Securing Citrix Workspace Solutions

Learn to secure your virtualization deployments with this two-day course that covers XenApp and XenDesktop. You’ll learn how to secure XenApp and XenDesktop traffic, gaining an understanding of when and where to secure traffic between XenApp and XenDesktop components and advanced authentication implementations covering multifactor authentication, Smart Card, SAML, and FAS. Additionally, you’ll explore, how to protect your applications against vulnerabilities, Citrix Cloud security leading practices as well as operating system hardening, hypervisor security, and monitoring and operations Citrix recommended practices.

This course covers XenApp and XenDesktop 7.13

Students who are looking to understand how to secure Citrix Networking and Mobility solutions should consider the 5 day CTX-270 course which combines this course with CTX-271.

Objectives

After completing this course you should be able to:

• Learn how to secure Citrix traffic between components
• Understand Citrix authentication and authorization workflows with multifactor authentication
• Identify methods for desktop and application hardening with registry and policy lockdowns
• Learn to optimize monitoring and operations with Citrix leading security practices

Target Audience

IT Professionals interested in learning how to secure a Citrix XenApp and XenDesktop deploymnet.

Prerequisites

Attendees should meet the following prerequisites:

• Have a basic understanding, and hands-on experience with installing and configuring XenApp and XenDesktop
• Attendance or experience equivalent to CXD-210 XenApp and XenDesktop 7.1x Administration and CXD-250 Moving to XenApp and XenDesktop Service on Citrix Cloud is recommended.

Testing and Certification

Recommended as preparation for the following exams:

• There are no exams currently aligned to this course

Content

Module 1: Securing Traffic in a XenApp and XenDesktop Environment

• Secure Network Zones
• NetScaler Gateway
• StoreFront Security
• XML and STA Security
• TLS to VDA Encryption
• Supporting Infrastructure Security
• Citrix Cloud Security

Module 2: Implementing Advanced Authentication Methods for XenApp and XenDesktop

• Windows Based Authentication
• Pass-through Authentication
• Multi-Factor Authentication
• Smart-card Authentication
• Federated Identify
• Citrix Cloud Authentication

Module 3: Improving App and Data Security

• Secure Network Zones
• NetScaler Gateway
• StoreFront Security
• XML and STA Security
• TLS to VDA Encryption
• Supporting Infrastructure Security
• Citrix Cloud Security

Module 4: Implementing XenApp/ XenDesktop Operating System Hardening

• GPOs and Citrix Policies
• Lockdowns and NetScaler SmartControl
• Registry Edits and Third-Party Tools
• Workspace Environment Manager
• Image Management

Module 5: Hypervisor Security

• Delivery Controller to Hypervisor Connection
• Hypervisor Security Leading Practices
• XenServer Security

Module 6: XenMobile NetScaler Integration

• Role Based Access Control
• Logging and Auditing
• Service Account Privileges
• Antivirus