Citrix MetaFrame XP

1. Citrix MetaFrame XP A Technical Overview Presented By: Douglas A. Brown

2. What is MetaFrame XP? • The next generation of Citrix’s MetaFrame application serving software. • The product of a ground up reassessment by our engineers coupled with your input on what enterprise class server-based computing should be. • Built to eliminate current and future obstacles to speed, performance and control while maintaining backward compatibility for ease of migration. • Everything you have seen in MetaFrame 1.8/FR1 and MORE. What is MetaFrame XP?

3. How is it Packaged? MetaFrame XPs • Base MetaFrame XP Functionality MetaFrame XPa • Base MetaFrame XP Functionality • Load Management MetaFrame XPe • Base MetaFrame XP Functionality • Load Management • System Monitoring & Analysis • Application Packaging & Delivery • Network Management Licensed per Connection • Deploy as many servers as you need…

4. Management Enhancements The Citrix Management Console and New Enterprise Management Tools

5. MetaFrame XP Management New Default for this Dialog Citrix-specific Information OS-specific Information New details for all servers at-a-glance CMC Enhancements (FR1) • Detailed Server Information • View Feature Release, Service Pack, and OS level of all servers • Better organized and more detailed server information under server properties

6. MetaFrame XP Management Server Monitoring Enhancements (FR1) • Citrix Web Console • Native Web interface for performing common administrative tasks • Allows monitoring of sessions, applications, and servers • Allows Logoff, Disconnection, Messaging, and Shadowing control • Install and run on server running IIS 5.0 (Win2K) Only • ICA Session Monitoring • Citrix administrators can now monitor ICA network traffic, even down to the virtual channel. Administrators can monitor how ICA affects network bandwidth utilization • Exposed via Perfmon counters

7. MetaFrame XP Management Citrix Web Console (Cont’d) • Access by entering the following URL on your Browser • http://<machinename> or <webservername>/Citrix/WebConsole • Virtual Directory on Web server under: Citrix\WebConsole • Scripts used in the tool are found here • Logon as Citrix Administrator • Read-only Admins have ability to use all functions in CWC • Leverages MFCOM SDK on MF server • Web App is a DCOM Client of MFCOM Service • Look under IIS Manager WebConsole Virtual Directory Properties for more details • DCOMCNFG Utility • Runs automatically during FR1 install • Custom configures service security to Everyone • IMA authenticates access on backend • To debug use MS Script debugger

8. MetaFrame XP Management Max number of connections per user Max instances of this App for the Farm Enforce limit on Administrators Limit to once instance per user Log over-the-limit denials to Event Viewer Control CPU Priority for this App Additional MetaFrame XP Features (FR1) • Connection Control • Limit the number of concurrent user and/or application connections. • Farm-wide and Application specific connection Limits • Available for Windows 2000 only • CPU Prioritization • Applications vary in strategic importance. Administrators can now provide CPU priority to more strategic applications. • Available for Windows 2000 only

9. MetaFrame XP Management Connection Control (Cont’d) • Tracks MetaFrame published applications not .EXEs • Desktop access and the same .EXE published multiple times under different names, would interfere with attempting to use this feature for license enforcement • Limits per user • Number of concurrent sessions • Limit any application to a single instance per user • Limits per Farm • Number of instances of a published application running in the farm

10. MetaFrame XP Management Number of Servers with this type of License Number of Base Product Connection Licenses of this Type (XPe) Data Center 1 Subnet 10.1.X.X Data Center 2 Subnet 10.2.X.X Number of Feature Release Connection Licenses Data Center 3 Subnet 10.3.X.X Only 1 ICA License Is utilized License Management Enhancements • License Pooling Across Subnets • ICA Connection licenses for client connections can be pooled across the entire server farm regardless of whether the server farm crosses network subnets • Centralized License Management • Licenses are installed into a Central Data Store and managed centrally from the Citrix Management Console. Administrators can easily manage all of the licenses for the Citrix Server Farm from a single point. • Single point of License Installation and Activation • License installation and activation can be done centrally via the Citrix Management Console • License Summary Tab within CMC • Summarizes server and connection licenses into a split interface that lists out number of server and connection licenses for Platform and Feature Release products. Allows for easier tracking of available user licenses

