06.540
Patrick Coble: Because he dipped it after a canoe random TIM and I jumped in and save this little ziploc bag that was floating with this phone and I was like you know, I guess, I did my good deed for the day you know.

00:05:07.620 –> 00:05:10.050
Andy Whiteside: And then you have to do as a parent or a scout leader.

00:05:11.310 –> 00:05:11.520
Patrick Coble: yep.

00:05:12.270 –> 00:05:13.170
Andy Whiteside: It never in.

00:05:14.280 –> 00:05:14.880
Geremy Meyers: master.

00:05:16.920 –> 00:05:22.980
Geremy Meyers: But I would say, where we have Patrick on the Cumberland are you somewhere else, a little bit about.

00:05:23.070 –> 00:05:36.210
Patrick Coble: The buffalo river so out out basically West from here about an hour and some change so not really a ton of rapids, but it was good in the shade was key and those hot days.

00:05:37.320 –> 00:05:39.960
Geremy Meyers: Okay, and fantastic.

00:05:41.640 –> 00:05:52.590
Andy Whiteside: Well guys let’s let’s jump into this, I know we can chit chat forever and it would be great really but the topic we chose it for today, the blog from the citrix blog site isn’t DAS da so.

00:05:53.580 –> 00:06:02.220
Andy Whiteside: i’ll never forget the first time I said SAS in front of Jeremy and we were confused each other, we didn’t have written about SAS software company based out of raleigh or SAS.

00:06:02.670 –> 00:06:09.540
Andy Whiteside: Software as a service topic and in following on the same page about five minutes into the conversation here, you probably don’t remember that I remember.

00:06:09.930 –> 00:06:16.110
Geremy Meyers: When I was a customer I had for for a couple of minutes there right so that was very confusing for sure I do remember that.

00:06:23.340 –> 00:06:26.550
Geremy Meyers: Oh, did we lose any Amazon views he’s muted himself.

00:06:27.660 –> 00:06:42.810
Andy Whiteside: Sorry, I got my zoom had a hiccup and then it came back sorry about that i’m recording this to the web So hopefully hopefully i’m at the airport, you know American Airlines blown swipe I will see if the cloud statements or not, I think it will been been good to me.

00:06:45.060 –> 00:06:52.320
Andy Whiteside: really good really that’s cloud and that’s a great example of how the cloud can be a savior you know back in the day that would have been that would have been the end of our podcast what just happened.

00:06:55.440 –> 00:07:05.670
Andy Whiteside: So topic today is from one of the citrix employees heather tat and I think from the consulting side you guys don’t have to you know differently, but the topic is data EAS.

00:07:06.240 –> 00:07:14.160
Andy Whiteside: or vdi which is best for your organization which I think is extremely interesting wrapped it all kinds of companies were part of we joined the digital.

00:07:15.330 –> 00:07:21.420
Andy Whiteside: Digital workspace ecosystem alliance today, so that we could kind of help educate people on what’s what in this space.

00:07:22.530 –> 00:07:23.310
Andy Whiteside: The integrity did.

00:07:24.900 –> 00:07:32.100
Andy Whiteside: We we we really have a goal to help customers get educated on what’s what one is versus the other.

00:07:32.520 –> 00:07:40.170
Andy Whiteside: And then, what they mean to you, Mr customer I think i’d love for Todd to kind of explain the topic why it’s important and also maybe layer in.

00:07:40.590 –> 00:07:48.600
Andy Whiteside: citrix changing the name of your as a service offerings to be data all encompassing versus the the legacy and then.

00:07:49.050 –> 00:07:56.370
Andy Whiteside: Virtual APP and have that commitment desktop virtual APP and desktop service offering excuse me virtual APP and desktop versus virtual APP and desktop service.

00:07:56.910 –> 00:08:04.710
Andy Whiteside: Virtual APP and desktop services now all things, including data, including what I would call death before that Todd, why is this topic so being so confused.

00:08:05.580 –> 00:08:13.230
Todd Smith – Citrix: So Andy you just confuse even myself on the on on your explanation on on all of the different historic names that we’ve had.

00:08:14.760 –> 00:08:22.140
Todd Smith – Citrix: For vdi or virtual Apps in virtual desktops right So if I if I go back and look at.

00:08:22.740 –> 00:08:32.220
Todd Smith – Citrix: You know, when we first had Zen APP and Zen desktop it was pretty prevalent as to what we’re talking about we’re talking about application virtualization desktop virtualization.

00:08:33.150 –> 00:08:38.070
Todd Smith – Citrix: Then we came out with citrix virtual Apps and desktops which kind of combined.

00:08:38.520 –> 00:08:52.290
Todd Smith – Citrix: Some of the licensing, as well as some of the capabilities and then, as we introduce citrix virtual Apps and desktop service that was our first real foray into hosting the infrastructure up in the cloud.

00:08:53.040 –> 00:09:04.170
Todd Smith – Citrix: leveraging that control plane so delivering the traditional virtual Apps virtual desktops leveraging a cloud based management infrastructure.

00:09:05.040 –> 00:09:15.210
Todd Smith – Citrix: And then you know gartner kind of threw us a little bit of a curveball and they came out with daz as a definition of the marketplace right So if you look at.

00:09:15.930 –> 00:09:28.410
Todd Smith – Citrix: desktop as a service, it includes traditional vdi it can you know it also includes the managed service component of delivering a virtual APP or a virtual desktop.

00:09:29.220 –> 00:09:35.430
Todd Smith – Citrix: In there’s couple of flavors of that piece of it right, it can be delivered completely as a turnkey service like we have now.

00:09:36.390 –> 00:09:55.980
Todd Smith – Citrix: Or it can be something that a partner or a customer chooses to leverage kind of at the same time, the challenge here is that the the daz component, the dad’s name has kind of encompassed everything right so for customers who have vdi but you know, on on Prem vdi solution.

00:09:57.690 –> 00:10:06.330
Todd Smith – Citrix: You know that falls under death for customers who are using a true desktop as a service like citrix managed desktops or.

00:10:07.350 –> 00:10:19.860
Todd Smith – Citrix: Some other branded offering that any of our partners have that are that are specific to them being able to to include that under the dads title as well.

00:10:20.430 –> 00:10:33.840
Todd Smith – Citrix: But really what it comes down to is the ability to get pretty much anything you need that includes applications desktop operating systems we’ve talked in the past about you know desktop operating system is really a giant APP.

00:10:35.490 –> 00:10:46.410
Todd Smith – Citrix: and connecting it in with your data as well as all of the other services that kind of encompasses all of those components into one one kind of definition so daz is where we’re at with that.

