Branch Repeater 5 6 5 7 VPX Technical

Branch Repeater 5. 6, 5. 7 & VPX Technical Presentation

High Definition Experience Needs Optimization and Orchestration Across the Entire Delivery System Receivers 2 1 3 Client Network Server Repeaters Gateways Citrix Confidential - Do Not Distribute Controllers

Our Arrow ECS Labs Setup Client Receivers on Wifi Network 172. 32. 1. 0/24 Router WAN emulator 1 Mbps Repeater VPX 172. 32. 1. 250 Repeater VPX 192. 168. 1. 254 Xen. Server Citrix Confidential - Do Not Distribute Server Xen. Desktop Xen. App CIFS HTTP MAPI 192. 168. 0. 0/20

Citrix Branch Repeater | The Big Picture Citrix Repeater Plug-in for Citrix Receiver Mobile Users Tele-workers Data Center Repeater Branch Offices Applications: Xen. App Xen. Desktop File Servers Exchange Email Share. Point ERP/CRM Branch Repeater Redundant Datacenter or Disaster Recovery Site

Acceleration for any user, anywhere Repeater appliances Branch Repeater with Windows Server, and Branch Repeater Plug-in

What’s new in Branch Repeater 5. x & VPX

Exchange (MAPI) Acceleration • Features • • • Protocol acceleration (similar to CIFS) Compression & de-duplication of attachments Cross-application and multi-user optimization Supports Exchange Server 2003 and 2007 Supports MS Outlook 2003 and 2007 Available on all appliances and Repeater Plug-in • Benefits • Up to 50 times faster sending/receiving emails • Reduces bandwidth consumption Outlook Exchange

Branch Repeater running Windows Server 2008 • Features • Natively integrated Windows Server 2008 Standard Edition OS • File, print, DHCP, DNS, WINS, DFS • Read-only Domain Controller (RODC) • MMC, WMI, SCOM manageability • Benefits • Simplify IT by consolidating servers in the branch • Leverage existing Windows management tools and expertise WAN Optimization

Read-Only Domain Controller (RODC) • Features • Read-only AD DS database • Unidirectional replication • Credential caching • Administrator role separation • Read-only Domain Name System (DNS) • Benefits • Securely deploy a local DC in any branch location • Faster authentication and logon times for branch users • Centralized IT management and control

Command Center Enhancements • Features • Now supports all Branch Repeater appliances (Linux and Windows) • Benefits • Easy and cost-effective management of large number of remote sites

Citrix Branch Repeater Key Features HDX Broadcast & HDX Intelli. Cache Repeater Plug-in for Citrix Receiver Plug-n-Play for Any Network Integrated Windows Services Flexible & Centralized Management

HDX Broadcast & HDX Intelli. Cache

HDX Intelli. Cache and HDX Broadcast Adaptive TCP Flow Control Adaptive Compression Adaptive Protocol Acceleration HDX Intelli. Cache Prioritization & Qo. S Branch Staging of Offline Apps Branch Caching of Online Apps WAN Repeater Branch Repeater

Branch Repeater Technology – HDX Broadcast Adaptive Protocol Acceleration Adaptive Compression Adaptive TCP Flow Control Prioritization and Qo. S (Improve inefficient protocols) (Reduce application turns and data) (Overcome loss/latency penalties) (Prioritize critical traffic)

Adaptive Protocol Acceleration Intelligently accelerates common application protocols • Mitigates latency by reducing round trips (chatty protocols) • CIFS (File Sharing) • MAPI (Exchange) • Makes compression engine application-aware • Separates headers from payload • ICA, CIFS, MAPI, HTTP, FTP, NFS Example: CIFS

CIFS: Common Internet File System Most common file sharing protocol Microsoft Office, Linux Open Office, etc. Windows XP/Vista, Windows Server 2003/2008, Mac OS X Net. App Filers, EMC File System Access Drag/Drop, Read/Write, Copy, Directory Browsing

Example: CIFS – without Branch Repeater I want to open a fil 250 ms Which file? \dogbone blue 250 ms ou? Who are y John Wh omever 250 ms Password? “Whatever” 250 ms 1000 ms en! p OK, It’s o e

$Example: CIFS – with Branch Repeater I want Open \dogboneblue for John Whomever, password$

