-Thin Client-Going Thin

Mahadzir Bin BakarBusiness – Technology ManagerSolaris Symphony Sdn. Bhd.mahadzir@solaris-symphony.com

Agenda

• Who we are• Fat Client Issues/Challenges• Thin Client Background• Virtual Desktop Infrastructure• 2X Solutions• CENTERM Thin Client• Thin Client Benefits• Next Step

SOLARIS SYMPHONY SDN. BHD.

Founded in end 2010, focusing on information security consultancy & services.100 % Bumiputra company:• 1 sales personnel• 1 technical sales personnel• 2 technical support personnel

Our strength is on our personnel:• 3 CEH (Certified Ethical Hacker) certification• 1 CHFI (Computer Hacking Forensic Investigator) certification• 3 IBM Proventia Intrusion Prevention System certification• 2 Fortinet Firewall certification

Experiences & Projects

Past personnel experiences:• Telecommunications (MAXIS, TIME)• Logistics (DHL Asia Pacific & EMEA)• Security consultancy (MINDEF, DRB HICOM, Bank Negara)

Past significant projects:• MINDEF Network Infrastructure Design Revamp

― Project cost RM 40,000.00― Project covers MINDEF internet and DMZ network infrastructure

• MINDEF Network Security Assessment― Project cost RM 24,000.00― Project covers MINDEF critical servers (Aplikasi, Pembangunan, Teknikal & Rangkaian)

Fat Client Issues/Challenges

Management Difficulties

High IT Cost

Data Protection

Difficult to ensure data is regularly backed up

Procuring & provisioning new desktop takes a long time.

Software & OS patching coordination nightmare

Technology refresh every 3 – 5 years

Moving parts issue (CPU fan, HDD)

High utility cost (power)

Thin Client DefinitionGartner’s definition:

“ a type of client/server computing where applications are run, and data is stored, on the server rather than on the client.”

Fat Client

• Desktop PC performs computations• Data is stored in local hard disk

Thin Client

• External server performs computations• Data is stored in a central repository

Thin Client Background

• First envisioned in 1960s.• Established in 1993 by Tim Negris, Oracle Corp.• The idea was not viable at that time.

1980s – 90s:▪ Architecture relies on huge

and expensive mainframe computers

▪ Personal computers are the cheaper option.

Now:§ Cheaper and powerful

hardware.§ Personal computers

technology obsoletes very rapidly.

Thin Client Evolution

Thin Client Concept

Thin Client Computing§ Hardware/Software

• Monitor, keyboard & mouse• Hardened/Thin OS

§ Functions• Keystroke issuance• Display computing results

Data Center§ Hardware/Software

• Presentation server/Gateway• Connection broker software

§ Functions• Central computing and processing• User session management

Delta Screen Refresh

Keystrokes

VM 2 VM 3VM 1

Virtual Desktop Infrastructure

Desc • Dedicated virtual desktop environment

UserCase

• Ideal for users who require personalization and more CPU resources

Drawbacks • Fixed CPU and RAM allocation – resource underutilized

• Connection broker software could offset hardware savings

Products • Citrix XenDesktop• VMWare View• ThinLinc VDI Broker• 2x Application Server

XG

Apps

Data

OS

Apps

Data

OS

Apps

Data

OS

Hardware

Connection Broker

Virtual Desktop Infrastructure

Introduction to Centerm

About Centerm

• Founded in 2002 - engaged in telephone payment terminal and thin client's R&D, sales and service.

• Ranks No.1 for10 consecutive years in China in graphic terminal sales.

• Ranks No.1 for 5 consecutive years in China in thin clients.

• Ranks no. 1 in thin clients sale for APAC (2009)

• Important partner of Intel, Microsoft and AMD in thin client market of China.

• Microsoft Gold Partner award for consecutive 6 years.