00:10:47.490 –> 00:10:55.260
Geremy Meyers: So real quick I know Andy if you let him will go off on the definition of vdi in the first place, so this is something that we’ve debated ever.

00:10:55.860 –> 00:11:00.960
Geremy Meyers: You know, for years, right so vdi or server based computing like all those kinds of things, but.

00:11:01.410 –> 00:11:11.070
Geremy Meyers: When I think Todd what you’re trying to say is that, historically, there was kind of two different there’s like a fork in the road either vdi which was something that you as a customer completely.

00:11:11.550 –> 00:11:19.350
Geremy Meyers: owned and managed and dad was always like something that was completely owned and managed from a like a vendor perspective and I don’t mean just.

00:11:19.740 –> 00:11:29.250
Geremy Meyers: As we know it today, you know there’s several different iterations but desktops management, the whole nine yards, was it was almost like Amazon workspaces versus you hosting all of this yourself.

00:11:29.640 –> 00:11:36.780
Geremy Meyers: And I guess where we’ve landed is it’s actually a little bit of a spectrum right, so there is a vdi and that’s typically an on premise type solution.

00:11:37.380 –> 00:11:46.320
Geremy Meyers: or something that you completely host and manage in a cloud right there’s nothing stopping you from standing up an entire infrastructure vdi but in say aws.

00:11:47.730 –> 00:11:56.790
Geremy Meyers: But now we’ve got a daz but sort of a hybrid kind of solution and and I think that’s what gartner felt like they needed to go through and define right there is a.

00:11:57.240 –> 00:12:05.910
Geremy Meyers: There is a model of dads which is put a quarter in and get a desktop right and that hosts that that hyper scale or will completely host and manage the entire stack or.

00:12:07.110 –> 00:12:14.430
Geremy Meyers: And this is where citrix sets where you know, a piece of that is managed by citrix and then it’s kind of up to you to decide where those workloads need to live.

00:12:15.060 –> 00:12:21.810
Geremy Meyers: And I think that’s where we’ve seen most of our customers land is it’s definitely a mixture of offload which you can put then manage.

00:12:22.620 –> 00:12:29.130
Geremy Meyers: You where you need to more importantly, where you need to where you need to manage and that could be you know I think this is what this article gets into.

00:12:29.490 –> 00:12:38.280
Geremy Meyers: based on cost based on security based on you know any number of non technical regulation, you know I think this is where the solution sets.

00:12:40.110 –> 00:12:41.580
Andy Whiteside: So, Patrick as a.

00:12:42.030 –> 00:12:52.110
Andy Whiteside: player in the system, do you do, do you feel like gardener in the major vendors like citrix that are going this route, where it’s coming as a service that could be considered as whether it’s Apps or.

00:12:52.620 –> 00:12:57.990
Andy Whiteside: Secure Apps or vdi or server desktops do you think that’s helping with the confusion or making it worse.

00:12:58.860 –> 00:13:09.180
Patrick Coble: I think it’s a little bit of both because I think we’ve all kind of hit on it is vdi was like that term that kind of glued all the things going like remote delivery of application.

00:13:09.630 –> 00:13:17.340
Patrick Coble: And then the term workspace was dovetailed into that to have SAS Apps and other things, and now daz is just.

00:13:17.760 –> 00:13:28.860
Patrick Coble: Another thing that we’ve been talking about I guess for probably 10 plus years but it’s always been hosted by someone or something else, and now it’s being hosted by.

00:13:29.340 –> 00:13:39.900
Patrick Coble: The citrix the vm where’s the microsoft’s the in now even like a new tonics and other players out there that are either doing the brokering.

00:13:40.440 –> 00:13:57.960
Patrick Coble: Or the brokering, plus the hosting and so i’ve seen a lot of growth in it, it reminds me of kind of the 2008 to 2000 probably 11 like vdi trade up days of the citrix world where everybody is doing something two for one special this and that.

00:13:59.010 –> 00:14:11.610
Patrick Coble: But in my opinion, for what i’ve seen it’s like it’s really hard for every depending on where you’re at and financially, to be able to pay X about per user per month per machine.

00:14:12.180 –> 00:14:29.280
Patrick Coble: And that financial differences massive when you compare to that traditional on site deployment in some data Center anywhere that you control for the past 30 years so that’s kind of the big one for me, but yeah the confusion is is abundance everywhere on it.

00:14:30.480 –> 00:14:38.280
Andy Whiteside: So, Patrick is it, are you most disappointed, because the year of vdi that we kept saying what’s coming next year is never going to happen because we’re moving the term to death.

00:14:38.700 –> 00:14:40.290
Patrick Coble: that’s correct yeah it’ll it’ll.

00:14:40.500 –> 00:14:46.440
Patrick Coble: it’ll it’ll never happen in that sense, but I think one thing that is still been impressive to me is that it’s still.

00:14:46.800 –> 00:14:50.010
Patrick Coble: The market itself still still seems like it’s growing.

00:14:50.460 –> 00:15:05.280
Patrick Coble: And I thought that it would slow down and then especially post coven I thought everybody is probably bought all the things that are going to buy for the work to support the work from home users, but it still just keeps coming the hits keep coming so it’s.

00:15:05.670 –> 00:15:08.070
Patrick Coble: In the development to from citrix vmware.

00:15:08.400 –> 00:15:21.510
Patrick Coble: And then Microsoft to I mean it’s it’s those big three in that in that space, in my opinion, are really kind of driving the driving force of what gartner is going to call DAS or any other place.

00:15:22.560 –> 00:15:27.450
Andy Whiteside: yeah I think there’s a huge opportunity for folks like Patrick and i’d even folks from the citrix seem to.

00:15:28.080 –> 00:15:34.170
Andy Whiteside: Just really go help educate customers on what is vdi versus data and how vdi became Dev and some cases and.

00:15:34.620 –> 00:15:47.610
Andy Whiteside: really help customers start to see what the field looks like and where the finish line for them, or at least closer to the finish line might might look like let’s let’s break it down into what heather brought up here let’s hear you want to take the cost savings conversation for us.

00:15:48.450 –> 00:15:49.350
Geremy Meyers: yeah so.

00:15:50.820 –> 00:15:56.970
Geremy Meyers: I mean there’s a couple of pieces here that it touches on what is the pay per user subscription model which is certainly a thing right.

00:15:57.540 –> 00:16:01.740
Geremy Meyers: and obviously that depends on what data model we’re talking about here, but.

00:16:02.220 –> 00:16:14.010
Geremy Meyers: You know a lot of cases, you know the citrix model looks like this, there is a management plane that citrix host right and it’s responsible for the brokering as possible before a lot of the features right because those are defined.