Example: CIFS – with Branch Repeater I want Open \dogboneblue for John Whomever, password “Whatever” to open a file ile? Which f \dogb oneblu e e you? r a o h W John Wh omever rd? Passwo “Whate ver” 1 ms I want to open 252 ms 125 ms ile? Which f \dogb oneblu e ? u o y e Who ar John Wh omever rd? Passwo “Whate ver” OK, It’s open! OK, It’s a file open! 1 ms

Branch Repeater CIFS Performance Open Word Doc Over WAN Browse Directory with 20 Files "Drag & Drop"- 1 Large File "Drag & Drop"- 1 Small File 0% 200% 400% 600% 800% 1000% 1200% 1400% 1600% Improvement in Application Response Time

CIFS Acceleration Requirements Windows 2003/2008 Server : • Set “Microsoft network client: Digitally sign communications (always)” to “Disabled” • Set “Microsoft network server: Digitally sign communications (always)” to “Disabled” Windows 2000 Server : • Set “Digitally sign server communication (always)” to “Disabled” • Set “Digitally sign client communication (always)” to “Disabled” For Windows 2008 Server Disable SMB 2. 0 See : http: //www. petri. co. il/how-to-disable-smb-2 -on-windows-vista-or-server-2008. htm

Why accelerate MAPI? • Faster sending/receiving of email attachments • Lessen MAPI-related bandwidth requirements • Increase mail system responsiveness for branch office users • Help enable Exchange server consolidation • Drastically reduce idle time in sending/receiving emails • Iterations of same or similar messages by email • Optimization when different users, different applications access similar files

What is MAPI Acceleration? • MAPI Acceleration is: • The pipelining of MAPI-based traffic between Microsoft Outlook and Exchange. • Acceleration of the uploading and downloading of email attachments made to email messages. • The compression of message attachments.

How does MAPI Acceleration work? • The Outlook client initiates a MAPI connection to Exchange on TCP port 135. • Branch Repeater detects the Outlook to Exchange handshake. • User authentication and mailbox enumeration occurs. • If an accelerated connection is allowed the native Exchange compression is decompressed on the serverside Repeater. • No acceleration = native compression only • The Repeater/Branch Repeater pair then apply compression to subsequent MAPI traffic.

How does MAPI Acceleration work? • A compression bit is flipped in the • The downloading and uploading of message attachments • Outlook then creates multiple packet prior to reaching the client, (messages larger than 32 k) is then accelerated. connections the to Exchange server notifying Outlook not to decompress and message requests are exchanged the native Exchange compression. • Appropriate compression is applied to obtain a higher compression simultaneously among the connections ratio. • Packet header : Memory-based history • Packet payload: Disk -based history

How does MAPI Acceleration work? The acceleration of MAPI is accomplished using several methods Pipelining of ROP requests containing data • Queuing up of upload bytes acknowledged by the client. Pipelining of ROP responses containing data • Pre-fetching of bytes of download data to be sent to the client. Aggregation of DCERPC fragments • MAPI/RPC requests combined into single multithreaded messages

Exchange (MAPI) Acceleration • Requirements • Microsoft Outlook/Exchange Server 2003 and 2007. • Outlook must use normal Exchange mode (no HTTP or HTTPS proxy), without encryption • To disable encryption manually on a single Outlook 2007 client, go to the menu shown uncheck the box, “Encrypt data between Microsoft Office Outlook and Microsoft Exchange’. • To disable encryption for multiple users via group policies, follow the instructions at http: //support. microsoft. com/default. aspx/kb/924617. Change the Properties for “Enable RPC Encryption” to “Disabled” under “User Configuration: Administrative Templates: Microsoft Office Outlook 2007: Tools: Advanced Settings: Exchange.

Branch Repeater Technology – HDX Broadcast Adaptive Protocol Acceleration Adaptive Compression Adaptive TCP Flow Control Prioritization and Qo. S (Improve inefficient protocols) (Reduce application turns and data) (Overcome loss/latency penalties) (Prioritize critical traffic)

Adaptive Compression Sensing real-time network and traffic conditions • First pass compression • Byte Caching • In memory or on disk • De-Duplication • Across workflows • Across applications • Across users Disk Access Time • In L 2 cache and memory • Various algorithms (ZLIB, LZS) DRAM Cache History Length

Adaptive Compression First Pass Compression History

Adaptive Compression Second Pass A Small Token Replaces Thousands of Bytes Compression History

Branch Repeater Technology – HDX Broadcast Adaptive Protocol Acceleration Adaptive Compression Adaptive TCP Flow Control Prioritization and Qo. S (Improve inefficient protocols) (Reduce application turns and data) (Overcome loss/latency penalties) (Prioritize critical traffic)

