Articles

Articles

VDI and Virtual Desktop Security

• HP Inc. acquires Bromium. What’s next for the product line?

  Bromium anticipated some of today’s modern management trends, but we’re curious to hear about the roadmap under HP.  Continue Reading

• Lakeside SysTrack 9 asks the question: How is automation changing your helpdesk?

  Lakeside is building on their analytics and AI strategy with more reactive and proactive monitoring and healing capabilities in Lakeside SysTrack 9, which is new and GA today.  Continue Reading

• Internal Citrix documents breached: What we know and don’t know

  This hits close to home for the EUC space; we should remain calm but alert until we know more.  Continue Reading

• Client virtualization, part 2: How client VMs have evolved into current offerings

  Vendors and open-source projects alike are using the benefits of client virtualization, while fixing some of the flaws.  Continue Reading

• Run potentially sketchy apps in the Windows Sandbox

  Install questionable or untrusted apps and open suspicious attachments in Microsoft’s new virtualized container: Windows Sandbox.  Continue Reading

• Microsoft Ignite 2018 emphasizes security with 3 announcements

  Password-less login, Threat Protection, and report cards highlight latest security improvements.  Continue Reading

• With Pwned Passwords API, annoying password policies can finally go away

  Update password policies at your company by following the 2017 NIST regulations—improving user experience drastically, and the Pwned Passwords API can help.  Continue Reading

• Why Chrome Enterprise’s Password Alert Policy caught my eye at Google Cloud Next

  Use Google Cloud’s Password Alert Policy to prevent corporate passwords from falling into the wrong hands.  Continue Reading

• Friday Notebook, August 3: Fleetsmith Intelligence; Microsoft Managed Desktop

  Also: Cisco and Duo, E2EVC, Nerdio, Titan Security Key, Layering in 2018, MaaS360 Assistant, multi-user Windows 10, Bromium Protected Apps, and more!  Continue Reading

• Identiverse 2018: Ping Identity acquires Elastic Beam, provider of AI-based API security

  API management and artificial intelligence (or, if you prefer, machine learning or simply ‘more advanced access control algorithms’) are key features of identity management today.  Continue Reading

• What is Microsoft 365?

  Still not sure you understand Microsoft’s mega bundle? We’ll learn together.  Continue Reading

• VMware Horizon 7.5 brings a solid list of updates – Here’s a rundown

  Including updates on JMP automation, extended servicing, Workspace One Intelligence, AWS, Azure, BEAT, GPU options, and universal licenses.  Continue Reading

• What I want to see at Citrix Synergy 2018

  More on XenApp and XenDesktop Service; a better identity message; more on unified endpoint management; and pricing and packaging for Citrix Analytics.  Continue Reading

• Friday Notebook, April 20: RSA 2018 edition; Azure Sphere

  Also: RDSH on Server 2019, Garrison, Citrix Cloud adoption, Addigy, and more.  Continue Reading

• Garrison’s unique hardware-based remote browsing brings some interesting advantages

  This remote browser is meant to keep the nasties of the internet out of your environment.  Continue Reading

• What do the latest privacy scares mean for your mobile and cloud strategy?

  A discussion of app permissions, mobile threat defense, and BYOD policy.  Continue Reading

• Are we there yet? An update on Citrix Workspace experience

  Citrix is pushing a security message, and they have a lot of interesting components they could put together. But how far will they go, and will Citrix become an IDaaS?  Continue Reading

• An introduction to FIDO

  The Fast Identity Online (FIDO) Alliance standard could be a part of your identity and EUC plans soon.  Continue Reading

• Where does Citrix Analytics fit, and where does it not fit?

  Citrix Analytics service is on its way, but will its visibility be broad enough?  Continue Reading

• Will digital assistants be a security nightmare like BYOD?

  This isn't a new question, but it's a good time to start digging into it more.  Continue Reading

• Meltdown and Spectre are a buzzworthy pain in the neck, but there’s no need to lose your cool.

  Cool names and logos, along with some sensationalized numbers, bolstered the Meltdown and Spectre buzz, but the reality is that this might be little more than an annoyance for most of us in EUC.  Continue Reading

• Friday Notebook, January 5: How will Meltdown and Spectre affect our corner of the industry?

  That’s pretty much the only news this week, but we have some year-end posts to plug and Citrix Summit is next week.  Continue Reading

• Could remote browsers get popular for SaaS security in 2018?

