Windows 7 Migration Just Got Easier with MokaFive Suite 3.0

Today, MokaFive hit a significant milestone: the release of MokaFive Suite 3.0.

We began pilots over two years ago with some early adopter customers. Since then, these customers have gone into production – in some cases even increasing the size of their deployment – and now they’re beginning to see real, tangible business benefits from a centrally managed, distributed execution approach to desktop virtualization:

• A Silicon Valley-based international law firm saw its employee satisfaction ratings skyrocket
• A Global investment banking and securities firm whose traveling executives can carry one laptop (either a  Mac or PC) for both work and personal use

I point to these customers because their feedback has been absolutely critical for what we are delivering in version 3.0. This is the next-generation evolution of our product. We have made it Windows 7 ready, truly integrated into the enterprise with more policy controls and security features, and we hope to get more leverage from a market perspective with a multi-tenant managed services model.

Full Windows 7 support.

In my recent blog about the costs of Windows 7 migrations, I argued that this massive IT disruption could be a golden opportunity to future-proof the management architecture. And with 3.0, we’ve given IT leaders just that.

Rather than having to go from one desktop to the next and one office to the next over a 12 to 30 month period to manual upgrade machines, enterprises can implement MokaFive Suite to create a full Windows 7 VM that runs on existing hardware – and still access legacy applications – without waiting for the hardware refresh cycle. This means no additional capital costs to migrate to Windows 7, and companies can refresh hardware on their own timeline.

MokaFive’s Windows 7 support is not just a container. We now have full layering support on Windows 7 both in terms of AD domain join layering, OS layering, user-installed apps, data and settings.  We have changed the architecture of the layering so that it leverages some of the inherent features of Windows 7 much better.

Data center to endpoint security.

In the past, we’ve often talked about our seven layers of security, but for MokaFive Suite 3.0, we upped the ante with security at the device level.

With server hosted desktop virtualization solutions, you can secure the data in the data center, but how do you ensure that the browser accessing the VM is not being screen-scraped at the endpoint? Back in August, we announced a partnership with AVG to solve exactly this security gap; MokaFive Suite 3.0 now takes advantage of this full integration. The solution includes a secure virtual encrypted desktop container that can be deployed to the endpoint and further be secured from key-logging and screen-scraping attacks from the host machine by the AVG security scanning capability. Now virtual desktops can be a secure container that can be accessed by many devices, both corporate and personal.

Desktop management as-a-service.

We’ve been talking to some managed service providers that wanted to be able to leverage MokaFive Suite to deliver desktop management services to multiple organizations and their end-users. It seemed like a great idea, so we created a multi-tenant infrastructure as well as new reporting tools and the ability to delegate management to any tenant.

We see 3.0 valuable to three types of providers:

• Outsourced services firms currently using “brute force” to manage desktops for their clients. Now, with a single platform, they can increase the operational efficiency of their delivery model.
• Service providers and carriers that want to expand their footprint with a client or to add a new revenue stream.
• Hosting companies that have no specific desktop management expertise but want to add more services and move beyond providing just rack space.

These are the three big-ticket items in version 3.0, but we have many, many more features. Check out Brian Madden's latest blog post for more info and video interview.

Purnima Padmanabhan, VP of Products and Marketing



Get ready. Start. Migrate.

We’ve entered the final quarter of 2010, the time when Gartner anticipates most Windows 7 migrations will start in earnest. They’ve done extensive number crunching on the costs of Windows 7 migrations, and many other analysts have further reviewed these findings and prescribed their remedy to ease the pains, if not the costs entirely.

Windows 7 migration is expensive.

No matter how one dresses it up, there’s no hiding the plain truth: IT organizations are being asked to budget an extra 20% to 60% to their costs over the next two years. In addition to the well known costs such as new hardware and Windows 7 licensing, there are many hidden costs with Windows 7 migration.

First, there is the cost of identifying which applications to migrate and when? This is a hard, time-consuming task. Even though Windows 7 is supposed to be backwards compatible, the reality is that many applications still do not work flawlessly.