Adaptive TCP Flow Control Sensing and responding to latency and packet loss Without Branch Repeater Throughput With Branch Repeater Throughput Link Speed Average Utilization Time Slow Start Slow Ramp Time

Branch Repeater Technology – HDX Broadcast Adaptive Protocol Acceleration Adaptive Compression Adaptive TCP Flow Control Prioritization and Qo. S (Improve inefficient protocols) (Reduce application turns and data) (Overcome loss/latency penalties) (Prioritize critical traffic)

Traffic Prioritization and Qo. S Adaptively allocates bandwidth across different applications and ICA virtual channel types Without Branch Repeater 1. 5 Mbps Bulk Transfers With Branch Repeater 20% Recreational ICA (Interactive) 60% ICA (Interactive) Recreational Bulk Transfers

Quality of Service (Qo. S) prioritizes applications • 5 traffic classes (or Qo. S queues) • Each queue assigned a min % of the link bandwidth • If queue bandwidth is unused, other traffic can use it • Qo. S is Citrix ICA aware • Dynamic mapping based on ICA priority bits Goal = Fill the pipe • Queue specific reporting

Quality of Service Scheduling Class A – 50% Class B – 25% Class C – 25% Flow (Partner unit) Class D – 0% Flow (Partner unit) Class E – 0% Adapter (NIC)

Qo. S and ICA Priority Tags • Default Priority bits and ICA virtual channels: Priority High (0) Medium (1) Sample Virtual Channels Video, Mouse and Keyboard Screen Updates Program Neighborhood, clipboard, audio mapping, license management Low (2) Background (3) Client COM Port Mapping, Client Drive Mapping Auto Client Update, Client Printer Mapping and OEM Channels • ICA packet with data from multiple channels gets the priority bit associated with the highest level Virtual Channel • ICA Priority bits can be changed via the registry of the Presentation Servers.

Branch Repeater Technology – HDX Intelli. Cache Branch Staging of Offline Apps Pre-positions streamed applications locally for rapid delivery to branch users Branch Caching of Online Apps Local caching and de-duplication across multiple Xen. App user sessions

Accelerating Xen. App Offline Apps • Stages and accelerates Offline apps to branches • Deliver LAN-like performance • Branch remains productive even during WAN outages • Reduce management complexities of services in the branch • Transparent, instant-on service to the user

Branch Staging Pre-positioning of Offline applications locally in the branch Xen. Application Profiler File Share (Application Hub) Branch Users WAN Branch Repeater with Windows Server

When do. CAB stream over the WAN? • User accesses an app for the first time • Get updated or patched applications • After users download the app, it is saved to the local PC cache

Pre-positioning. CAB files Xen. App Profiler Client Citrix Branch Repeater Citrix Repeater 1 WAN Xen. App 5 2 • • Very automatic and transparent to client . cab File store Can be done anytime Qo. S administration of both DFS replicated traffic and other traffic to branch Tip: Make sure that the Branch Repeater and the Xen. App Server have domain permissions.

Client accessing the files via DFS Namespace and redirection (Authenticate / Download / Redirect) Client Citrix Branch Repeater Citrix Repeater Xen. App Profiler 1 WAN Xen. App 5 2. cab File store • Designed based on DFS replication • Redirects client to closest DFS replication site the local BR • No client changes required

Client accessing the files via DFS Namespace and redirection (Authenticate / Download / Redirect) Client Citrix Branch Repeater Xen. App Profiler Citrix Repeater WAN Xen. App 5 3. cab File store • Designed based on DFS replication • Redirects client to closest DFS replication site the local BR • No client changes required

Branch Repeater responds to client request Xen. App Profiler Client Citrix Branch Repeater Citrix Repeater WAN Xen. App . cab File store • LAN like performance • No need to go over WAN to get the LARGE. cab file • Results: Very HAPPY user!