11. MetaFrame XP Management Publish Application for ADS Users from the CMC ADS Enumerate User and Group Accounts from Active Directory CMC Active Directory Integration • Account Authority Access • MetaFrame XP integrates and fully supports Application Publishing in a native Active Directory environment. • Utilizes Native Active Directory Interfaces to access the Active Directory. All Published Application Information is stored within the IMA Data Store, not in the Active Directory. • User Principal Name Logon & NT Printing Support • Allows Users to logon to the MetaFrame XP server farm using their user principal name logon. I.e. user@domain.com. • Assign networked NT printers or drivers to users logged on through ADS • Application Publishing to NFuse and Program Neighborhood • Allows users to utilize their Active Directory accounts to access MetaFrame XP applications via NFuse or Program Neighborhood • Pass-Through Authentication Support • ICA Client will utilize the local username and password and perform pass-through of authentication to MetaFrame XP servers.

12. MetaFrame XP Management Publish Application for NDS Users from the CMC NDS Enumerate Accounts from Novell Directory CMC NDS Support • Account Authority Access • MetaFrame XP integrates and fully supports Application Publishing with NDS. • Utilizes Standard Novell API’s to access NDS. All Published Application Information is stored within the IMA Data Store, not in the tree. • Novell Native Login & NT Printing Support • Users logon to the MetaFrame XP server farm using their Context and Tree Names without the need for having duplicate accounts in NT/ADS. • Assign networked NT printers or drivers to users logged on through NDS • Application Publishing to NFuse and Program Neighborhood • Allows users to utilize their NDS accounts to access MetaFrame XP applications via NFuse or Program Neighborhood • Pass-Through Authentication Support • For Novell Client or ZENworks for Desktops 3.0 Users, ICA Client will utilize the local username and password and perform pass-through of authentication to MetaFrame XP servers..

13. MetaFrame XP Integration NDS Support (Cont’d) • Novell Native Login & NT Printing Support • Users logon to the MetaFrame XP server farm using their Context and Tree Names without the need for having duplicate accounts in NT/ADS. • Assign networked NT printers or drivers to users logged on through NDS • Application Publishing to NFuse and Program Neighborhood • Allows users to utilize their NDS accounts to access MetaFrame XP applications via NFuse or Program Neighborhood • Pass-Through Authentication Support • For Novell Client or ZENworks, ICA Client will utilize the local username and password and perform pass-through of authentication to MetaFrame XP servers.. • Supported NDS Product Versions: • NDS version 8.5 • NetWare Version 5.1, IntraNetware Client version 4.8 • ZenWorks version 3.0

14. MetaFrame XP Integration NDS Support (Cont’d) • Program Neighborhood and PN Agent • Client will Browse Tree for User’s contexts • NetWare Client needs to be on machine for this to Work • Client will remember the User’s previous context • NFuse • Will browse the Tree for user contexts • Novell Client must be installed on the Web server. 14

15. MetaFrame XP Integration NDS Support (Cont’d) • Setup • Perform Setup steps outlined in Documentation • Enter Tree Name in CMC Farm Properties Tab • Publish • Publish to NDS Users in Application Properties or App Publishing Wizard.

16. MetaFrame XP Management CMC Printer Management Enhancements • Printer Driver Replication • Gives administrators the power and control to manage and distribute printer drivers to all of the MetaFrame servers in the server farm, providing a consistent printing environment for all users • Printer Driver Mapping • Printer drivers on different platforms often have differing names which can interfere with client printer creation. Printer driver mapping enables administrators to control differing printer drivers • Terminal Printer Auto-Creation • Ability for the administrator to setup auto-creation of printers for ICA DOS and WinCE Terminal Devices Use CMC to Manage and Distribute New Printer Driver to entire Server Farm • Network Printer Auto-Creation • Ability for the administrator to setup auto-creation of NT network printers for any ICA device,whether the user logs in through NT, ADS, or NDS. Install New Printer Driver on 1 Server

17. MetaFrame XP Management ICA Connection ICA Client ABC Printer Restricted XYZ Printer ABC Printer Printer Management Enhancements (Cont’d) • Client Printer Creation Logging • Logs all information related to client printer creation in the system event log. Gives administrators the power and information to proactively detect and resolve client printer issues • Printer Compatibility • Allows the administrator to specify client printers that can be used in the MetaFrame environment or specify printers that can never be used • Printer Bandwidth Control • Allows the administrator to control and specify the amount of bandwidth that can be used for printing in the MetaFrame XP server farm Printer Creation is Disabled Printer is on the restricted list X