Second, there is the cost of maintaining both Windows XP and Windows 7 environments for a protracted period, which can be up to two or three years for some organizations based on their migration schedule.
Lastly, there is the cost of migrating personal data. In many work environments, there has been a blurring of the personal and the corporate. Windows 7 migration brings this issue to the forefront, since IT has to decide what and what not to migrate.

There is a silver lining. Windows 7 migration also provides the best opportunity to clean up.

While the list of problems with Windows 7 migration seems endless, a migration project provides IT with the opportunity to upgrade its management architecture, enforce better data usage guidelines, and offer greater user flexibility.

The question becomes, which solution can really solve the problem? Virtualizing the desktop can significantly speed up image deployment. Gartner suggests going with a hosted virtual desktop (HVD or server hosted virtual desktop), but at the same time argues that it is expensive, and what you are saving in migration costs you are adding in capital costs.

The alternative approach (MokaFive’s approach) is to virtualize the desktop, but instead of putting it on a server, you send it back down to the endpoint for local execution, thereby eliminating the datacenter requirement. With this approach, you have no additional capital costs. You simply take your existing machines and deploy a Windows 7 virtual machine environment to them. Your users now have Windows 7 environment without having to wait for your hardware refresh cycle. The best part is that the users can still use the Windows XP on their host machine to access legacy applications.

Refresh hardware on your own timeline: Traditionally, with Windows 7, customers are left with the hard choice of either forklift-upgrading their machines or refreshing their hardware. Instead of trying to speed up the refresh, you can use MokaFive to deploy a Windows 7 LivePC on top of your existing machines until they need a hardware refresh. Even if your refresh cycle extends beyond 2014, you will be fine, since your users can be provisioned with a Windows 7 environment on their existing Windows XP machines. Then when the refresh happens on a true Windows 7 base platform, the Windows 7 LivePC can be moved in minutes.

Provide users with platform choice: With virtual desktops, you can now implement programs such as BYOC or offer employees the choice to bring in the much-desired Mac. You can leverage the migration project to get out of the device management business. Let users bring a device, and you manage the secure corporate virtual image on top of the device. Best part, unlike HVD, users are free to work online or offline.
Separate work and personal: Windows 7 migration gives the ideal opportunity to start enforcing best practices around user data. With a virtual desktop approach, users can move their personal data to the host machine, allowing you to lock down the virtual desktop.

Future-proof yourself: In IT, change often means cost and pain. But a hugely disruptive change like Windows 7 is also a golden opportunity to implement a 'future-proof' management architecture. Even if you muscle through a Windows 7 migration by 2014, what happens with the next big upgrade? By upgrading your management infrastructure to a client based virtual desktop solution, you can not only ease the next upgrade cycle but also get huge TCO benefits while at the same providing more choice to your users.

Purnima Padmanabhan, VP of Products & Marketing

MokaFive, AVG push the secure corporate perimeter to personal devices

Last week, we announced a joint solution with AVG to add one more layer of security to MokaFive which allows distributed virtual desktops to be quickly deployed to and safely run from any machine - corporate or personal. This solution extends MokaFive’s capability of running encrypted virtual desktop containers on the endpoint by further securing them from key-logging and screen-scraping attacks from the host machine with the AVG security scanning capability.

While there are a number of drivers for this integration, the key driver is securing the increasing number of personal devices that are constantly accessing sensitive corporate data. Whether organizations like it or not, they have to support ubiquitous access to stay relevant. Current solutions fall seriously short. Let’s start with VPN. Trying to secure access from personal devices using VPN is futile, since all it does is punch a hole from a dirty container into a clean datacenter. Next let’s look at server based desktops (VDI) and apps or terminal services. In each of these solutions, the data is sitting in a nicely protected container in the datacenter. For added security, let’s assume that there are military guards outside the datacenter. If all this secure data is ultimately being accessed by a browser from a dirty personal machine, then it can be screen scraped. Might as well toss out all the protection. The third approach is to distribute bootable USBs or CDs with a browser. This approach is secure, but cumbersome for the user, and more importantly, the image cannot be managed or updated.