00:16:14.670 –> 00:16:27.990
Geremy Meyers: In a lot of cases on the back end but, and this is one of the first conversations we have with customers, when we talk about this is, you know the desktops the virtual desktops the virtual Apps you know those are going to sit in a data Center.

00:16:29.430 –> 00:16:39.390
Geremy Meyers: That makes the most sense, a lot of case what’s driving that data Center is the cost right, you know what sort of deal do I get with Microsoft in terms of spin you know, maybe.

00:16:40.320 –> 00:16:46.530
Geremy Meyers: Maybe i’ve got some technical debt that i’ve got a you know that came right off the books, yet, and so I need to put some of these desktops on Prem.

00:16:46.890 –> 00:16:54.060
Geremy Meyers: You know so there’s an opportunity to literally you know, have the brains, you know, basically, the management piece sitting in one location in.

00:16:55.080 –> 00:17:02.520
Geremy Meyers: You can sort of manage costs by putting those desktops wherever they need to sit that makes the most sense from a cost perspective now that’s not the only.

00:17:02.790 –> 00:17:10.080
Geremy Meyers: Variable that you need to consider, but this is clearly one of the biggest ones that customers are are considering, and you know, honestly, one of the biggest use cases there’s the are.

00:17:10.530 –> 00:17:16.350
Geremy Meyers: Right so in the case in the past, you know I might have to stand up an entire second data Center to support you know, Dr motion.

00:17:16.740 –> 00:17:30.210
Geremy Meyers: Now I can do it, you know, on demand in the cloud and have a mixture of like something on Prem as well as something in a hyper scale or just to support you know that scenario, but do it at a smaller price point than what I might have had to do 10 years ago.

00:17:36.000 –> 00:17:49.020
Andy Whiteside: I had to come off mute um any other thoughts on the cost savings piece of news as JEREMY pointed out and as we all know, you know, a server hosted desktop that you invest in and provide to yourself versus a.

00:17:49.410 –> 00:17:55.620
Andy Whiteside: True desktop as a service service it’s all inclusive from, say, a weak spot or a citrix or Microsoft.

00:17:56.640 –> 00:17:58.290
Andy Whiteside: Obviously cost.

00:17:59.280 –> 00:18:03.690
Andy Whiteside: cost is going to be where it’s going to be and how do you make sure you get the most value for that spin.

00:18:05.010 –> 00:18:10.470
Todd Smith – Citrix: It and I think I think if I look at the end when you when you talk about you know the overall cost.

00:18:12.120 –> 00:18:19.110
Todd Smith – Citrix: oftentimes you know architects and data Center architects and folks over scaling out building out these environments.

00:18:20.370 –> 00:18:28.650
Todd Smith – Citrix: You know they never wanted to have a user and said hey I don’t have a resource available to me, so you know we were trained back in the early days of doing an n plus one.

00:18:29.310 –> 00:18:38.910
Todd Smith – Citrix: Architecture model so that will never be without capacity or capabilities, the problem is, is that you know, in a data model in a service model.

00:18:39.300 –> 00:18:56.130
Todd Smith – Citrix: You know you’re paying for those things to always be available right so so it really doesn’t make a lot of sense and that’s where you know as JEREMY was talking about the you know the scalability or the dvr capabilities you can’t really talk about cost savings without talking about.

00:18:57.960 –> 00:19:14.670
Todd Smith – Citrix: How do I manage scalability and I know that’s the next that that’s kind of next bullet item on this on this blog, but it really comes down to you know how much, are you really going to need and how do you expand it and not only expand it but be able to contract it as well right so.

00:19:16.020 –> 00:19:23.760
Todd Smith – Citrix: You know, whether it be a you know if you’re in retail right, you have a busy season, where you’re ramping up and adding additional.

00:19:24.150 –> 00:19:33.540
Todd Smith – Citrix: Employees to your to your stores, or if you’re in health care, you need to add additional resources based on things like the pandemic, or if you’re.

00:19:34.500 –> 00:19:50.250
Todd Smith – Citrix: You know you’re in financial services and you’re now seeing a large number of interns coming in, for the summer, those are all those are you don’t plan, those for the entire year you plan those on having the ability to scale out and then scale back when you need is no longer there.

00:19:51.570 –> 00:20:07.620
Todd Smith – Citrix: that’s always been a challenge with some of the vdi infrastructures is how do you build it out, so you meet the maximum number of the maximum capacity that’s needed at that time and not have to worry about going out and contracting additional resources.

00:20:08.760 –> 00:20:09.660
Todd Smith – Citrix: To meet those needs.

00:20:11.280 –> 00:20:22.110
Andy Whiteside: And so Todd you kind of blended into the scalability conversation and then really take on two tasks right one is the infrastructure that’s Well, first of all it’s having a technology in place that can scale in terms of the.

00:20:22.860 –> 00:20:31.050
Andy Whiteside: The the platform that’s managing the whole thing which we’ll talk about in a minute, but also the scalability of the infrastructure, as well as the scalability of the resources that are still needed to manage it and.

00:20:31.530 –> 00:20:36.120
Andy Whiteside: You know who’s going to take on what how you make that scale up and scale down scenario or.

00:20:41.190 –> 00:20:48.390
Andy Whiteside: Some let’s go on to the next few in JEREMY today’s any specifics around call failures scalability that you kind of want to add before we move into.

00:20:48.750 –> 00:20:55.200
Andy Whiteside: And i’m going to call security and then we’re going to come back to management’s and ask Patrick to kind of tie in both because.

00:20:55.920 –> 00:21:09.510
Andy Whiteside: As was discussed on my team call this morning it assume and management and change control all that is important but security is what comes out of that if you do it right, but scalability and cost any other topic cushions comments on that, including Patrick.

00:21:11.700 –> 00:21:20.130
Geremy Meyers: You know what honestly I would say what’s driven a lot of scalability requirement recently just been supply chain, so, even if you want to do stuff on Prem you know right now it’s tough to get.

00:21:20.520 –> 00:21:28.350
Geremy Meyers: hardware on Prem, so I think that’s force the hand of certain customers leave had to maybe look at the cloud they hadn’t considered that in the past and.

00:21:28.740 –> 00:21:35.040
Geremy Meyers: You know the fact that you’ve got a you know, like a data management plane that could sit you anywhere it’s been easy right so.

00:21:35.460 –> 00:21:43.470
Geremy Meyers: You know there’s always been some some some typical use cases so m&a always the biggest one seasonal workers, always the biggest one, but you know just you know very.

00:21:43.890 –> 00:21:49.470
Geremy Meyers: Practically just supply chains come become a big issue in the last two years and has driven a lot of scalability concerns for sure.