  Secure remote browsers are a good way to apply the benefits of remote computing to SaaS, but this use case doesn’t seem to have caught on yet.  Continue Reading

• The macOS High Sierra root access bug has lessons for modern management and mobile threat defense

  As we transition to modern management, we have to avoid gaps in what our tools can cover. And even with mobile OSes, you can argue there are still gaps, hence MTD.  Continue Reading

• We're opening up Call for Papers for the next set of GeekOut 365 videos!

  It's been a few months since the initial release of GeekOut 365, and now it's time to add to our library of independent, community-led, expert videos.  Continue Reading

• RDS Unchained: Benny Tritsch's report from Microsoft Ignite 2017

  Benny covers all the Remote Desktop Services buzz and news from Microsoft Ignite 2017.  Continue Reading

• Can Citrix and VMware find a real business opportunity in IoT?

  Rachel Berry gives us a closer look at the IoT technology and vendor landscape, then considers EUC vendor opportunities.  Continue Reading

• FUIT: Get your company to adopt the new NIST password guidelines

  Newer federal guidelines do away with rotation and complexity requirements. Users will love this!  Continue Reading

• In 2017, Mobile Threat Defense is finding its groove - Part 3 - The market

  For years, most of the enterprise has ignored mobile threat defense, but now it’s getting much more attention. Part 3 of this series looks at who is buying it, and why.  Continue Reading

• Office 365 Security and Compliance: An intro to DLP, records management, and e-discovery concepts

  Theresa Miller takes a look at DLP, records management, and e-discovery in Office 365 Exchange Online.  Continue Reading

• Ericom Shield is a secure browser your users won't know they're using

  Secure browsers have become a bit of a hot topic these days, and Ericom Shield is their approach to dealing with browser-born threats.  Continue Reading

• Machine learning hype is growing, but there’s no need for IT to worry.

  Machine learning won’t cause the same types of headaches as BYOD and consumerization, and IT should have plenty of time to vet any new products.  Continue Reading

• Could Citrix acquire Bromium as part of their mission to become a security company?

  Citrix wants to be a security company. The strategy they outlined at Synergy covered threats from outside the organization, but what about threats that come from user activity?  Continue Reading

• Cloud Identity Summit 2017: What I learned about the present and future of ID

  Open standards are coming together to make it a good time for enterprise identity in the cloud. Next stop, continuous authentication.  Continue Reading

• Cloud Identity Summit 2017: Ping Identity news and strategy; plus reflections on the event

  Ping Identity is partnering with Microsoft to connect on-premises apps to Azure AD; and sent signals that machine learning-based security is coming to their products soon.  Continue Reading

• Citrix Synergy 2017 analysis: What are Citrix’s identity management ambitions?

  At Citrix Synergy 2017, Citrix showed off federation for SaaS apps as well as new context and behavior-aware access controls—but what’s their role in the IDaaS space?  Continue Reading

• Will the WannaCry ransomware push your IT strategy forward?

  A huge attack is in the headlines, and your boss is probably asking about it. There’s been plenty of commentary already, so I’ll ask a question: Will this incident unlock budget for IT projects?  Continue Reading

• An introduction to identity

  Do terms like SAML, tokens, and assertions cause you to dream of the days that an ID was just an Active Directory account? Me too! That’s why I wrote this post—we need to catch up or be left behind.  Continue Reading

• The BrianMadden.com Friday Notebook: April 21, 2017

  Featuring Windows 10 servicing changes, Bromium, Cylance, iOS productivity, thoughts on enterprise mobile apps, and more!  Continue Reading

• Why hasn't Bromium taken over enterprise antivirus and antimalware yet?

  When Bromium first released vSentry, you could see the potential even though it was rough around the edges. Today, it looks to be ready for prime time.  Continue Reading

• Office 365 lacks traditional backups, so here’s what to do instead

  This may sound a bit concerning at first glance, but Theresa Miller dives into the options that will ensure you make the right decisions with the content settings available.  Continue Reading

• Citrix Secure Browser: The key word is “Secure”

  Almost all your endpoints already have browsers, so why do you need virtualized one? Jo Harder looks at the issues that might make you want to consider it.  Continue Reading

• Exploring the new era of endpoint security: Dell and Cylance Protect

  Catching up with Dell about their Cylance partnership shows that big vendors are fully behind the new era of endpoint security. Are you?  Continue Reading

• The BrianMadden.com Friday Notebook: February 17, 2017

  It’s RSA week, so we have a wide range of announcements to cover. We featured Bromium and Centrify, and weighed in on the Windows Cloud rumors, too.  Continue Reading