• CENTERM thin client hardware§ Existing peripherals can be used§ Supports VMWare, Citrix, 2X and Microsoft RDP§ CENTERM thin client hardware MTBF of

approximately 7 to 8 years§ Ability to install Windows Embedded System 7* and

2X Thin OS**

CENTERM Thin Client Solutions

CENTERM Thin Client Hardware

Thin Client Benefits

Hardware clients:vendor-independence, support

of virtually all client devices and computer hardware. Less

hardware breakdowns due to minimal moving parts. Low

system requirements

Administration:central management of applications and users,

patches, software updates and upgrades, files and backups as well as hardware components

Security:central management of security

settings on the server and centrally-managed deployment

of applications or files

Mobile access: dependable access to

published applications from virtually anywhere using your

tablets, smartphones or laptops

Environmentally-friendly clients:

low energy consumption, low-

emission, fewer components, smaller

dimensions

Next Step

§ Setting up a POC/demo unit• For further understanding & exploration

Mahadzir bin Bakarmahadzir@solaris-symphony.com

Power Usage Comparison – Fat vs Thin

Desc • Publish on-demand applications

UserCase

• Ideal for users who require legacy applications not supported on new OS

Drawbacks

Products • Citrix XenApps• VMWare ThinApp• ThinLinc Application

Publishing• 2X Application Server

XG

Applications Publishing/Provisioning

App

2

App

3

App

1

Hardware

Connection BrokerOS

Application Publishing/Provisioning

Desc • One instance of OS to be shared by multiple users

UserCase

• Ideal for users who use minimal applications or require low CPUutilization

Drawbacks • Unless adequately protected, one virus/malware can affect whole shared OS

Products • Citrix XenDesktop• ThinLinc• Centerm CTSS

Shared Desktop(Multi-session) Apps

Data

OS

Hardware

Connection Broker

Shared Desktop

Bandwidth Consumption Comparison

Major Project ExperiencesData Center Network RedesignTIME

Customer is facing issues such as high CPU utilization, low memory usage, high traffic and concurrentsession utilization that effect the services for customers drives this project and customer decided toupgrade the existing firewall and load balancer to support it needs.

Data Center network being design based on security based practice to support customer’s serviceofferings. This includes introducing new segment/VLANs, relocation and reconfigurations of networkequipment (switch/router) and servers. New policy and firewall rules being configured to protect thenetwork and servers.

Centralized Vulnerability Management SystemMAXIS

Customer is having difficulties managing vulnerabilities in the network due to geographical and networksegmentation issues. Another pressing problem is to consolidate all devices’ security issues into oneview and track them systematically.

Solaris Symphony working together with customer leads to a customized solution where a securitymanagement system manages all devices centrally and enabling customer to perform vulnerabilitytesting remotely without having to be physically at the remote premise. All vulnerabilities are thensystematically tracked and prioritized according to risk level. This solution manage to reduce customer’slogistic spending and also reduce time to respond.

Network Infrastructure Design RevampMINDEF

Customer contracted Solaris Symphony to investigate and analyze multiple network and securityproblems faced daily.

Solaris Symphony dedicated team worked together with customer technical team to understandthe issues and produce an effective and cost minded solution for customer. Customer networkhas been redesign with minimum new product purchase and downtime.

High Availability Intrusion Prevention SystemMAXIS

Customer intends to implement intrusion prevention system with high availability in mind due tocriticality of the network.

Solaris Symphony delivers a solution where 4 pairs of IPS appliance were deployed to strategicplaces and managed centrally with one management server. Estimated daily traffic is 1TBcombined.

Major Project Experiences

Thin Client Flavours

Virtual Desktop Infrastructure

Desc • Dedicated virtual desktop environment

UserCase

• Ideal for users who require personalization and more CPU resources

Drawbacks • Fixed CPU and RAM allocation – resource underutilized

• Connection broker software could offset hardware savings

Products • Citrix XenDesktop• VMWare View• ThinLinc VDI Broker• 2x Application Server

• Publish on-demand applications

• Ideal for users who require legacy applications not supported on new OS

• Citrix XenApps• VMWare ThinApp• ThinLinc Application

Publishing• 2X Application Server

• One instance of OS to be shared by multiple users

• Ideal for users who use minimal applications or require low CPU utilization

• Unless adequately protected, one virus/malware can affect whole shared OS

• Citrix XenDesktop• ThinLinc• Centerm CTSS

Applications Publishing/Provisioning

Shared Desktop(Multi-session)