Title: Citrix Workspace Suite Subject: Deliver secure access to apps, data and services from any device with the new Citrix Workspace Suite. This complete and powerful solution is optimized to meet the performance, security and mobility requirements of each individual, with instant access to p ersonalized desktops, mobile, web, and Windows apps, data and services over any network. Run Citrix Workspace Environment Management Console Setup.exe. On the Welcome page, click Next. On the License Agreement page, select “I accept the terms in the license agreement” and then click Next. On the Customer Information page, type the required information and then click Next.
- Citrix Workspace Suite Feature Matrix
- Citrix Workspace Suite Feature Matrix
- Citrix Workspace Suite Subscription
- Citrix Workspace Suite 2018
What is the Citrix Workspace Suite?
Citrix Workspace Suite brings together normally separate Citrix products, and non-Citrix products as well, into a singleplatform. Overall, itsmain function is to deliver personalized applications, desktops and content to any device and to enable file sharing enterprise-wide. Together with the Citrix Workspace app, which serves as the lone entry point into the platform, Citrix Workspace Suite aims to simplify the user experience for Citrix customers. It can also be deployed on premises and in the cloud.
What solutions make up the Citrix Workspace Suite?
The suite is composed of the following solutions:
Citrix Workspace isn’t just another point solution. It’s a complete digital workspace that organizes, guides, and automates work to redefine personal productivity and drive employee engagement. Citrix Workspace Suite is the market leading mobile workspace solution, uniting apps, data and services for delivery on any device. Watch this video to learn.
- Citrix Virtual Apps and Desktops (formerly XenDesktop) – used to deliver virtual desktops to any device;
- Citrix Virtual Apps (formerly XenApp) – used to deliver virtual applications to any device;
- Citrix Endpoint Management (formerly XenMobile) – an Enterprise Mobile Management (EMM) solution that delivers mobile apps and provides both Mobile Device Management (MDM) and Mobile Application Management (MAM) functionality;
- ShareFile – used for sharing files across several devices; and
- NetScaler Gateway – this acts as a portal through which users can access the services provided by the products enumerated above.
Who can benefit from Citrix Workspace Suite?
It is primarily aimed at organizations that have employees who work from different locations, have different working preferences, and use different devices to accomplish their tasks. This format is ideal for businesses that have employees who work in the main office, other employees who work in branch offices, employees who do fieldwork, and still others who telecommute or work remotely.
A separate license for products within the suite
If you wanted to acquire all of the functionality offered by Citrix Workspace Suite, you’d have to purchase multiple products, each with their own license. The issue of having to deal with multiple licenses has long been a problem of Citrix customers whose only goal was to deliver virtual applications and desktops remotely to any device. To achieve that goal, Citrix customers have to purchase and deploy several products, including XenDesktop, XenApp, NetScaler, and others. Not only that, but they also have to be familiar with the nuances of each license edition and this is an attempt to address that issue.
While you only get one license with Citrix Workspace, customers still have to determine for themselveswhich of the three available Workspace offerings are best for their requirements.
Choose a simpler alternative
Parallels Remote Application Server (RAS) is a single solution, with the same capabilities, that offers an all-in-one license type that can be deployed on-premises and in the cloud.
One big advantage of Parallels RAS is its overall simplicity. Although Citrix Workspace Suite brings together multiple products into one solution, your IT team will still have to deal with the complexities of each individual product when it’s time to set up the entire infrastructure. If you want to deliver virtual applications and desktops to thin clients, PCs, laptops, tablets, phones, and just about any device, you can use Parallels RAS.
To experience firsthand just how easy it is to build a Parallels RAS infrastructure, download the 30-day trial of Parallels RAStoday.
References
BrianMadden | https://www.brianmadden.com/opinion/Are-we-there-yet-An-update-on-Citrix-Workspace-experience
TechTarget | https://searchvirtualdesktop.techtarget.com/news/2240220239/Virtual-desktops-apps-converge-in-Citrix-Workspace-Suite
Accelera Solutions | https://youtu.be/MgybSuj875k
SiliconANGLE | https://siliconangle.com/2019/05/21/google-citrix-expand-cloud-partnership/
Spiceworks | https://community.spiceworks.com/topic/1473725-citrix-workspace-suite
Parallels | https://www.parallels.com/blogs/ras/parallels-ras-vs-citrix/
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
Objective
This feature is an important change to the secure communication protocol. Cipher suites with the prefix TLS_RSA_ do not offer forward secrecy and are considered weak. These cipher suites were deprecated in Citrix Receiver version 13.10 with an option for backward compatibility.In this release, the TLS_RSA_ cipher suites have been removed entirely. Instead, this release supports the advanced TLS_ECDHE_RSA_ cipher suites. If your environment is not configured with the TLS_ECDHE_RSA_ cipher suites, client launches are not supported due to weak ciphers.
This document aims to detail the changes to the cipher suites.
What’s New?
The following advanced cipher suites are supported:
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
In earlier releases, the GPO configuration that was available under the below Computer Configuration node which allowed to enable the deprecated cipher suites has been removed now.
Administrative Template > Citrix Component > Citrix Workspace > Network Routing > Deprecated Cipher Suites
The following cipher matrix provides the ciphers supported by the latest SSL SDK:
Expected failure scenarios and edge cases
TCP
OPEN mode: Session launch is not supported when the client is configured for GOV and the VDA for COM. This happens because a common cipher suite is absent.
- FIPS/NIST(SP800-52) compliance mode: Session launch is not supported when the VDA is configured for COM the client for COM, GOV, or ANY, or the other way around. This happens because a common cipher suite is absent.
Citrix Workspace Suite Feature Matrix
- DTLS v1.0 supports the following cipher suites:
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_EMPTY_RENEGOTIATION_INFO_SCSV
- DTLS v1.2 supports the following cipher suites:
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
- TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA
- TLS_EMPTY_RENEGOTIATION_INFO_SCSV
- Therefore, session launch is not supported from a client configured for GOV to a VDA configured for COM. Also, fallback to TCP is not supported. When you use DTLS v1.0, session launch is not supported for clients configured for GOV because a common cipher suite is absent.
- DTLS does not support FIPS/NIST compliance modes.
- DTLS v1.2 is supported by Windows 10 (1607 and later) and Windows 2016 VDAs. For more information, see Knowledge Center article https://support.citrix.com/article/CTX230010.
- DTLS v1.2 is not supported by Citrix Gateway. This scenario can be tested only with DTLS v1.0. For Citrix Gateway ciphers troubleshooting, see Knowledge Center article https://support.citrix.com/article/CTX235509.
The following matrices provide details of internal and external network connections:
Citrix Workspace Suite Feature Matrix
- Matrix for internal network connections (Citrix Gateway scenario)
- Matrix for external network connections (Citrix Gateway scenario)
Note: When NetScaler Gateway is used
Citrix Workspace Suite Subscription
- For the EDT to work, NetScaler Gateway must be of version 12.1 or higher since the older versions doesn't support ECDHE cipher suites in DTLS mode.
- NetScaler Gateway doesn't support DTLS 1.2 so TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 and TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 are not supported and NetScaler Gateway must be configured to use TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA for it to work in DTLS 1.0