Citrix NetScaleras part of a TMG replacement

alex.dingemanse@citrix.com06 – 3877 2139

© 2015 Citrix

TMG cannot be replaced by a single product

• Ciscoᵒ Forward Proxyᵒ URL filteringᵒ IPSᵒ Malware scanningᵒ Firewall

• Citrix NetScalerᵒ Reverse Proxyᵒ Loadbalancingᵒ SSL Offloadingᵒ Web traffic compressionᵒ Web traffic caching

© 2015 Citrix

Infrastructure & ServicesMobile Workspace

1010SSL101SSL App

Stor

e

Windows Desktops

Windows & Mobile Apps

Data Sync & Sharing

Collaboration & Support

Networking & Cloud Infrastructure

Apps Data

Collaboration

Personal

Desktops

© 2015 Citrix

Services AnywhereWork Anywhere

1010SSL101SSL

Create | Collaborate | Share Build | Deliver | Scale

© 2015 Citrix

Cloud Infrastructure

Enterprise Datacenter

Performance Offload SecurityAvailability

Citrix NetScaler OverviewMaking Applications Run 5x Better

• World-class load balancing

• Health monitoring

• Caching

• Compression

• Optimization

• TCP Connection Management

• SSL processing

• SSL VPN

• Application firewall

© 2015 Citrix

WEB and HDX Insight NetScaler Insight Center

Internal User Authentication + 2FA(LDAP / RADIUS / SAML)

External User Authentication(SAML)

NetScaler HA Pair

Web front-ends

Citrix Products

Microsoft Products

Other Products

Application

Citrix Products

Microsoft Products

Other Products

Database

MS SQL

Oracle MySQL

Oracle ?

NetScaler Cluster

NetScaler Traffic Domain

CloudBridgeConnector

© 2015 Citrix

• Hardware• Web app delivery• High power SSL• Powers the web

• Virtual appliance• Runs on XenServer,

Hyper-v and ESX• Fast, inexpensive and

flexible

Product Lines: MPX & VPX & SDX

NetScaler

MPX

NetScaler

VPX

• Separate NetScaler Instances

• Direct and dedicated hardware access

• Network Isolation• Up to 80 instances

MPX: Price-Performance VPX: Run Anywhere SDX: Multi-ServiceSDX: Multi-TenantHurksestraat 29-51, EindhovenHurksestraat 29-51, Eindhoven

© 2015 Citrix

TriScaleScale up with

Pay-As-You-Grow

Scale out with TriScale Clustering

Scale in with ADC Consolidation

© 2015 Citrix

50 Gbps

25 Gbps

10 Gbps

1 20 40

Net

Scal

er P

erfo

rman

ceNetScaler Platform Evolution

Maximum Tenants per Platform

5 GbpsVPX10Mbps –

3Gbps

MPX/SDX11515-11542

15 – 42Gbps 22.5k – 69.5k SSL TPS

20 Instances

MPX 5550-5650500Mbps – 5Gbps

Pay

Gro

w

All platforms can be license upgraded

across their supported ranges.

MPX/SDX8005-8015

5 – 15Gbps6.5k – 11k SSL TPS

5 instances

MPX/SDX22040 – 22120

40 – 150Gbps120k – 560k SSL TPS

80 instances

120 Gbps

805

120 Gbps

© 2015 Citrix

Web application delivery solution providing advanced traffic

management and powerful application acceleration

Web application delivery solution designed to deliver mission-critical applications with web application

firewall security, fastest performance, and lowest cost

Comprehensive L4-7 load balancing and optimizes expensive server and network

resources to reduce cost

NetScaler OfferingsPackaged for broad adoption for all users

Standard Edition

EnterpriseEdition

PlatinumEdition

© 2015 Citrix

Virtualization and Multi-Tenancy

• NetScaler VPX is a fully featured NetScaler running on general purpose hypervisor environments

• NetScaler SDX creates instances on a purpose build networking virtualization platform allowing for:ᵒ Independent, fully featured NetScalersᵒ Dedicated or shared resources, allowing for network isolationᵒ Independent versions, management, IP addresses, etc.

• NetScaler supports Traffic Domains on top of VPX, MPX and SDXᵒ Create segmentation within a single NetScaler, sharing the general platform,

manageability and ᵒ Isolation of traffic, allows for overlapping IP address schemesᵒ Limited feature support

© 2015 Citrix

Availability for NetScaler

• HA Pairᵒ Active Passive configuration, simple setup, guaranteed performance on node failureᵒ HA pair on 1 site, or stretched over 2 sites (layer 2 required)

• Clusteringᵒ Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active,

Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active, Active (32 x) nodes in 1 cluster.

ᵒ Cluster nodes must be on same site, selected features availableᵒ Scale Out model, add nodes for availability and performance!

• Global Server Load Balancingᵒ Active active. Supports stand alone sites or within DCᵒ Prevents against logical device, link or datacentre failure

© 2015 Citrix

WEB and HDX Insight NetScaler Insight Center

Internal User Authentication + 2FA(LDAP / RADIUS / SAML)

External User Authentication(SAML)

NetScaler HA Pair

Web front-ends

Citrix Products

Microsoft Products

Other Products

Application

Citrix Products

Microsoft Products

Other Products

Database

MS SQL

Oracle MySQL

Oracle ?

NetScaler Cluster

NetScaler Traffic Domain

CloudBridgeConnector

© 2015 Citrix

Call to action

• Download TMG whitepaperᵒ https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/netscale

r-a-comprehensive-replacement-for-microsoft-forefront-threat-management-gateway.pdf

• Subscribe to the NetScaler newsletterᵒ http://deliver.citrix.com/networking-newsletter.html

• Join monthly online NetScaler Masterclassᵒ http://www.citrix.com/events/netscaler-master-class.html

• Read Citrix blogsᵒ http://blogs.citrix.com/

© 2015 Citrix

Questions