18. MetaFrame XP Management Printer Management Enhancements (Cont’d) • Universal Print Driver • Consolidates print driver requirements into one universal driver. PCL 4 print driver is used to provide functionality. • 300 dpi, monochrome only • Limited set of special printer functions are supported • Non-PCL and non-Postscript capable printer users will see print jobs reduced in size by up to 50% • Initial Support is for Windows 95, 98, Me, NT, 2000 only • Latest ICA client (6.20.985) required for this functionality • If CMC configured to allow both native and universal, they will have both printers to choose from. Users can switch back to native driver on request. • Print Data Flow • PCL job rendered on server and sent to client • Client DLL converts PCL to raster data and sends to printer

19. Load Management Advanced Management

20. Load Management (MetaFrame XPa and XPe) Load Management Features • Monitoring of Application and Server Load • Assign Load Balancing Evaluators to Servers and Applications and monitor load real-time. With monitoring capabilities and trend graphs, evaluation criteria can be monitored and dynamically adjusted to supply the needs of user demand. • Configurable Application Load Balancing • Create Load Balancing Evaluators that can be assigned to both Servers and Applications. • 7 New Criteria that can be used to adjust Load Balancing • Load Management Replaces MetaFrame 1.8 Load Balancing • The code for Load Management is built into MetaFrame XPa and XPe. Load Management in MetaFrame XP utilizes the Independent Management Architecture for Communication.

21. Load Management (MetaFrame XPa and XPe) Load Management Components • Load Management Criteria • CPU Utilization, Memory Usage, Page Swap, Page Fault, Server User Load • New Criteria in MetaFrame XP - IP Range, Scheduling, Context Switches, Disk Data I/O, License Threshold, Application User Load, Disk Operations • Load Management Rules • Are measured statistics for high or low loads on servers. Lower a rule for lower power systems and highly detailed load management. Elevate a rule to make more use of high power systems. • Rules Consist of Criteria w/ Set Thresholds • Load Evaluators • Used to configure server load measurements. Default is the Citrix provided load evaluator. Administrators can also create their own. Load Evaluators can vary by server and/or application. • Load evaluators consist of Rules.

22. Load Management (MetaFrame XPa and XPe) Spotlight Load Management Criteria • IP Range • Enable or disable access to a published application based upon whether or not the IP addresses of the ICA clients are within the specified IP address ranges. • Scheduling • Enable and disable availability of a server or published application during certain days of the week and certain hours of the day Pre-Configured Load Evaluators • Default • Represents the number of users logged onto a MetaFrame XP server. • Contains one rule, Server User Load, that reports a full load when 100 users log on to the attached server. • Advanced • The rules in this load evaluator represent server performance using Disk I/O, CPU Utilization, Disk Operation, Memory Usage

23. System Monitoring and Analysis Advanced Management

24. System Monitoring & Analysis (MetaFrame XPe) System Monitoring and Analysis Components • Local Database • A database created on every MetaFrame XPe server for storing the real-time information • Farm Metric Server • Farm metric server: Interprets farm-wide data and deals with alerts • Metric • A track-able item that Resource Manager measures for servers or applications (e.g., memory available bytes) • Resource Managed Application • An application which may or may not have been published by MetaFrame, but which you have set up to be monitored by MetaFrame

25. System Monitoring & Analysis (MetaFrame XPe) System Monitoring & Analysis Features • Intuitive Administrative Interface • Click on an application in the CMC to bring up a menu of functions, including snooze, sleep, real-time graph, properties and alarm options. Add and remove alarms with a few clicks of the mouse. • System Scalability • System Monitoring and Analysis is designed to scale with your MetaFrame XPe environment. • Simplified Setup • No database setup required—works out of the box with MSDE. • Resource Manager • Complete re-write of Resource Management Services. It integrates with the Citrix Management console by adding appropriate tabs into the Servers Folder and counters to each server for monitoring

26. System Monitoring & Analysis (MetaFrame XPe) System Monitoring & Analysis Features (cont’d) • Summary Data • As part of CMC, Summary Reports and Data can also be managed • Watcher Window • Monitors parameters through a small watcher window in the corner of the screen. If an alert is raised, simply double click on the alert icon to access all relevant information using the CMC interface • Server Reboot Scheduling • All managed servers can be scheduled to reboot at specific times. • Server and Application Groups • Create server or application groups consisting of specific users by department or location

27. System Monitoring & Analysis (MetaFrame XPe) System Monitoring & Analysis Features • Application and Server Farm Monitoring • Configure options for servers—either individually or farm-wide—to trigger alarms when various thresholds are reached. • Real-Time Monitoring and Alerts • Receive real-time notification of problems such as memory shortage, hard disk space or CPU utilization. Receive notification via the CMC, SMS message to mobile phones, SNMP or e-mail.

