VMware Horizon and Zero Clients Enabling Rapid Remote Secure IT Working

10ZiG Zero Client 6048q2020, the year where the country went into lock down. In the UK we were told to work from home. This got me thinking more about options for rapid deployment of remote working without missing end user / device security.

Lock down and those with laptops and remote access, off they went. The desktop systems users, started looking to purchase laptops, but there was limited availability. The laptop, a great short-term fix, but do not forget the bigger picture, security of end users/devices and working conditions.

Is there an alternative, potentially faster and more secure out the box option which could also be explored? Something which is quick to deploy and manage than the time it takes to build, deploy and lock down a laptop.

Now if you host a Citrix environment or VMware Horizon then you might find you have an alternative option. Consider Thin / Zero Clients, in this example we are looking at the 10ZiG 6000q series offering. One of the nice features that 10ZiG offer is a FREE 10ZiG Manager tool which can control your devices over the internet. Anyone who has used Thin or Zero Clients before will already know that you can centrally manage and apply security controls over all the devices, but maybe you didn’t know an end user could use the device from home with a few tweaks using the cloud agent included in 10 ZiG Manager.

Does you environment already use VMware Horizon? Could you extend your VMware Horizon environment to be internet facing with VMware Unified Access Gateway in place? VMware Unified Access Gateway will allow you to secure external access to your corporate VDI desktops and applications on VMware Horizon® 7 on-premise instance.

However before running out and buying 10ZiG devices for everyone and saving on future laptop and desktop costs, consider the end users and build up scenarios for each type of device. There are various models of 10ZiG devices that can support an office user to a power user. Below you can see some thoughts around how end users might work during lock down.

In the scenarios, I found anyone who previously regularly worked from the office with a desktop could start working from home using a Zero client. The experience is like using a laptop, but I was forced into office working mode.

If you are working from home for long periods of time, things that you may have taken for granted in the office now become a concern for home. People should use an external monitor, keyboard and mouse. Have a comfy chair and desk to work at. Also a more important topic over looked and there isn’t a technical solution to resolve, finding a way of controlling Work and Home life. A desk / dedicated space to work from is the ideal way to identify to yourself the difference between work and home. If you were considering how some one works from home, ship the 10ZiG device with a monitor, keyboard and mouse. A laptop would add flexibility to roam around but you cant enforce a good working environment.

With all the above in mind 10 ZiG offer a FREE demo device to trial for 30days.

So I took this FREE demo, utilised my VMware vExpert skills, connected to the VMware Horizon environment from home and deployed a 10ZiG Zero Client, managed by a cloud agent and running in kiosk mode.

Now, I’ve just completed the trial of a 10ZiG demo device, utilising the kiosk style VMware Horizon end user experience when working from home. If your interested to see how simple the process was, take a moment to watch the 10 min video “Demo to Deployed” by Stephen Hackers.

This video shows how I ordered and configured a demo device and connected to the VMware Horizon desktop when working from home.

Security Is a Hugely Strategic Area For VMware:…

Video discussion about VMware and their recent acquisition, security company Octarine. #Security #VMware #Octarine

Security Is a Hugely Strategic Area For VMware:…

VMware recently acquired yet another security company Octarine. The acquisition shows again that VMware is taking security extremely seriously. We sat down with Tom Corn, Senior Vice President of Security Products at VMware to talk about this acquisition and also why is VMware taking […]


VMware Social Media Advocacy

VMware Carbon Black – Connect – May 13-14 2020 Virtual

VMware Carbon Black – Connect

Day 1 of the Event

First thing, the platform this event ran on was interactive and simple to follow. Simply navigate your way around as if you were at the event in person.

The agenda was packed full of interesting and useful knowledge from start to finish.

Presentations

There were three presentations that appealed to me on day 1.