As I have mentioned before, security cannot be talked about in absolutes. But if a company wants to enable access of corporate data from personal machines,; the best solution seems to be to have a secure, managed container provisioned to the personal machine. This is exactly what we are doing with the combined AVG – MokaFive solution. The corporate environment is captured and encapsulated in a virtual desktop (called LivePC in MokaFive parlance) which is then deployed to the personal endpoint. The encapsulation has built-in AV scanning that provides continuous protection from keyloggers and screenscrapers that might be present on the host machine. The scanning is running continuously during VM operation to ensure constant protection. All access to the corporate data is made available only through the VM container. Now, the user has the flexibility to use both corporate and personal environments on their machine, and the corporation has complete assurance that all the data is secured.

With this solution, enterprises can now finally extend the secure corporate perimeter to personal machines. Check out the press release.

Purnima Padmanabhan, VP of Products & Marketing

Cloud and the Evolution of Client Computing

The headline of Mark Bowker’s article in Network World recently caught my attention: “Will Cloud Lead to the Failure of VDI?”

No equivocations on my part; the answer is a resounding yes. Today, there are multiple deployment models, but fast forward to three to five years from now, when cloud computing becomes much more mature, and we will see only two models survive. And neither will be VDI (Virtual Desktop Infrastructure).

But let’s back up and look at what we have today.

First, there are thick client applications, such as Microsoft Office – rich applications locally executed on a desktop OS to give users a fast, seamless experience. This type of application is not going anywhere and will be around for a long time because it offers a high level of dynamic activity that cannot be rendered for a Web-only interface.

Over the last few years, a new class of applications has emerged that run in the cloud – for example Google apps or Salesforce.com. These apps are fundamentally built for the cloud and built to run on browsers from any computer or mobile device. These aren’t applications built to run locally which are just thrown into the cloud. Google is leading the charge here, with Google Chrome increasingly becoming an operating system itself. IN the near future, these apps will co-exist with thick client apps and end-users will require environments that support both models.

Somewhere in between is the third model today: VDI.

Though its proponents may say otherwise, VDI is not a true cloud-based solution. The apps were not built to run on the Web; they require rich local execution. What VDI does, in the simplest sense, is allow IT managers to put a rich local execution environment on a server and deploy it as a “cloud app,” albeit a crippled one at that. It offers none of the performance and offline use you get with a rich app nor the simplicity of a Web app. At best, VDI is a stopgap solution; it exists because most enterprise apps were not built for the Web.

In five years’ time when apps that need to run in the cloud are in fact purpose-built for the cloud, you can bet that VDI will become obsolete. In the end, we will have only two main types of applications: Rich, locally run applications for end use points and a rich set of applications built for cloud computing. Rich local execution apps will persist because computing will not be 100 percent online (yet) due to connectivity and performance. Some apps, such as PowerPoint (however much you love it or hate it), requires rich interaction, and therefore is best fit as a local, OS-based desktop application.

Interestingly, the motivation for VDI was always about central control. If VDI, as a management layer, is out of the picture, then how do you ‘control’ and centrally manage these two types of apps? We believe for rich endpoints client-side virtualization is the way to go – allowing central management of the desktop while enabling rich interactions and offline use. For the apps in the cloud – existing datacenter management tools solve the problem.

What do you think? What will a mature cloud computing environment mean for VDI?

Purnima Padmanabhan, VP of Products and Marketing

To centralize, or not to centralize

You wouldn't do this with eggs. Why would you do it with your company's desktops?

Desktop virtualization holds great promise to dramatically reduce IT support costs, while allowing end users unprecedented access and flexibility. There are now dozens of offerings to choose from. But beware – your approach matters. A lot.

Picture the last time your PC crashed. Now imagine it happening to everyone in your company. All at the same time.

It makes complete sense to centralize certain aspects of desktop management. Access and policy control, reporting and image updating, definitely. And certain compute-intensive applications. But it makes little sense to centralize execution.

Desktop execution should (almost) always be decentralized.