00:21:51.420 –> 00:21:59.790
Andy Whiteside: i’m gonna use your comment on the cloud just now to point out the Andy ISM which is it’s the cloud right and sometimes and sometimes that might be, you know is integrity.

00:22:00.390 –> 00:22:11.340
Andy Whiteside: Infrastructure, they can host desktops it might be economics, that the host infrastructure, it might be Microsoft azure might be tcp might be aws and it might be many, many other options around clouds.

00:22:12.210 –> 00:22:23.100
Andy Whiteside: But having the platform that citrix has, which has the ability to bring in all of the above, simultaneously, is just a huge asset, I was in a conversation this morning with a customer company a vendor that only does.

00:22:23.640 –> 00:22:37.140
Andy Whiteside: aws tcp and azure and they it was kind of a kind of a conversation around Okay, what about private clouds and I said, well, we might do that someday and i’m like well that’s a massive limitations right there across.

00:22:38.190 –> 00:22:38.490
Geremy Meyers: yeah.

00:22:39.810 –> 00:22:40.350
Geremy Meyers: yeah for sure.

00:22:43.650 –> 00:22:57.240
Andy Whiteside: cool so let’s uh let’s bring Patrick and your Patrick it’s interesting and I don’t know if that was on purpose or not, but the security topic is the last of all, the topics and My guess is, if you started with security, probably end up on all the other topics along the way.

00:22:58.050 –> 00:23:13.290
Andy Whiteside: Patrick who his company DNS SEC does a lot of there’s a lot of security audits of vdi and I guess now will say Dev environments for his integrity as a partner relationship, the bars that are going to cover the data versus vdi conversation as it relates to security.

00:23:14.400 –> 00:23:35.400
Patrick Coble: yeah yeah I think the thing I like the most about dads when it comes to security is in most cases, you are able to have more security features out of the box, as in you’re entitled to at protection and security analytics if we’re talking about citrix and even from.

00:23:36.480 –> 00:23:45.870
Patrick Coble: aws from vmware not so much Microsoft but there’s a lot of features that are bundled into your dad’s subscription.

00:23:46.170 –> 00:23:56.400
Patrick Coble: That might not be currently bundled in whatever your entitlement level is for your on Prem one, so you can gain some security features that are a little more fancy and cool which I, of course, I like that.

00:23:56.970 –> 00:24:07.170
Patrick Coble: Since that’s what I focus on is vdi security, but then you know going to anything cloud you still have to be very mindful of your tenant.

00:24:07.560 –> 00:24:16.770
Patrick Coble: Who controls it the keys of the Kingdom if you’re developing Apps and things like that it’s it’s one click away for a public read both from a private repo.

00:24:18.090 –> 00:24:27.450
Patrick Coble: Along with if you just go next next next in azure or aws or pretty much any cloud provider, depending on how about what level of control you’re getting.

00:24:27.960 –> 00:24:37.500
Patrick Coble: You could have your dangly bits hanging out in the Internet and, so now it has a public IP whereas before that citrix server that RDS server.

00:24:38.100 –> 00:24:54.720
Patrick Coble: would not be hanging out on the Internet, where anyone in the world could contact, so you really have to pay attention to security when you go to any data platform or going to any cloud to migrate any of your workloads and it’s a very common oversight that I see all the time and.

00:24:55.830 –> 00:25:00.300
Patrick Coble: You know one thing that we are at that I was going to add to on the scalability front and i’ve been a part of a.

00:25:00.660 –> 00:25:02.370
Patrick Coble: Large organizations doing.

00:25:03.210 –> 00:25:10.290
Patrick Coble: migrations and upgrades into the cloud and, depending on what data Center is there it’s not all you can eat Buffet.

00:25:10.950 –> 00:25:23.460
Patrick Coble: i’ve seen many common vm types run out of allocation in certain data centers across the world from Amazon and from azure and so.

00:25:24.210 –> 00:25:36.210
Patrick Coble: I think we’re starting to you know because it seemed like the cloud is all the awesome and it is, but there are starting to be real limits met with certain vm types.

00:25:36.630 –> 00:25:46.500
Patrick Coble: The but i’m still blown away with how fast network connections are between the regions into the gigabits and terabytes.

00:25:47.430 –> 00:25:54.690
Patrick Coble: it’s just insane that I can have a virtual desktop in London and be using my hillbilly Internet where i’m at in Tennessee.

00:25:55.110 –> 00:26:03.690
Patrick Coble: And it’s like good move that same desktop to India and it’s still just as good with just a little bit more hiccups and it kind of blows me away.

00:26:04.500 –> 00:26:16.980
Patrick Coble: But yeah the security features are a little more bundled and some of the dads things, but you have to pay attention to what you’re doing with your cloud, because otherwise it won’t mean anything.

00:26:19.080 –> 00:26:30.990
Geremy Meyers: Patrick I got so many there’s so many things that just popped in my head, based on what you just said, like the entire thing, but you know, the first one was I do remember maybe the first six months of you know, the pandemic, where a lot of folks were having to spend things up in the cloud.

00:26:32.040 –> 00:26:39.660
Geremy Meyers: very vividly remember like East EMEA somewhere in in Europe, like there was a two or three different instance types of just completely stopped.

00:26:40.770 –> 00:26:48.360
Geremy Meyers: spinning up, in fact, if you didn’t have reserved instance there were there were chances were really a stop to registering because there was no instance side right So if you powered it off.

00:26:48.810 –> 00:27:00.540
Geremy Meyers: there’s a good chance wouldn’t come back up, which I thought was was fascinating and I had never seen before, I always thought the cloud was like infinite supply there was never an issue and my eyes were open, I am not gonna lie.

00:27:01.170 –> 00:27:11.040
Patrick Coble: yeah and I go and and it still happens from time to time, and the only thing that i’ve seen the most one of the most important things that people going in the cloud is make sure you’re monitoring it.

00:27:11.490 –> 00:27:14.280
Patrick Coble: And you have some analytics because your mileage will vary.

00:27:14.340 –> 00:27:20.280
Patrick Coble: Every single day right and that’s based on the host you’re on what they’re doing what you’re doing.

00:27:20.550 –> 00:27:25.050
Patrick Coble: How many people are streaming fortnight in there, you know watching you know tiger gang so.

00:27:25.320 –> 00:27:32.490
Patrick Coble: All those things on your local side and their side that’s where you know I know y’all big partner with control, up to and you know I love what they do.

00:27:32.880 –> 00:27:35.670
Patrick Coble: that’s where having that analytics and visibility.

00:27:36.090 –> 00:27:42.360
Patrick Coble: is also going to affect your scalability to right, so that you know, like oh i’ve got enough instances were good.