28. Application Packaging and Delivery Advanced Management

29. Application Packaging & Delivery (MetaFrame XPe) Package, Deliver, Publish • How does it work? • Using the Packager, software replication packages are automatically created and prepared for distribution. • Packages are then scheduled for delivery to the targeted servers via the Citrix Management Console. • Once delivered, applications can be published to provide instant access through Citrix Program Neighborhood and NFuse. • Applications can also be automatically uninstalled with a few clicks of the mouse. • Key Components • Packager - Configure once, automatically deliver to all – fast and accurately. • Delivery - Choose the where, when and how of delivery and installation with complete confidence. And, verify the results, too.

30. Application Packaging & Delivery (MetaFrame XPe) Application Packaging and Delivery Features • Installation Manager • Complete re-write of Installation Management Services. It is 100% integrated with the Citrix Management console. • Server Groups • Create custom server groups such as operating system, geographic location, department or other user-defined criteria • Create and modify folders to contain packages • Improved User Interface • Provides a greater degree of control over the installation package, plus more feedback about the status of the application being delivered • MSI Support • Deploy any application that provides a Microsoft Installer Package (MSI) without the need for repackaging

31. Application Packaging & Delivery (MetaFrame XPe) Application Packaging and Delivery Features • Service Pack Packaging • Facilitates maintenance of application serving environments by enabling the packaging, delivery and installation of service packs and patches. • File Packaging • Packages individual files or groups of files for distribution • Application Packaging • Automatically replicate recorded installation scripts on multiple application servers. This includes unattended installations where there is no need for application recording

32. Application Packaging & Delivery (MetaFrame XPe) Application Packaging and Delivery Features • Package Delivery • Deliver a package of applications, files and/or service packs to multiple servers from a central point in minutes instead of days or weeks. • Scheduling • Set up installations to occur automatically during off-peak hours or on weekends • Delivery Verification • Status of application delivery to target servers can be easily verified through Installation Manager • Scheduled and Auto Server Reboot Support • Support applications that require server rebooting upon completion of installation. Administrators can also schedule server reboots to occur at a specified time after installation. • Users connected to the application server will automatically be notified with customizable messages prior to server rebooting

33. Application Packaging & Delivery (MetaFrame XPe) Application Packaging and Delivery Features • Inventory • Allows administrators to easily inventory all applications delivered to a server using Installation Manager • Filter servers by OS type and only list servers with IM installed • RollBack • Quickly and easily “wipe the slate clean” on the packaging server following package creation to prepare for new installations • Project Details • View all project settings, including file details, registry changes, and target directories within the project.

34. Network Management Advanced Management

35. Network Management (MetaFrame XPe) SNMP Manager Monitor and Manage with SNMP • How does it work? • Allows network devices to be monitored and managed from a central location. • SNMP Managers are applications that collect SNMP data and receive SNMP events (traps)

36. Network Management (MetaFrame XPe) Components • SNMP Network Management is an SNMP agent that runs on your MetaFrame XP servers • It can be managed with any SNMP management service or utility • SNMP agent automatically installed with MetaFrame XPe • Plug-ins are located on “Network Management” CD-ROM Features • SNMP Support • Integration with Leading Enterprise Management Tools • Monitor and Control MetaFrame Servers

37. Network Management (MetaFrame XPe) Network Management Features • Integration with Enterprise SNMP Management Tools • Console Plug-ins are available for Tivoli Netview(v 5.1.2 and above), HP Openview(v 6.0 only), CA Unicenter TNG • Monitor and Control MetaFrame Servers • Conveniently monitor and control common MetaFrame session and user status information across multiple farms from a single console • Standard SNMP Support • Citrix now supports the most widely used network management protocol, SNMP.