Branch Repeater Technology – HDX Intelli. Cache Branch Staging of Offline Apps Pre-positions streamed applications locally for rapid delivery to branch users Branch Caching of Online Apps Local caching and de-duplication across multiple Xen. App user sessions

Branch Caching Local caching and de-duplication across multiple sessions Data Center Branch Office Branch Repeater Infrastructure Servers Xen. App Farm Optimized TCP Connections

Multi-user Optimization for Xen. App Delivers best performance for Xen. App to branch users • 22 -39% faster application start up per user • 2 -6 x faster bulk data transfer over ICA + up to 20 x less bandwidth consumption • Up to 30 x reduction for UPD print traffic over the WAN

Ideal Use Cases for Branch Caching • Multiple users accessing the same text heavy applications • e. g. Microsoft Word or Excel • Multiple users frequently accessing forms-based Web applications • e. g. Call center environment utilizing SAP • Multiple users printing similar files within ICA • i. e. Universal Print Driver (UPD) • Multiple users performing repetitive file transfers within ICA • i. e. Client drive mapping • Multiple users streaming the same media file within ICA • i. e. HDX Media. Stream

Example: Text Heavy Application User 1 User 2 Same text between users using Word. Redundant data not sent over WAN.

Example: Forms-based Web Application User 1 User 2 Form and web browser based apps share background objects between users. Redundant data not sent over WAN.

Example: Multi-user file and print services on ICA User #1 User #2 Cross-session de-duplication benefit for print or transfer of similar files by different users Redundant data not sent over WAN.

ICA Acceleration with Xen. App alone compressed and encrypted ICA data Xen. App Client WAN • Supports Windows 2003 servers • Leave all compression, encryption settings enabled • Native ICA from Xen. App is optimized and compressed Xen. App Server

ICA Acceleration with Branch Repeater compressed and encrypted ICA data Xen. App Client Branch Repeater WAN ICA data still encrypted Repeater Xen. App Server ICA data still encrypted • Branch Repeater decrypts and encrypts ICA traffic to allow the ICA protocol to be parsed and compressed • Supports basic and advanced encryption

ICA Acceleration with Branch Repeater compressed and encrypted ICA data Xen. App Client Branch Repeater WAN Repeater Xen. App Server • Automatic disabling of ICA compression on the Xen. App server and client • Branch Repeater parses ICA traffic inside the virtual channel • Compression works across users and virtual channels to optimize all traffic • Optimal performance for print, client drive mapping, and common apps

Mixed Environment Support Decrypted and Encrypted by Repeater ICA Pass-through by Repeater Branch Office #1 HQ/Data Center Branch Repeater WAN Branch Office #2 Repeater HDX Intelli. Cache ensures that branch users on direct WAN as well as those behind a Branch Repeater continue to enjoy ICA application performance!

Further Reading Whitepaper: Performance assessment of Multiuser Xen. App Optimization • http: //www. citrix. com/branchrepeater • http: //support. citrix. com/article/ctx 120160

Citrix Repeater Plug-in for Citrix Receiver

Citrix Receiver A single Citrix client for Citrix Delivery Simple user experience For the enterprise PC, home PC, and Center infrastructure Single point for notifications BYOPC Orchestrates installation, updates, and interaction of Windows, Macintosh, i. Phone, & Smartphones third party plug-ins with Citrix plug-ins Works inside and outside the firewall

Citrix Receiver Key Benefits • Improved User Experience • Simplified User Interface • Reduce Systray Sprawl • Consistent User Notifications • Simpler Secure Connection from outside work • Improved IT Experience • Centralized client management • Head-end controls default settings • Simpler support for BYOC, home, etc

Citrix Receiver for Windows Three Components • Citrix Receiver – software installed on end-user desktop that houses plug-ins and communicates with the Merchandising Server for updates • Citrix Receiver Merchandising Server – Linux-based Xen. Server Virtual Machine that stores plug-in updates • Citrix Receiver Administrator Console – Web-based console used to administer the Merchandising Server and configure plug-in deliveries

Citrix Repeater Plug-in • Available as plug-in for the Citrix Receiver as well as standalone • High-definition experience for mobile users and teleworkers ("office like") • Overcomes bandwidth and latency uncertainty of 'on-road' connectivity • Wi. Fi, broadband, 3 G connections

Deployment Scenarios Integrated mode • Merchandising Server is used to deploy Citrix Receiver and plug-ins • Schedule the delivery for self-service install by end-user Standalone mode • Citrix Repeater plug-in is deployed without the Citrix Receiver or Merchandising Server • Citrix Repeater plug-in software is downloaded from www. citrix. com • Software is customized and deployed using existing software distribution mechanisms

Turbocharge Your Access Gateway! • Repeater and Access Gateway plug-ins interoperate to turbocharge secure, remote access • Unique, single-vendor secure accelerated access solution • Best remote and mobile user experience • Simple, secure and fast

Turbocharge Access Gateway Un-optimized traffic Optimized traffic Traffic between the client and the secure network is optimized before passing through the VPN tunnel Repeater Plug-in Access Gateway Plug-in Secure & Optimized traffic WAN Access Gateway Repeater