00:27:42.600 –> 00:27:56.310
Patrick Coble: versus to your point some instances don’t register because we’re out of that instance on us East to and azure on a Tuesday like Oh, but it’s good tomorrow or it’s good in a couple hours, but you got to really pay attention that stuff.

00:27:57.420 –> 00:27:59.970
Geremy Meyers: The other thing too is you brought up security and.

00:28:00.690 –> 00:28:07.770
Geremy Meyers: it’s funny when I first got my hands on azure what blew me away i’m going to ask you this question, you might not know the answer but you’re right when you click next next next.

00:28:08.310 –> 00:28:20.460
Geremy Meyers: blindly when creating a new instance type it does two things that I thought were a little suspect out of the gate but and i’m still trying to figure out why it’s the default but number one it wants to assign a public IP by default.

00:28:20.970 –> 00:28:31.440
Geremy Meyers: And then number two it wants to enable RDP by default as well, and I, and I want to say the security group that gets added as well automatically opens up you know 3389.

00:28:31.950 –> 00:28:32.820
Geremy Meyers: So if you.

00:28:32.850 –> 00:28:45.360
Geremy Meyers: All things being equal, just blew through the install now you gotta you gotta virtual machines sitting on the Internet publicly exposed RDP and you doesn’t take long for you see the brute force attack start to take off folks trying to hit it.

00:28:45.480 –> 00:28:50.610
Patrick Coble: it’s a major there’s about 10,000 ips that scan the whole Internet every single day right.

00:28:50.640 –> 00:28:55.770
Patrick Coble: The whole IP space and out of those 10,000 you know those are a lot of those are like showdown.

00:28:55.830 –> 00:28:57.000
Geremy Meyers: Right so like you know.

00:28:57.000 –> 00:29:07.350
Patrick Coble: some kind of fun stuff that you can do so, it keeps track of all the you know 3380 lines open up in the world, but yeah I I understand why they did it.

00:29:08.580 –> 00:29:14.400
Patrick Coble: But the my biggest gripe of that default next next next you can rsvp to it.

00:29:15.540 –> 00:29:28.710
Patrick Coble: Is that’s not secure by design and the cloud was intended to be, for an, I guess, and maybe it is the wrong intention, but was intended for admins right for it people that are hopefully there.

00:29:29.040 –> 00:29:34.710
Patrick Coble: But it seems like their ui of making machine in azure or you know aws is a little bit different.

00:29:35.550 –> 00:29:37.020
Patrick Coble: But with as default rules.

00:29:37.350 –> 00:29:48.690
Patrick Coble: And the wizards because it will warn you, quite a few times like hey you’re about to put something on the public Internet where as yours like click click click click click it’s on there, thanks, so it made me feel like it was just like user centric.

00:29:49.680 –> 00:29:56.400
Patrick Coble: And so I have done audits of people that have thousands to 10s of thousands of vmware and multiple cloud tenants.

00:29:56.880 –> 00:30:09.510
Patrick Coble: And when we do a couple of network security group audits they’re blown away that there’s 580 sitting on the Internet, you know and 312 here and 16 there and I didn’t even think we had vmware on in this tenant.

00:30:09.960 –> 00:30:18.960
Patrick Coble: And that’s where it goes back to that cost shuffle of data being like a flat fee, you know from like Microsoft whether it’s on or off.

00:30:19.380 –> 00:30:31.470
Patrick Coble: Like a vd is you know, based on the consumption, but the cloud PC and the business PC under those two umbrellas for business enterprise, you get charged the same amount, whether the vm is on or off.

00:30:31.920 –> 00:30:33.240
Patrick Coble: And so, then it’s like oh.

00:30:33.420 –> 00:30:42.480
Patrick Coble: Who cares but you know what we still see, is it still impacts, the rest of the people in that same tenant and data Center so yeah you’re right.

00:30:43.890 –> 00:30:44.310
Andy Whiteside: So.

00:30:44.940 –> 00:30:45.570
Andy Whiteside: Going back.

00:30:45.990 –> 00:30:46.710
Geremy Meyers: i’m sorry go ahead, no.

00:30:47.580 –> 00:30:56.040
Andy Whiteside: No just gonna blow my comments, going to be a lot of the scalability allowed the ability to integrate with all the things I love the ability to put it on the Internet, they get off the Internet.

00:30:56.790 –> 00:31:03.990
Andy Whiteside: But, but it kind of goes back to the original days of Microsoft and it’s there to make things work and make it easy to work, but the same time.

00:31:04.410 –> 00:31:11.580
Andy Whiteside: All the possible negatives from a security perspective and comes comes rushing through if you’re not careful.

00:31:12.450 –> 00:31:24.930
Andy Whiteside: The first thing that came to my mind, is patrick’s on behalf of how easy it was when Microsoft came out with Internet information server is next thing you know, everybody and their brother had a had a web server and it was it was almost wide open.

00:31:25.890 –> 00:31:26.190

00:31:27.720 –> 00:31:36.060
Geremy Meyers: yeah so The other thing that comes to mind with security is, I guess, two things, so we start talking about that data and potentially offloading some management components.

00:31:36.690 –> 00:31:50.970
Geremy Meyers: To a to a provider is one you know, reducing your attack surface, so you know it’s a big deal and security department’s but the number two it Patrick How much are you saying just regulations drive the security posture especially these days.

00:31:51.240 –> 00:31:52.740
Geremy Meyers: So in some of these models.

00:31:53.160 –> 00:32:00.300
Patrick Coble: it’s still well, I think, not the the those types of policies it’s the insurance the steering the boat, more than anything.

00:32:00.930 –> 00:32:08.370
Patrick Coble: The cybersecurity insurance back and say call it the 80s 90s of you getting car insurance, it was just based on your age right.

00:32:08.670 –> 00:32:15.300
Patrick Coble: It didn’t really put a lot of stuff there wasn’t lots of national databases, to find out like how good a driver you really were or not good.

00:32:15.990 –> 00:32:22.530
Patrick Coble: Whereas now they’re they’re pulling your credit report and they’re pulling this and correlating all these data points will be like.

00:32:22.860 –> 00:32:35.850
Patrick Coble: yeah they pay their bills on time and they’re here they don’t have any tickets there that’s what’s happened to cybersecurity insurance after billions of dollars have been paid out and ransoms disclosed and undisclosed.

00:32:37.230 –> 00:32:41.430
Patrick Coble: That changed the game cybersecurity insurance providers were losing money.

00:32:42.300 –> 00:32:54.510
Patrick Coble: And so i’ve seen people that have gone from you know, three you know $3,000 a month to 10 that are $3,000 a year to $10,000 a year and i’ve seen policies go from 80,000 to 200 and 300,000.