38. Client Enhancements Enhanced Integration and Usability

39. ICA Client Enhancements Port 443 (HTTPS) ICA-SSL • Provides Internet-standard 128-bit SSL encryption and firewall traversal using the HTTPS port of the firewall. • Customers can now encrypt both ICA and XML traffic • SSL Relay is configured on MetaFrame XP Server • Requires Microsoft Internet Explorer 5.0 or higher and High Encryption Pack on Win32 • Can launch sessions from Netscape if above items are installed

40. ICA Client Enhancements ICA-SSL (Cont’d) • Leverages Microsoft SChannel SDK on Win32 • Will not work with NFuse on the MF Server • NFuse needs to be on separate Web server • Other Clients supported • Java, Linux, WinCE • Leverages Certicom SSL libraries (built into Client code) 40

41. ICA Client Enhancements ICA-SSL (Cont’d) • Application Property • This check box is only a “suggestion” • If checked, NFuse and PN connections will be configured to use SSL. • Can be bypassed by editing ICA file or using Custom Connections. 41

42. ICA Client Enhancements ICA-SSL (Cont’d) • Client Side • Can set application set properties and custom connection properties • Connection Center includes SSL Indicators 42

43. ICA Client Enhancements Program Neighborhood Agent • Push native Windows icons down to Win32 Start button, desktop or to SysTray • Eliminates opportunities for user configuration errors • Leverages NFuse infrastructure without requiring a browser • Centralized Administrative control over Client UI • Installed from the Client CD’s “IcaWeb” folder

44. ICA Client Enhancements Program Neighborhood Agent (Cont’d) • Unobtrusive UI • Published Application Icons • Folders or Icons anywhere on Desktop • Folders or Icons anywhere in Start Menu Hierarchy • Icons are Periodically Refreshed • Integrated with Pass-through Authentication • Win32 only, no custom connections • Communicates with NFuse Web server via XML protocol • Benefits • Centralized Client session and UI control • Per-user Application sets • Alternative to Application Access via a Web Browser • No Client-side configuration required. 44

45. ICA Client Enhancements Apps show up in Programs/ Published Applications NFuse Web Server Can also use Pass-through authentication Apps show up Systray menu Set Window Size, Color Depth, and Audio Quality Program Neighborhood Agent UI • Client Configuration Control • Only parameter needed is the name of the NFuse Web server • Items in Client Properties can be disabled by Administrator • Controlled via config.xml file on Web server • Located at c:\Inetpub\wwwroot\Citrix\PNAgent\config.xml 45

46. ICA Client Enhancements Program Neighborhood Agent Configuration • CMC – New Application Properties Settings • These settings would place the App icon under the user’s Start Menu->Programs\Citrix Published Applications Folder 46

47. ICA Client Enhancements Auto-Client Reconnect • Description • Automatically reconnects users to their disconnected sessions when a connection is temporarily interrupted. • Auto-triggered when client detects a network drop • Network connections only—dial-up not supported

48. ICA Client Enhancements Auto Client Re-Connect (Cont’d) • Auto “Redial” when TCP link is Broken • Better/More informative Client-side error messages • Logging of Reconnects on Server-side (event log) • Time, event type, user, Client device name, connectivity address • Credentials stored in a server-side encrypted RAM table • Client gets key to credentials in a cookie • Cookie is one-time and transient • Includes SessionID for reconnect purposes • Sent over ICA connection • Benefits • Improved Usability for End-users • Extends the Seamless feel of Application Server Computing • Does not reduce frequency of disconnects • Multiple reconnect attempts are made 48

49. ICA Client Enhancements Auto Client Re-Connect (Cont’d) • Disabling turns off credential management • Clients can still ACR to the same session • Users will need to re-enter credentials in this case 49

50. ICA Client Enhancements Auto Client Re-Connect (Cont’d) • Client Side Configuration • Enable/disable via INI file settings [WFClient] TransportReconnectEnabled=0 to disable (default is 1) TransportReconnectDelay=n (in seconds) to configure how long to wait before reconnecting (default is 30). Total time should not exceed server DURATION setting TransportReconnectRetries=n to configure how many ACR attempts to make before failing (default is 3) • ACRCFG.exe on server • Use ACRCFG /? for help • You can configure servers other than the one you are on • Hidden switches • /DURATION controls how long a client can make ACR attempt after the host detects a bad network drop • /Q /ALL shows the hidden DURATION value as well as other items • /Q /REGISTRY shows what is in the registry 50