Repeater and Access Gateway Plug-Ins Integration Application (Email, Web Browser) Repeater Plug-in Access Gateway Plug-in User Space Kernel TCP/IP Protocol Stack (Kernel) Repeater Packet Interceptor Access Gateway Driver Network Driver

Access Gateway Configuration All editions of Access Gateway can be turbocharged Standard Edition Advanced Edition Enterprise Edition Step by step configuration and planning available in CTX 121035 Turbocharge Access Gateway Reference Architecture

Benefits of Access Gateway integration • Secure and accelerated remote access • Compared to secure access without the Repeater Plug-in, a turbocharged Access Gateway: • Improves CIFS performance by up to 30 X • Improves HTTP performance by up to 50 X • Improves MAPI performance by up to 50 X • Up to 99% bandwidth saving with native Windows file shares, Exchange email, Share. Point document libraries, and other apps

Turbocharge Access Gateway Test results showing the performance improvement over different types of bandwidth

Plug-n-Play for Any Network

Plug-and-Play Deployment with Full Transparency Auto-discovery No tunnels No. Tunnel Zero impact to: Firewalls Net. Flow Qo. S Branch Repeater Proprietary Tunnel Branch Office Users Non-Citrix WAN Optimization

Multiple Deployment Modes Optional HA Inline Bypass NIC LAN WAN Switch Repeater or Branch Repeater Router Virtual Inline PBR WCCPv 2 LAN WAN Switch Router Repeater or Branch Repeater Optional HA

Multiple Deployment Modes : Proxy Modes

High Availability – 4 -port NICs in Repeater • The 4 -port NIC is two logically-individual fail-to-wire pairs • 4 -port NICs are for the environments that are: • dual homed, load balanced, and redundant • the multiple WAN links have the same speed • Supports HA Pair mode starting with release 5. 0 • can be deployed inline, WCCP, or policy based routing modes

High Availability Mode in Branch Repeater • High-availability mode • Transparently combines two Branch Repeaters with Windows Server into a primary/secondary pair • Uses standard protocol VRRP • Supports multiple HA deployment topologies for uninterrupted service to the branch

Approaches to Resolve ‘Asymmetric Routing’ • Asymmetric Routing: In a multi-homed environment, a packet on a given connection might travel over either link Group Mode • allows two or more appliances to be grouped together into a single virtual appliance WCCP mode • where WAN routers send traffic from multiple links to the same appliance (or HA pair), via the WCCP protocol. Virtual Inline • where routers send traffic from multiple WAN links through the same appliance (or HA pair). LAN-level aggregation • where an appliance (or HA pair) is placed closer to the LAN, before the convergence point of the WAN links Group mode over non-redundant links with possible asymmetric routing

Why deploy in Group Mode • When multiple WAN links exist. • Primary/secondary configurations. • Load balanced configurations. • Possibility of asymmetric routing issues. • Group mode can be used on redundant links without reconfiguring routers. • Group mode applies only to the appliances on one side of the WAN link. • Appliances in group mode have no affect or reliance on the appliances on the other side of the WAN link. Primary Link Backup Link

How does Group Mode work? • Within a Group Mode grouping, there is a connection “owner”. • The owner of a connection is set by default according to a hash of IP/port pairs. • The owner can optionally be set according to specific IP/port-based rules. • Group mode uses a heartbeat mechanism to verify that other members of the group are active. Packets are only forwarded to active group members. Primary Link Backup Link

How does Group Mode work? • If traffic arrives first at the “owning” appliance, it is accelerated and forwarded normally. If it arrives first at a non-owning appliance, it is forwarded to its owner, which accelerates it and returns it to the original appliance forwarding. • In addition, it means that an appliance is available for acceleration even if its link is down. When the routing tables change to bypass the failed link, group mode still forwards the packets through the owning appliance before sending them across the remaining link. Owning Appliance

Integrated Windows Services

Citrix Branch Repeater with Windows Server • A comprehensive branch solution, Citrix Branch Repeater: • Optimizes application delivery from the Citrix Delivery Center • Provides key native Microsoft Windows™ branch infrastructure services • Branch Repeater is paired with Citrix Repeater appliances in the data center • Administration is performed through an MMC snap-in or other Windows management services

Branch Repeater System Architecture Windows Services Citrix Services File Print AD DNS. . . Branch Users Datacenter Citrix Xen. App Repeater for Streamed Apps Repeater Citrix WAN Optimization Windows OS Citrix Hardware Apps