00:32:54.840 –> 00:33:02.250
Patrick Coble: And it’s because they’re sending a survey to them that says like one of the first questions is do you have multi factor authentication turned on.

00:33:02.610 –> 00:33:12.300
Patrick Coble: Right, do you have any advanced threat protection what products for a V what Sim are you using so they’re actually like real valid questions of like.

00:33:12.840 –> 00:33:18.900
Patrick Coble: foundational cyber security stuff and if you hit yes or no your policy just went up or down.

00:33:19.380 –> 00:33:24.750
Patrick Coble: And that has completely just turned the whole world upside down because now, people are like.

00:33:25.170 –> 00:33:38.550
Patrick Coble: Oh, what what’s a what what is this and what’s the nist policy and do D Stig and all those compliance bodies and frameworks that are like we have to get this turned on because we don’t have CES Level one turned on.

00:33:38.940 –> 00:33:49.260
Patrick Coble: Then our insurance is going to go up by 20% you know, and we have MFA and we have this so cybersecurity insurance is not cheap anymore it’s not all you can eat Buffet.

00:33:49.770 –> 00:33:56.670
Patrick Coble: Because they just paid out too much and people’s bad habits of it, hygiene and things like that.

00:33:57.300 –> 00:34:03.540
Patrick Coble: Have pretty much you know completely blown up that market and it’s it’s been pretty eye opening to see.

00:34:04.230 –> 00:34:07.620
Patrick Coble: And being part of security audits that are trying to help them because.

00:34:08.130 –> 00:34:14.580
Patrick Coble: That you know they have those questions down to have you had a penetration tests have you go to vulnerability management scans and stuff like that.

00:34:14.850 –> 00:34:29.610
Patrick Coble: Where it goes before it was just like company size revenue this this how many systems cool oh yeah it’s $32,000 a year that same customer now has you know 40 page survey to fill out and now it’s $192,000 a year like whoa.

00:34:30.990 –> 00:34:31.380
Geremy Meyers: that’s why.

00:34:31.980 –> 00:34:43.170
Andy Whiteside: I think that you, you run a bad habits mean, these are bad habits that came over from the desktop days which were bad, then you take that and so it’s just something that’s publicly addressable or closer to the crown jewels.

00:34:44.220 –> 00:34:45.090
Andy Whiteside: wow watch out.

00:34:45.600 –> 00:34:46.650
Patrick Coble: He agreed.

00:34:47.550 –> 00:34:56.010
Todd Smith – Citrix: And I think that you brought up you brought up an interesting point about the security audits that are going in there, where the church companies are going in and saying hey.

00:34:56.580 –> 00:35:06.000
Todd Smith – Citrix: here’s a question here that’s the first step right the second step is they’re going to tell you all of the things that need to be fixed or else your policies nolan boyd.

00:35:06.150 –> 00:35:13.260
Todd Smith – Citrix: Right or they’re not you’re not going to be eligible to get compensated in case you do have something goes wrong.

00:35:14.160 –> 00:35:17.160
Todd Smith – Citrix: Because they’ve already warned you right, so this is the.

00:35:17.640 –> 00:35:25.080
Todd Smith – Citrix: This is the law of unintended consequences right you get it you go out and get cyber insurance he finds out, you have to go and fix all these things.

00:35:25.410 –> 00:35:30.600
Todd Smith – Citrix: And you know, I was doing it auditing when Sarbanes Oxley first came out and.

00:35:31.020 –> 00:35:44.340
Todd Smith – Citrix: You know, we were it is best friend, because we do identify all these things that they were going to fail, as our veins Oxley audit on unless they fixed it and now all of a sudden, it was saying hey we’ve we finally got money to go and do a.

00:35:45.360 –> 00:35:54.930
Todd Smith – Citrix: Active directory scrubbing fill or clean up the backup system and you all of these other tasks, and I think this next big step in this cyber insurance.

00:35:56.130 –> 00:36:07.710
Todd Smith – Citrix: conversations really going to be, how do we make sure that we’re in compliance with not only the government regulations that are out there, but also, you know, a cyber insurance policy that’s out there.

00:36:08.910 –> 00:36:15.690
Todd Smith – Citrix: very similar when you’re a homeowner and they come back and tell you hey you need to cut the shrubs around your book around your House, because they’re a fire hazard.

00:36:16.320 –> 00:36:35.580
Todd Smith – Citrix: You know what they’re not going to give you fire insurance or, if you do you’re going to have to pay considerable higher rate right there’s there’s just it’s becoming more and more of a finally we’ve got someone watching and forcing it to have good behavior and good habits.

00:36:35.730 –> 00:36:44.940
Patrick Coble: And who would have thought, even in my you know being around as long as a bunch of us have in it that the insurance company would be doing more.

00:36:45.390 –> 00:36:55.620
Patrick Coble: For it security and clean ups and all that then us any other product or outside acting for us right like insurance is like.

00:36:55.860 –> 00:37:06.810
Patrick Coble: yeah you need to get that done, you need to trim those bushes you need to pull that out, you need to get a fire hydrant installed here right like you’re out of fire code to you know, so it is wild.

00:37:08.100 –> 00:37:17.670
Andy Whiteside: But think about it’s the same in every other aspect of the general lives we live you’ll you’ll lead those pushes out of control, somebody will until the neighborhood Hoa starts finding.

00:37:22.380 –> 00:37:33.480
Andy Whiteside: Okay, so we jumped down the security in this article to blend back in from the other conversations we I assumed would come up out of management and integration, but we should probably go back into the management conversation real quick.

00:37:34.200 –> 00:37:39.750
Andy Whiteside: Todd you want to take the rest of what we didn’t cover around management from the security aspect.

00:37:40.200 –> 00:37:44.070
Andy Whiteside: and talk to talk about how dads and vdi compared to each other, there.

00:37:45.300 –> 00:37:52.500
Todd Smith – Citrix: is I think we’re we’ve got a couple of things to hit on here when it comes to management right management is two things, one of them is control.

00:37:53.010 –> 00:38:01.020
Todd Smith – Citrix: And the other one is visibility right so being able to have a centralized management aspect where you know we all we’ve all heard.

00:38:01.530 –> 00:38:16.500
Todd Smith – Citrix: In talked about this one single pane of glass view the operations and all that stuff right, but it really does come down to if you can manage it centrally for one organization or for one group or from one console.

00:38:18.060 –> 00:38:23.220
Todd Smith – Citrix: it’s going to be you’re going to your apt to miss out on little my new details.

00:38:24.720 –> 00:38:28.740
Todd Smith – Citrix: If you also have good management policies you’re going to not miss.

00:38:30.420 –> 00:38:39.180
Todd Smith – Citrix: not miss those false flags are those those those bothersome alarms that are going off right you want to be able to have.