  1. Main Stage “Welcome to VMware Carbon Black Connect” by Patrick Morley, Senior Vice President and General Manager at VMware
  2. Security Leadership “5 Tactics for Selling Security to Senior Leadership” by Alex Philips, CIO and CISO at a Fortune 500 oil and gas company

    Example of the 5 Tatics

  3. Security Leadership “The Rise of Destructive Malware” by Greg Foss, Senior Threat Researcher at VMware Carbon Black

    Example of one of the slides

Training and Certification Area

I also went on to the certification and training area

Training completed

  1. Become a Threat Hunter Workshop by Ryan Hendricks, Training Manager at VMware Carbon Black
    1. Demonstration and training on VMware Enterprise Carbon Black EDR product

    GUI – Example view

    1. LAB environment

Optimising and Securing VMware Environments with Runecast Analyzer

Overview of Runecast Analyzer

A brief overview of a product which helps reduce troubleshooting time, identify issues and helps with making your vSphere system compliant. The biggest issue I see in vSphere environments is maintaining security and hardware compatibility with the HCL. The features of Runecast certainly would appear to help resolve these issues. See the key features as I see in this product. (not an exhaustive list)

Key Features (from my perspective)

  • Config KB checks
  • Best Practise
  • Security reports
  • Hardware compatibility checks
  • Logs and KBs Discovered
  • Plugin Runecast for vSphere Client
  • vRealize Orchestrator – Remediation options

Requirements

  • Base appliance starts as min spec – 2vcpu 4GB RAM appliance

Runecast Dashboard (example)

Simple clear dashboard, also available using a plugin for the vSphere Client.

  • Config KB checks

The headache in my life resolved, identify config issues highlighted.

What a useful feature, it pulls the info from the VMware Knowledge base and shows resolution

  • Best Practise

Check best practise (run a scan, only takes 1 or 2 mins.)

NTP example

SSH example enabled

  • Security reports

Security and compliance

Analyse against compliance example report and recommendations

Example if PCI DCSS (target specific PCI clusters if your required)

  • Hardware compatibility checks

Hardware Compatibility check only too often get over looked when updates and upgrades happen. Then boom things go wrong and how do you start troubleshooting the unknown. So, this feature looks good to help keep you on track.

Drill down to see the issue example

  • Logs and KBs Discovered

Logs being reviewed, another nice feature

  • Plugin Runecast for vSphere Client (The plugin mentioned at the start)
  • vRealize Orchestrator – (Remediation options with Runecast example)

This is just a brief overview of a product to help save your IT resources time and effort in managing and maintaining the vSphere environment. Seems useful to me.

How to install Next Generation ESXi 7.0 version !!

How to install Next Generation ESXi 7.0 version.

How to install Next Generation ESXi 7.0 version !!

All the VMware professionals are exciting for the new generation of vSphere 7 announcement and General Availability starting from April 02. There are lots of great enhancement done on this vSphere 7 version especially the inbuilt Kubernetes availability and support functionality. This post …Read More


VMware Social Media Advocacy

Stickers Laptops and VMware vExpert Awards

VMware vExpert Award 2020 received. Many thanks VMware for the recognition, 5th year in a row. #VMware #vExpert #vExpert2020 #vSphere #ESXi #Award
#vCommunity. And now, New VMware vExpert Stickers arrived in the post. 5 years of Receiving the Award = 5 STARS. But wait that’s not all, PowerVKE stickers, from Barcelona 2018 Hackerthon when our team picked up 3rd place!! Powershell & Kubernetes. What a great end to the week!! #vExpert, thanks Christopher Lewis To Sticker or Not to Sticker, the Dell XPS13.. #ToSticker or #NotToSticker, #theCLOUDexpert #vCommunity #VMware #kubernetes #PowerVKE #VMwareCode #PowerShell

The BLANK canvas XPS13

The XPS 15 sticker design

What’s New at VMworld 2019

This #VMworld 2019 US came packed with product announcements! See what’s new in Cloud, Networking & Security, Digital Workspace, and Emerging Tech.

What’s New at VMworld 2019

Embrace the momentum of today’s rapidly changing IT environment and accelerate your journey to the cloud with VMware. From the latest in cloud, networking and security, and digital workspaces, to IoT and emerging trends, make your mark with the new technologies and products announced at VMworld 2019.


VMware Social Media Advocacy