Branch Repeater Feature Breakdown • WAN Optimization – Citrix Repeater Technology • Domain Controller Services – Windows 2003/ 2008 • Active Directory – Windows 2003/ 2008 OR • Web Content Caching – ISA Server 2006 • File and Print Services – Windows 2003/ 3008 • DNS, WINS and DHCP Services – Windows 2003/ 2008 • Administration – MMC Snap-in Framework or Citrix Command Center

Windows File and Print Services • The Branch Repeater appliance also serves as a local print server to speed up print job spooling times • It also provides Windows file and printer services • The queuing of CIFS messages and the compressing of traffic alleviate the effects of a slow WAN link

Domain Controller Services • Remote administration is eased through domain-level, instead of local machine, accounts • Read Only Domain Controller (RODC) for improved data New security in branch office servers • This scenario also provides local authentication and Windows policy enforcement • Branch Repeater allows the branch office be self-sufficient in the event of lost WAN connectivity

Windows Management Tools • Management pack available for System Center Operations Manager 2007 (SCOM) • Windows Management Instrumentation (WMI) support for integrating with custom management and reporting tools • Using solutions such as Microsoft SCOM and WMI, an entire enterprise-wide deployment of Citrix Branch Repeaters can be centrally and seamlessly managed.

Advanced Microsoft Services – Web Content Caching • Optional add-on feature • The web caching functionality of ISA Server 2006 Enterprise is leveraged • Page elements, graphics, text and active content are cached locally on the Branch Repeater appliance • Protocol object caching • HTTP • FTP • BITS • Requires inline deployment

Advanced Microsoft Services – Systems Management • Branch Repeater is the single platform to configure, administer and maintain the branch systems using existing Microsoft tools • Eliminate dedicated branch servers and optimize WAN latency and bandwidth • SMS Secondary Site for geographically spread deployments • SCCM Branch Distribution Point for simplified software distribution and faster patching • Extend IT consolidation initiatives to the branch

Flexible and Centralized Management

What is Citrix Command Center? • Single administrative interface to all remote appliances • Automated discovery and inventory • One-click configuration replication • System-wide fault management and performance monitoring

• Manages Net. Scaler, Access Gateway, Repeater and Branch Repeater from Citrix • Free and easy to use; runs on any Windows server

Command Center 3. 2 Features • Centralized management of Citrix Branch Repeater devices (both Windows and non-Windows) • Citrix Branch Repeater with Windows Server can also be centrally managed by Microsoft System Center Operations Manager (SCOM) and other Microsoft management tools • Centralized Configuration Management

Other Enhancements in Command Center 3. 2 • Microsoft® SQL Server™ support • High Availability support • Faster and more efficient backup • Fault Management and Event Aggregation enhancements • Historical Reporting and Performance Graphs enhancements

Command Center - Web-based Interface

Command Center - Configuration Management View archived configs and restore to any previous config

Command Center - Monitoring and Reporting • Multiple levels of performance monitoring • appliance-level (e. g. single WAN link) • System-wide (Citrix Command Center) • End-user (Xen. App, Xen. Desktop) • Full network transparency allows use of existing performance monitoring tools (e. g. Net. Flow) • Extensive alarm and activity information • Export data to industry-standard NMS tools

Appliances - Additional Management Utilities • Web-based configuration • Scriptable CLI • SNMPv 2 support for NMS integration

Hardware Overview

Complete Product Line – Citrix Branch Repeater Integrated Windows Services Branch Repeater with Windows Server 100 / 200 / 300 Repeater Plug-in Branch Repeater 100 / 200 / 300 Branch Repeater VPX-2 / 10 Mobile User Branch Office (1 -10 Mbps) Repeater 85 xx 8520 8540 Branch Repeater VPX-45 Regional HQ (10 -45 Mbps) Repeater 88 xx 8820 High Speed Branch Repeater VPX-45 Data Center (45 -500 Mbps)

Branch Repeater & Branch Repeater VPX-2/10 • Small to medium branch offices • WAN optimization functionality in a compact and nearly silent form-factor • VPX = low-cost, flexible branch installation with existing servers • WAN speeds up to 10 Mbps • Command Center management

Branch Repeater with Windows Server • Small to medium branch offices • • Integrated Windows services Stages Xen. App offline apps WAN speeds up to 10 Mbps Command Center and Microsoft manageability