00:38:40.590 –> 00:38:47.340
Todd Smith – Citrix: The trip wires out there that are going to tell you that something happened in that it’s already automatically been remediated.

00:38:47.910 –> 00:39:00.810
Todd Smith – Citrix: Where you’re just getting notified that something has been fixed right so there’s there’s that aspect of it and that ties into the only way, you can do that effectively is to have visibility, so the analytics piece of it being able to.

00:39:01.890 –> 00:39:10.560
Todd Smith – Citrix: have not only the visibility, but also being able to act upon it, and that all kind of ties into a much stronger.

00:39:10.770 –> 00:39:19.830
Todd Smith – Citrix: working environment that is both secure but it’s also you know very proficient and efficient, as well as being you know.

00:39:20.130 –> 00:39:28.320
Todd Smith – Citrix: resilient and also operationally effective for the user right you’re going to give give the user, a great experience, but if it comes at the cost of.

00:39:28.680 –> 00:39:37.410
Todd Smith – Citrix: Giving up security or not being able to manage the problem I mean you think about it a lot of the bad habits that we have just been talking about.

00:39:38.160 –> 00:39:48.270
Todd Smith – Citrix: came out of that that equation of I can improve security but i’m going to have a bad user experience or vice versa, in nine times out of 10.

00:39:48.900 –> 00:40:01.080
Todd Smith – Citrix: We in the IT field, we would say we’re going to sacrifice security for user experience, because the security folks don’t come in yellow our CIO like the users do when they have a bad experience.

00:40:03.270 –> 00:40:05.100
Andy Whiteside: It wasn’t just the battle we chose not to fight.

00:40:05.820 –> 00:40:06.150

00:40:09.300 –> 00:40:24.810
Andy Whiteside: You have that conversation right we’re in a we’re in a situation now with with cloud platforms and pass solutions where we have the ability to manage and also endpoint management, better than ever before, so we have a fighting chance now and we can’t continue to look away.

00:40:25.560 –> 00:40:25.740

00:40:28.440 –> 00:40:29.310
Todd Smith – Citrix: In some cases.

00:40:30.750 –> 00:40:48.690
Todd Smith – Citrix: Some of the best ways to manage it is to take away those threat vectors and those access points right, so you know if if you’re at risk because you have data stored on an endpoint device or you’re downloading information to someone’s you know iPhone or tablet.

00:40:50.040 –> 00:40:58.350
Todd Smith – Citrix: Why don’t we just do something like take access away and have them force that user to a virtual desktop or to virtualize application.

00:40:58.980 –> 00:41:04.740
Todd Smith – Citrix: Where you don’t have to worry about data leakage you don’t have to give up control of that data.

00:41:05.700 –> 00:41:21.090
Todd Smith – Citrix: You know this is a conversation that we’ve been having with customers are 10 plus years data on the endpoints is one of your biggest risks out there it’s not as much because that’s the least that’s the component, that you have the least amount of control over.

00:41:23.460 –> 00:41:38.940
Andy Whiteside: there’s no way to eliminate the physical loss of the device that there’s data there it’s a talk for two people security all time I just wait till they get the restaurant as take your laptop and then ask them how security and best the answer well it’s encrypted but bottom that complicating.

00:41:40.440 –> 00:41:46.410
Andy Whiteside: It would you guys agree that our platform from the end user perspective is stronger than ever so that.

00:41:46.890 –> 00:41:57.420
Andy Whiteside: They now know that, because of the security stuff they see on the news that they can’t fight us for user experience on every at every turn, when we have to add security to what is their it world.

00:41:59.460 –> 00:42:10.320
Geremy Meyers: I think folks understand it now like in the past, it was definitely a nuisance for a lot of for a lot of users, but I think, because a lot of these security threats have hit consumers on a personal level.

00:42:11.730 –> 00:42:20.220
Geremy Meyers: They get it right, so the whole idea of having multifactor on some kind of personal account if I connect to my gmail account from a device i’m not connected to before.

00:42:20.700 –> 00:42:32.460
Geremy Meyers: I get asked to go, you know just acknowledge that that was actually me, whereas five years ago, I saw physicians getting the fight over passwords being 90 days just things like that right, so I think as an industry.

00:42:34.560 –> 00:42:48.060
Geremy Meyers: You know, obviously we’re still trying to streamline that process for sure, but at the end of the day, I think there’s an understanding from end users, that you know participating as a part of security is important to the business right and so i’ve noticed a big change for sure.

00:42:49.680 –> 00:42:56.460
Andy Whiteside: So, Patrick is the guy that gets to run around here what the security stick, you have to consider the user experience in your responses are is.

00:42:57.360 –> 00:43:03.210
Patrick Coble: Totally because there’s no point in locking down, something that you’ve made unusable right.

00:43:04.140 –> 00:43:11.790
Patrick Coble: We, but the most important part of that, as we know, we’re going to have to make some mitigation some deviations so that things can work.

00:43:12.180 –> 00:43:20.190
Patrick Coble: And, especially when you talk about old hand old fashioned applications so you’re going to have to adjust things he what you can do is.

00:43:20.730 –> 00:43:33.990
Patrick Coble: Try to apply as much as many policies, as you can and know which gaps are open and so like I still deal with a lot of people that still have to have macros enabled for business applications that do finance related things.

00:43:34.710 –> 00:43:49.290
Patrick Coble: So we do what we can to secure that and we know that that’s an attack avenue that is still going to be possible on those systems for those users, but every other system it’s not allowed to happen so we’ve got to you know choose our battles.

00:43:50.640 –> 00:43:57.540
Patrick Coble: And you know you can’t boil the ocean and just think that you’re going to secure all the things it’s going to be good so you’ve got to take baby steps.

00:43:57.600 –> 00:43:58.590
Andy Whiteside: And it’s.

00:43:58.620 –> 00:44:05.910
Patrick Coble: it’s a it’s a journey and it never stops, especially with new attack vectors coming all the time.

00:44:06.540 –> 00:44:11.640
Patrick Coble: And you know I i’m updating a privacy presentation i’m doing in a few minutes here.

00:44:12.030 –> 00:44:21.510
Patrick Coble: And you know, like ISO files and link files are now becoming a very cool way to break into people’s systems and a link file seems like it’s like so benign.

00:44:22.140 –> 00:44:31.170
Patrick Coble: But what you can stuff into that link and what your browser will execute is kind of amazing and there’s there’s there is.

00:44:31.680 –> 00:44:37.830
Patrick Coble: I guess malware as a service when it comes to those link creations there’s a company there’s a team company.