• What I saw at RSA Conference 2017

  In which I meet Avanan and Kaymera, and observe much buzz about identity, mobile threat detection, phishing, and machine learning.  Continue Reading

• Centrify is adding machine learning to their identity platform to help spot stolen credentials

  We already know how important it is to protect identities. It also helps us (and our users) if we have machine learning on our side!  Continue Reading

• HP partners with Bromium, releases HP SureClick to secure IE and Chromium

  HP and Bromium have partnered to deliver HP SureClick, a virtualization-based security platform that is uber-secure, built-in, and hands-off for end users.  Continue Reading

• Cloud-based identity management services can work for your on-premises apps, too

  IDaaS can also influence your remote access and networking strategies.  Continue Reading

• An introduction to Tanium (the technology partner for VMware TrustPoint)

  Tanium brings a new approach to systems management and security, but can it overcome the weight and challenges of patching processes?  Continue Reading

• What are cloud access security brokers, and how do they fit into end user computing?

  CASBs are another tool to help keep data safe in the cloud and mobile era.  Continue Reading

• How current industry mega trends tangibly affect the EUC industry. Part 4: Security

  This is the fourth (and final) article in a series detailing several industry "mega" trends that I see in EUC today. The first article was about Hyper-Convergence, the second was about Application Management (Layering), and the most recent was about...  Continue Reading

• Why should you care about EMM and IAM? Because in the mobile / cloud world, that’s how you do EUC!

  Over the last few weeks, I've been talking a lot about how enterprise mobility management (EMM) and identity and access management (IAM) fit into end user computing today and in the future. (Brian and I recorded two podcasts about these topics, I ...  Continue Reading

• VMware is all-in on Identity and Access Management combined with EMM

  VMware made several enterprise mobility announcements this week, the most significant of which was a new emphasis on identity and access management (IAM).  Continue Reading

• It’s 2015. Are we any closer to consensus on mobile anti-malware?

  Back in February 2014, I wrote an article called "What can we say about the role of mobile anti-malware? Right now there are more questions than answers."  Continue Reading

• Microsoft's impressive enterprise mobility management announcements just keep on coming

  Ignite, Microsoft's enterprise IT-oriented conference, is going on this week in Chicago. Yesterday's keynote covered a lot of ground, and for this article I'm going to go over all the enterprise mobility management announcements.  Continue Reading

• Conference report: Here’s all the EMM news from RSA 2015

  The 2015 RSA Conference ran in San Francisco this week. It's huge and covers all types of security technology, so there's no way I was going to attempt to cover the whole thing.  Continue Reading

• Good Dynamics will leverage ARM TrustZone to secure Android apps without the need for long passwords

  Today Good is announcing that the Good Dynamics MAM framework will soon be able to take advantage of devices that incorporate ARM TrustZone. The end result is that users will be able to replace longer passwords with shorter PINs.  Continue Reading

• Centrify’s approach to IAM is more than SAML and SSO—it’s just what we’ve been waiting for

  We last checked in with Centrify back at Mobile World Congress, looking at their partnership with Samsung, EMM capabilities, and multi-factor authentication. But as an identity and access management (IAM) vendor, they're doing a lot of other ...  Continue Reading

• Rogue departments are buying cloud services outside of IT? I guess they can do FUIT, too.

  When we talk about cloud service adoption in general (DaaS, SaaS, etc…), the overwhelming majority of arguments against such solutions has to do with corporate policy or trust issues rather than technical problems (not that those don't exist).  Continue Reading

• Does disaster recovery planning matter?

  A lot of companies use VDI and RDSH technologies as part of their disaster recovery plans.  Continue Reading

• What's the role of mobile anti-malware? Currently there are more questions than answers.

  Whenever mobile malware is in the news (which is pretty often), questions always come up about the role of anti-malware in enterprise mobility management environments. The problem is there's not very much consensus on mobile anti-malware, and there ...  Continue Reading

• AirWatch announces app reputation scanning service, but leaves room for Appthority and Veracode.

  This week AirWatch announced that they have developed their own app reputation scanning service.  Continue Reading

• If you have to back up client devices, you're doing something wrong

  At TechTarget's Storage Decisions conference last week in San Francisco, one of the attendees asked me, "What's the best backup solution for mobile devices?" What was weird about that question is that I didn't have a quick answer.  Continue Reading

• Want to secure BYOC/BYOD? Just assume bad guys are recording everything.