Repeater Appliances & Branch Repeater VPX-45 • • • Datacenters and large offices Fan out to branches Datacenter replication Repeater Plug-in support WAN speeds up to 500 Mbps VPX = low-cost, flexible installation with existing servers • Command Center management

Repeater Plug-in • For remote and mobile users • Plug-in for Citrix Receiver or run standalone • Support broadband, Wi. Fi and 3 G connections • Works with Access Gateway and other leading VPNs • Included with Xen. App, Xen. Desktop & Net. Scaler Platinum Editions

Branch Repeater 5. 7 Key Features and Benefits Feature SSL Acceleration Disk Encryption Customer Benefits Accelerate encrypted Xen. Desktop and Xen. App traffic and secure web applications by up to 30 X without compromising security Prevent theft of sensitive data and comply with security mandates and regulations 2008 R 2 for Branch Repeater Reduce the number of servers in branch offices and enable with Windows Server customers to upgrade to Windows Server 2008 R 2 Windows 7 64 -bit plug-in Support growing number of remote users with 64 -bit devices

Branch Repeater 5. 7 Platform Compatibility • Repeater appliances: all supported 8 xxx models • Branch Repeater appliances: 100, 200, 300 • Branch Repeater with Windows Server: 100, 200, 300 • Note – 5. 7 is versioned as 3. 0 on Windows appliances • Repeater plug-in for Receiver • Branch Repeater VPX: N/A* * 5. 7 features will be available for Branch Repeater VPX in Q 4 with 6. 0 release Citrix Confidential - Do Not Distribute

SSL Acceleration Citrix Confidential - Do Not Distribute

SSL Acceleration – Overview • Accelerate all applications that use SSL, e. g: • Xen. App and Xen. Desktop (when using SSL encryption) • Share. Point and other ERP/CRM applications (e. g. SAP, Oracle) over HTTPS • Exchange – Outlook Web Access over HTTPS* • Optional encryption of data at rest and over WAN • Available for appliances and plug-ins Secure Web Server (HTTPS) PC with web browser Branch Repeater Today: • TCP Flow Control • Quality of Service Branch Repeater with SSL Acceleration: • HTTP/ICA Protocol Awareness/Optimization • Multi-level Compression • TCP Flow Control • Quality of Service * Note - Encrypted MAPI does not use SSL and is not supported

Brings parity with Riverbed and Cisco and adds a differentiator against others competitors SSL Acceleration Disk Encryption Citrix Y Y Riverbed Y Y Cisco Y Y Blue Coat Y - Juniper - - Expand Networks - -

New “Crypto” Licenses • Due to US export restrictions for encryption technology • Available at zero cost ($0) to customers via My. Citrix • Unlocks SSL acceleration and disk encryption capabilities • Applied to each appliance on top of standard Citrix license • Similar process to other WAN optimization vendors

How SSL Acceleration Works Traffic Interception • Compatible with existing application/web servers and certificate/key formats • Interoperability with Net. Scaler (or any other SSL offload device) SSL Traffic Interception

How SSL Acceleration Works Secure Key Store • Built-in secure certificate/key store on Repeater • With tracking of certificate/key expiry • Application/web server private keys NEVER leave data center Secure, enterpriseclass Certificate / Key Store

How SSL Acceleration Works Secure Data Transfer • Encrypt and secure user data sent between Repeater appliances • Optional ability to encrypt ALL (non-SSL) TCP traffic between Repeater appliances Secure Data transfer between Repeater Appliances

How SSL Acceleration Works Secure Disk Storage • Ability to turn off disk compression for sensitive user data • Ability to secure/encrypt the user’s data stored on disk • With ability to erase (scrub) the data • Optional ability to secure/encrypt ALL (non-SSL) user data Disk encryption

Flexible deployment modes for joining the branch network Branch Repeater Inline • Optional Bypass NIC WAN Router LAN Switch Virtual Inline Branch Repeater • WCCPv 2 • Policy-based Routing WAN LAN Switch Router

Branch Repeater VPX Features – 1/2 • Hypervisor: Citrix Xen. Server only* • Based on Branch Repeater software v 5. 5. 1 • Support for Repeater Plug-in • Inline, WCCP and PBR deployment modes Print Server Hyp erv iso Branch Services r • Scale VM resources as needed * Additional hypervisor support in future releases

Branch Repeater VPX Features – 2/2 • Centralized management via Command Center* • Support for “Essentials for Xen. Server” tools • Xen. Motion Live Migration, High Availability and Resource Pool • No Group Mode support Print Server Hyp erv iso Branch Services r • No Fail-to-Wire (FTW) support * Requires Command Center v 4. 0 or higher