00:44:38.220 –> 00:44:48.420
Patrick Coble: That makes that software that is a gooey and everything so you’re just like click click click I wanted to run power Shell click click click they’re here they’re there here’s a domain name click click click.

00:44:48.690 –> 00:44:58.860
Patrick Coble: Next, it generates the link you copy and paste it at it as an attachment to an email to your fishing campaign anyone clicks that link very bad things start happening.

00:44:59.220 –> 00:45:18.270
Patrick Coble: And it’s like it’s just a link just a dot l NK that’s being sent via email, and so we talked about dads or you know vdi or just regular endpoints like it’s just these threats are coming from all angles, so you got to do what you can and just keep chipping away at it.

00:45:20.850 –> 00:45:33.120
Andy Whiteside: Because we’re going to run out of time, I think the moment based on patrick’s comment there to make sure people know to reach out to him reach out to us about his vdi security assessments, he will find a lot of stuff I don’t care, who you are.

00:45:34.440 –> 00:45:41.430
Andy Whiteside: about you, your organization your vdi your leadership personally just a great resource to have out there.

00:45:43.320 –> 00:45:54.930
Andy Whiteside: I did want to make sure we left a few moments here for Todd explain this video at the bottom, which play on, and when you what is what is DJ Dev versus notorious VI VI VI VI VI.

00:45:55.440 –> 00:45:59.280
Todd Smith – Citrix: VI yeah so Andy i’m a little kind of.

00:46:00.420 –> 00:46:05.400
Todd Smith – Citrix: challenged in fact that they didn’t call is DJ Desi dazzle bring back.

00:46:06.210 –> 00:46:06.960
I would have names.

00:46:08.040 –> 00:46:17.700
Todd Smith – Citrix: And you know the tourist vdi obviously a big shout out to the Tories big out there, but it really kind of talks.

00:46:17.700 –> 00:46:35.340
Todd Smith – Citrix: About you know where the different options are it really does come down to do, I really need a true vdi infrastructure to be able to do my job or do I only need access to just that application, and this is something that we have had kind of in our.

00:46:36.540 –> 00:46:49.170
Todd Smith – Citrix: In our wheelhouse for a while, your citrix and one of the things that is, it was a challenge when first real that vdi is giving people a full blown desktop and all of you who has access to the application itself.

00:46:49.770 –> 00:46:59.550
Todd Smith – Citrix: But vdi was a much simpler way to deliver that application in all of the supporting components in a desktop as opposed to giving it out in a.

00:47:00.990 –> 00:47:15.750
Todd Smith – Citrix: In a true bone just a focus application right so vdi made it a lot easier for us, and it also made a lot easier for the administrators and the users, because it was a one stop shop for all your applications your services your data.

00:47:17.130 –> 00:47:19.800
Todd Smith – Citrix: All delivered in a nice little buttoned up desktop.

00:47:22.830 –> 00:47:32.550
Andy Whiteside: Coming, a while ago that the year of death, more likely to happen someday than the year of vdi because vdi was so limiting but at the same time, a lot of people found success there go ahead, you.

00:47:33.570 –> 00:47:41.940
Geremy Meyers: know, I was going to make the comment that you know, we could have could have watch three minute video this rap battle, if you will, between vdi and DAS probably skip the podcast.

00:47:43.710 –> 00:47:44.340
Geremy Meyers: is pretty fine.

00:47:44.550 –> 00:47:50.490
Geremy Meyers: I love the fact that the I know we can’t hear it here with the tune is to like my favorite just 90s rapper 90s hip hop.

00:47:52.230 –> 00:47:52.470
Geremy Meyers: don’t.

00:47:53.130 –> 00:47:53.580
Andy Whiteside: watch it.

00:47:54.000 –> 00:47:54.450
Geremy Meyers: You can’t make.

00:47:54.870 –> 00:47:55.440
Andy Whiteside: up the watch it.

00:47:56.730 –> 00:48:04.110
Andy Whiteside: Well guys thanks for doing this as as a fun topic Patrick what’s next in your world and he said yeah presentation, you had in just a few minutes.

00:48:04.710 –> 00:48:07.260
Patrick Coble: yeah i’ve got a privacy presentation for a company.

00:48:08.340 –> 00:48:13.740
Patrick Coble: Which is pretty fun because I already have a bunch of their breach I already have a bunch of their passwords and usernames.

00:48:14.940 –> 00:48:17.130
Patrick Coble: And we’re talking about privacy so it’ll it’ll start the.

00:48:17.130 –> 00:48:18.960
Patrick Coble: Meeting off right of like here.

00:48:19.230 –> 00:48:31.170
Patrick Coble: Here is 44 passwords that your company is using right now out in the real world that someone can do bad things with so it’ll make it real fun and about you know 10 minutes when we get into that a little bit.

00:48:33.000 –> 00:48:38.820
Andy Whiteside: And, and I think the day you’d rather know that not know, even if it means you’re going to be the bubble totally yep yep.

00:48:38.850 –> 00:48:44.460
Patrick Coble: And I think sometimes that’s the hard part about a lot of this stuff is sometimes we want to just not know.

00:48:44.910 –> 00:48:53.760
Patrick Coble: and ignorance is bliss, but if you really want to know even, no matter how bad or good it is so that you can adjust and be like Oh well.

00:48:54.090 –> 00:49:03.300
Patrick Coble: This these users are using these terrible passwords let’s make sure we give them a little coaching session real quick and audit these passwords.

00:49:04.140 –> 00:49:10.770
Patrick Coble: Since they are still you know all the password list stuff we’re doing there’s still have access to the keys to the kingdom and many deployments you know.

00:49:13.290 –> 00:49:16.230
Andy Whiteside: JEREMY Todd what’s next in your world after this call.

00:49:18.660 –> 00:49:29.700
Geremy Meyers: I am headed up to New Jersey and facts we’re doing two beers with engineers up and I got an SEC up in the Jersey patch bill chappell and we’re going to host some folks have a good time.

00:49:30.090 –> 00:49:30.630
Patrick Coble: that’d be fun.

00:49:31.500 –> 00:49:38.370
Todd Smith – Citrix: and got a couple of interviews scheduled for a SEC position I have will be available in Toronto.

00:49:41.820 –> 00:49:52.020
Andy Whiteside: When both cases on the beers with engineers, or the hiring UFC you know, let them take her know we can help, and we have people everywhere, these days, and we want to help drive people in your direction.

00:49:54.720 –> 00:49:59.220
Andy Whiteside: guys, I appreciate you jumping on we’ll do it again next Monday thanks travel for the first one.

00:50:00.180 –> 00:50:01.200
Patrick Coble: Thank y’all y’all have a great.

00:50:02.070 –> 00:50:04.080
Andy Whiteside: So you guys enjoy thanks.