A decentralized system is inherently more resilient than a centralized one. No single incident can bring down the productivity of the whole. This has been a truism in computer science, and it’s proven itself in many other systems, not least of which is the Internet itself. On the Internet, no single router or gateway failure can bring down the connectivity of all the endpoints. Instead, in the case of a failure, packets are rerouted around the downed node and transmissions successfully proceed.

Similarly in a decentralized desktop environment, a single PC failure, or even the failure of the management server itself, does not stop the productivity of the whole. Sure, a single user may be inconvenienced (and we all know that certain users are more important than others :) ), but there is no chance that the entire system can come down. When we say “no chance," we don’t actually mean “low probability,” or “five 9s,” etc. With decentralization, there is *no* chance of systemic failure. Nada.

Moreover, a decentralized desktop system is usually lower cost because consumer CPU and storage is much cheaper in aggregate than the equivalent resources in the datacenter. And decentralized execution provides the best user experience, since the user can be online or offline, does not have to worry about bandwidth, and local CPU provides better performance than a centralized remote one.

Now, certain narrow use cases do warrant centralization. But the vast majority of desktops should remain decentralized.

Something to chew on

Even with 14 years of experience and a bazillion dollars, Google’s search services went down last May. What’s the likelihood that your VDI will fare better?





Caveat VDI

Your existing physical desktop environment is already an inherently resilient system. Your company (and your career) can easily survive the occasional user hard drive crash or network issue. But now you’re thinking about scrapping that beautiful architecture, and replacing it at enormous upfront and ongoing costs with an inherently more fragile and risky one. There may be a legitimate cost-risk-benefit reason for you to do this – just be sure you’ve done the analysis.

A better way

Distributed Virtual Desktops (DVDs), a term coined by IDC, represent the low cost, highly flexible world of the New Desktop (capitalization intended). In this model, like your physical desktop solution, DVDs are controlled centrally, so access control, policies, reporting and image management happen efficiently by a single team. But desktops are virtualized so the same golden image can run on any platform, and any hardware configuration. This makes it better than your current physical desktop solution.

And, in stark contrast to VDI, DVDs execute in a decentralized fashion. This means that issues (and we all know issues can happen) are isolated to a single user. As with VDI, there are multiple offerings in the DVD space—MokaFive is one. At MokaFive, the tenet of decentralized execution has been imbued from the very beginning and throughout every aspect of our product design. We believe it’s the only way to go.

Burt Toma, Director of Products

Can a platform vendor be an effective management vendor?

Today we announced a preview of MokaFive’s new VirtualBox client for desktop management. With the addition of an open-source hypervisor, we are fulfilling our vision to be truly both OS-agnostic, as well as hypervisor-agnostic, giving our customers freedom of choice. This is only our first step, and we will continue to add support for more hypervisors, including broadening our current Linux-based baremetal to address Type-1.

This made me wonder: Can an OS or hypervisor platform vendor also be an effective management vendor? In other words, is it in the customer’s best interest to buy a management solution from the same company that supplies its operating system or its hypervisor? It seems to me that it’s impossible to meet your customers’ management needs when your company is tied to one platform. If you’re Microsoft, you’re going to sell a management solution that supports Windows. But what if, down the road, the customer wants to deploy a few Macs on the network? The customer will be out of luck because they are locked in to the Microsoft ecosystem.

As enterprises undergo transformation with more remote, mobile and contract workers, different platforms will have to be deployed or managed based on specific situations. IT needs to have a management solution that is not tied to one platform and is truly future proof. We’re already helping our customers to expand choice in operating systems and in hardware. Today we’re expanding choice in hypervisors. We’ve added our first free hypervisor for Macs—the open-source VirtualBox client—in addition to the VMware Fusion we have long used.

Choice has always been an important factor for our customers, who need the freedom to purchase the IT solutions best tailored for their business, regardless of which solutions they already have in place. It all needs to work together seamlessly. Increasingly, Macs are being used in the enterprise and, with the right tools, they can be managed easily alongside PCs. I believe this is where end-user computing is going, and as such, what IT needs to factor in for their decision-making.