Use Case 1: Accelerate other Virtual Machines Internal Network VM #1 Network 0 Branch Repeater VPX VM #2 Xen. Server

Use Case 2 : Accelerate other Servers VM Network 0 Branch Repeater VPX Xen. Server Network 1 Server

Use Case 3 : Accelerate Desktop Virtualization Xen. App Internal Network 0 Branch Repeater VPX Xen. Desktop Merchandising Server Xen. Server* * Likely to be a Resource Pool or Cluster

Use Case 4 : Multiple Instances for Traffic Separation N 1 LA V VLAN 2 Branch Repeater VPX VL AN AN 1 VLAN 2 3 3 Segregate traffic by VLAN in Xen. Server VL Branch Repeater VPX Xen. Server V N LA

Branch Repeater VPX Failover and Bypass Card • Cannot “bridge” or bypass the Xen. Server host if hosting other VMs • Xen. Server does not recognize any special hardware (FTW card) VM #1 VPX VM #2 • Use WCCP or PBR • Use Xen. Server HA • Configure VPX to start automatically • Configure HA on Resource Pool VPX Server

Branch Repeater VPX Requirements VPX Minimum Requirements Xen. Server Requirements • 1 CPU • 64 bit x 86 server • 1 GB RAM • VT enabled CPU (Intel VT or AMD-V) for running Windows VMs* • 60 GB Disk • 2 Virtual NICs • Min. 1 GB RAM, 16 GB disk** • Windows PC for Xen. Center * Branch Repeater VPX does not require VT enabled CPU ** Not including VM requirements Citrix Confidential - Do Not Distribute

Branch Repeater 5. 7 Platform Compatibility • Repeater appliances: all supported 8 xxx models • Branch Repeater appliances: 100, 200, 300 • Branch Repeater with Windows Server: 100, 200, 300 • Note – 5. 7 is versioned as 3. 0 on Windows appliances • Repeater plug-in for Receiver • Branch Repeater VPX: N/A* * 5. 7 features will be available for Branch Repeater VPX in Q 4 with 6. 0 release Citrix Confidential - Do Not Distribute

Repeater VPX Repeater as a Virtual Machine available in different flavors : Repeater VPX Express for trial purpose only (512 kbps, 10 accelerated connections, 5 repeater plugins) Repeater VPX 2 Mbps for WAN links up to 2 Mbps Repeater VPX 10 Mbps for WAN links up to 10 Mbps Repeater VPX 45 Mbps for WAN links up to 45 Mbps

Promotion Overview : Branch Repeater & Xen. Desktop • The Citrix® Branch Repeater™ Promotion for Xen. Desktop™ Customers provides 2 free of charge Citrix Branch Repeater VPX-10 virtual appliances to all existing and new Citrix Xen. Desktop customers with active SA who purchase any of the following physical or virtual appliances: • Branch Repeater VPX-45 • Repeater 8520 • Repeater 8540 • Repeater 8820 with high-speed option Citrix Confidential - Do Not Distribute

Repeater VPX Repeater as a Virtual Machine Only on Xen. Server(a version for Vmware ESX or v. Sphere is expected Q 4 2010) All features are supported accept : • Group Mode • Repeater High-availability mode is not supported. (Xen. Server HA is supported. ) • Ethernet bypass card • LCD front-panel display • Serial console interface Minimal Standard Config Only for Demo/POC

Citrix Flex. LM Licensing

Citrix Licensing • Branch Repeater product line now follows the standard Citrix Licensing (a. k. a. V 6, Flex LM) infrastructure • Repeater 8 x 00 series • Citrix Repeater Plug-in • Branch Repeater with Windows Server

Benefits of Citrix Licensing • Simplicity – consistent across all Citrix products • Single way to obtain Citrix product licenses (including Platinums) • Consistent license installation, management and compliance • A single way to upgrade and renew licenses • Consistent license consolidation, re-statement and reporting • Flexibility – ease of deployment • Ability to allocate Repeater Plug-in licenses across multiple Repeater appliances post-purchase • Separate Repeater Plug-in purchases from Repeater appliance purchases

Obtaining New Licenses • New Repeater and Branch Repeater units will ship from Citrix without a license • License entitlements will be available on the “My Citrix” portal (www. mycitrix. com) • License files can be generated from the “Activation System/Manage Licenses” tool on My Citrix