  At one of our our TechTarget Desktop Virtualization 2013 seminars in San Francisco last week, an attendee asked me about whether it's possible to ensure that BYOD / BYOC devices haven't been rooted and/or compromised. The answer?  Continue Reading

• Having trouble getting budget to deal with consumerization? Create a "FUIT book of Anecdotes!"

  One of the most common challenges I hear from people is that they have a hard time convincing the higher ups and their companies that consumerization is real and something they have to deal with.  Continue Reading

• You think VDI is more secure than traditional desktops? It's not. You're wrong.

  Despite what people have liked to say, VDI isn't anymore secure than traditional desktops. Time to put that myth to rest.  Continue Reading

• How will you manage XP after April 8, 2014 for those situations where you just have to have it?

  Enough with the warnings about April 8th, 2014 and how it's irresponsible to think that you can continue run Windows XP because it just works. Tim Rains of the Trustworthy Computing team at TechNet put up a great post about the dangers of running XP...  Continue Reading

• My new book, Enterprise Mobility Management: Everything you need to know about MDM, MAM, and BYOD!

  I've very happy to announce that my new book, Enterprise Mobility Management: Everything you need to know about MDM, MAM, and BYOD, is available today. This book is an in-depth examination and overview of the mobility topics I write about here at ...  Continue Reading

• IT isn't worried about "data leakage." Thanks to Consumerization, IT is hoping for "data ingestion!"

  In today's world, enterprise data isn't in the enterprise. It's created with a camera, Google Docs, or Evernote.  Continue Reading

• Could VMCS Shadowing (a.k.a. nested VMs) from Intel's new Haswell processors be what Bromium needs?

  Over the last few months, details have been trickling out about Intel's latest processor family, Haswell. Just this week, pricing information was leaked for desktop and mobile processors, and we've also seen feature charts and some benchmarks on ...  Continue Reading

• The delta between work and consumer capabilities is where "FUIT" happens. Luckily we're past that!

  While we do live in a new era of consumerization, the hard part-which was making the transition from the pre consumerization era into our current era-is over, and life should be easier for us now.  Continue Reading

• "Compliance" doesn't make you secure, it keeps you out of jail. Security keeps you out of the news.

  Two of the big areas of concern around the consumerization of IT and BYOD are security and compliance. Whenever I start talking about users being able to do whatever they want, or users bringing in their own devices, people in the audience ...  Continue Reading

• Rethinking network security: all your on-premises WiFi users are actually "remote" users

  Last week I spoke at TechTarget's Modern Infrastructure Decisions conference in New York City. My topic was about the Consumerization of IT, specifically ten things you can do to start to address consumerization in your organization.  Continue Reading

• Check out this must-read post on TechCrunch about how startups are replacing old-guard ISVs

  Over the weekend, Box CEO and co-founder Aaron Levie wrote a blog post on TechCrunch called "The Changing Of The Enterprise Guard." It is a must-read for anyone in our industry, and it gets me excited that I'm part of this hot space even though my ...  Continue Reading

• Considering mobile app management? You should know about app immune systems from Metaforic.

  Last week I had a conversation with Dan Stickel, CEO of Metaforic. Metaforic is the creator of an "app immune system" product that's designed to keep apps safe from attacks, regardless of the state of the environment in which they're running.  Continue Reading

• In defense of BYOD

  Reports of BYOD's death are greatly exaggerated. As the end of the year approaches, every analyst and pundit feels the need to make predictions for 2013.  Continue Reading

• I spent the past 48 hours with a Microsoft Surface Windows RT tablet. Here’s my review.

  Last Friday we received our Microsoft Surface RT, and, like thousands of other bloggers, I spent the weekend playing with it and writing a review. Brian is somewhere on the other side of the world, so you're just getting my impressions for now.  Continue Reading

• My BlackBerry: “I’m ashamed of it”

  please commence with any and all jokes about a BYOD and consumerization reporter owning a dumbphone.  Continue Reading

• Microsoft's thorny challenge: Saving face with IT Pros while acknowledging Consumerization of IT

  For the past twenty years, Microsoft has provided IT professionals and enterprises with the software they need to manage, control, and lock down their end user computing environment. The consumerization of IT, on the other hand, is pretty much the ...  Continue Reading

• Why even consider VDI? The "CapEx versus OpEx" see-saw

  Before I begin, I want to thank Brian and Gabe for inviting me to blog on Brianmadden.com and especially Gabe for nudging me that I should stop procrastinating and get on with it.  Continue Reading

• It's time for a mobile management reality check

  It's easy to get caught up in the hoopla around enterprise mobility. It seems like mobile device management (MDM) has been around forever, so everyone must do it by now.  Continue Reading

• Consumerization by the numbers at Interop

  Here are some interesting stats about the consumerization of IT I picked up at Interop this week.  Continue Reading

• Coolest news of the week: Bromium releases vSentry, adds LAVA - a realtime threat analysis feature.