Purnima Padmanabhan, VP of Products

Learnings from our CIO Summit

Last month, we hosted our first quarterly CIO summit session that was attended by several CIOs representing some of the largest organizations in the US. The goal of this session was to investigate the priorities and the associated drivers for end-user computing within these large organizations. Over the course of a terrific power packed discussion, several themes emerged - one of which struck us as very distinctive.

We were expecting the usual themes around cost and control to emerge when, right at the beginning, one of the CIOs of a leading services firm said, “Look, it is not about control. IT doesn’t want to control; we just want to deliver enterprise value at the lowest possible cost, ensuring that every user is productive.” Quite a profound statement. Which brings us to the question, “Why are IT conversations always peppered with the word control?”

Upon further discussion, the answer became clear. The CIOs want to enable user productivity at the lowest cost and risk to the business. In the past, the only way to achieve a reliable, secure desktop was through lockdown and control. But over the years in many organizations, “control” has become the primary objective which, in turn, has lead to myopic decision making.

A number of influences seem to be changing this trend. One reason is that IT is required to support new business initiatives, which cannot be supported using traditional models. As the CIO for a large healthcare firm put it, “I have to enable new work models including teleworking and outsourcing. We hire talent where we get it and do not worry whether it is in the corporate location or not. These users need a secure, reliable working environment at their home, on the go, right at their fingertips at all times.” Second, there are finally a number of solutions now that can enable an IT organization to provide user flexibility without additional cost or risk penalty, so you don’t need to control and lockdown the user. In fact, client- based virtual desktop management solutions like MokaFive can significantly drive the cost and the risks down by enabling single image management across corporate and employee owned assets. (More elaboration in subsequent blog posts).

Another alternative that is commonly considered is VDI. Almost all the CIOs had investigated or were investigating VDI. But they found VDI to be too expensive, too complex, and most importantly, too restrictive for their users. This seems to be a growing sentiment and is reflected well in this article by Randy Eckel . We will explore more of the CIO comments and feedback in upcoming blogs.

Purnima Padmanabhan, VP of Products and Marketing

MokaFive, a green technology?

Yesterday we announced our new round of funding lead by NGEN Partners with contributions from existing investors Khosla Ventures and Highland Capital Partners, MokaFive Raises $21 Million in Venture Capital Funding. Over the past year, we have built a great enterprise-class product that is now deployed within large F1000 companies. With our product now proven in production, this funding allows us to rapidly scale our business and deploy new customers.

Why did a clean technology VC firm like NGEN Partners invest?

Like all successful venture capital firms, first and foremost they seek to invest in companies with a sound business model and huge market potential. Secondly, they look for opportunities to advance the mission and benefits of clean and green environments. You may ask yourself: how is a desktop management (virtualization) company like MokaFive “green”?

It’s very simple. Compared to VDI, or server-based computing, MokaFive's distributed virtual desktop solution offers a 90% reduction in number of servers needed –that is 90% less power, less space, less cooling and less bandwidth. In addition, the model provides *all* the benefits that accrue from a centralized management model. Also, the MokaFive model is a perfect solution to enable green initiatives, such as work from home. You can now simply provide employees with a secure, encapsulated virtual image that can run either on their machine at home or at work (bye-bye to worries about VPN on unknown, unsecured machines, access to terminals over low bandwidth, etc.). Telecommuting avoids not only the fuel used by commuters, but also the overhead energy costs needed to maintain a workplace.

Now, let’s talk about the market potential. End-user computing is being transformed by a huge variety of new devices and increasing numbers of mobile users. This change has marched right into the enterprises. As a result, managing computers with the necessary security and flexibility has become enormously expensive. MokaFive’s revolutionary approach allows you to cut traditional desktop management costs by as much as 50%. Our management solution enables you to maintain a single virtual image across any device and any user (e.g., employee, contractor, or teleworker). The virtual image is deployed to the endpoint so it eliminates the huge outlay in servers that VDI requires. The market potential to deliver a new, more effective model to update and maintain secure corporate environments across disparate, dispersed device and user types.

We are very excited to have NGEN on board, and we look forward to accelerating our business this year.

Purnima Padmanahban, VP of Products