  We've covered Bromium and the microvisor approach to desktop security before, even having Simon Crosby on our Brian & Gabe LIVE podcast to explain what Bromium is all about. Today, their vSentry product was announced.  Continue Reading

• Guest blog from Simon Crosby explaining what Bromium is and how it works

  With the release of Bromium's vSentry product, we figured we'd re-post this article from one of Bromium's founders: Simon Crosby. Simon submitted this as a guest blog post on June 20, 2012, where it has since received 7000 views and 17 comments.  Continue Reading

• Apperian partners with Mocana for more robust MAM

  In the space of the last six months, mobile application management has pushed ahead of mobile device management as the method of choice for enabling enterprise mobility.  Continue Reading

• How persistence affects security: VDI and TS are not more secure than physical desktops, Part 5 of 5

  If you read the last part of my "VDI and TS are not more secure than physical desktops" series, I left off discussing the various ways of performing isolation and how each approach works. I spoke about some of the challenges with each of these ...  Continue Reading

• You need Appthority's app reputation tool. Now.

  UPDATE (6/3/2013) For a demo of Appthority in action, watch this video from MacIT World from February 2013. Last week I had a chance to sit down with Domingo Guerra, one of the founders of Appthority.  Continue Reading

• Dropbox was hacked. Chorus of IT admins to users: "See? See?!"

  A week or so ago Dropbox hired some "outside experts" to help investigate why a bunch of European users were getting spam at e-mail addresses used only for Dropbox storage accounts.  Continue Reading

• Spoofed MAC addresses and Power Line Networking - two new FUIT tactics I learned at BriForum

  David Stafford has spent his entire life in the End User Computing space, so he knows exactly where we're coming from when we say FUIT.  Continue Reading

• App “wrapping” with Mocana Mobile App Protection

  App wrapping is a way of modifying third-party mobile application binaries so that they have more security features, and it's an important part of many mobile application management solutions.  Continue Reading

• Consumerization Nation #6: We discuss Google and Quickoffice, BriForum, and identity management

  Thanks for listening to this week's Consumerization Nation.  Continue Reading

• The new reality: The IT department has to compete against every random app & website out there!

  Since the consumerization of IT is a fairly new topic, many of the people I speak to about it aren't too familiar with the phrase. Those who have heard of it tend to think that the consumerization of IT is just about devices and BYOC.  Continue Reading

• Which apps should you support and make standard? Try the crowdsourcing approach!

  One of the challenges facing today's IT departments is that because end users can easily choose whatever apps they want, the users do choose whatever apps they want!  Continue Reading

• Mobilisafe provides control over personal devices without managing them

  Last week Gabe and I spoke to Mobilisafe, a Seattle-based startup that does mobile risk management. What is mobile risk management?  Continue Reading

• FUIT: Company block a port you need? Change it to 443 and sneak it by. Or set up a proxy.

  Odds are that any streaming video served up via the web from CBSSports.com is blocked so you can';t watch the games on your computer, but I had a trick up my sleeve.  Continue Reading

• How you can "buy" back your users' admin rights for $399

  One of the goals of many desktop admins is to get control of users' Windows desktops. Doing so means that your desktop environment will be cheaper, easier to manage, and more secure.  Continue Reading

• Nuclear war won’t break out if your consumerization efforts fail, but they’re still important

  "Cyberdefence should be about protecting data, not controlling access."  Continue Reading

• Mobile data security isn't a new problem, so why do we think we can solve it now?

  With all the mobile data solutions out there these days, it's easy to get caught up in the perceived security nightmare that accompanies all your users running around with all sorts of data on their phones and tablets.  Continue Reading

• Cloud and mobile and big data, oh my! The real reason these technologies are so disruptive

  Cloud. Mobile. Big data. IT sure is changing a lot these days, isn't it? Well, yes and no.  Continue Reading

• Mobile technologies from the RSA Conference 2012 expo

  The 2012 RSA Conference was in San Francisco this week, while security isn't really our main focus here, there were a lot of relevant sessions and vendors at the show.  Continue Reading