Wednesday, February 16, 2011

RSA Conference 2011: BYOC and Security

I presented a session on BYOC and Security at RSA Conference 2011 today. Judging from the turnout (the room was packed), there is a lot of interest in this topic right now as companies are struggling with how to deal with employee-owned devices. When I asked how many people worked at companies that have official BYO programs, only a few people raised their hands. But when I asked how many people use a personal device for work, almost everyone's hand shot up. Too many IT departments either try to restrict access from personal devices, in which case employees work around the restrictions so they can get their work done, or the IT departments put their blinders on and pretend the problem doesn't exist. They would be much better off to actually embrace BYO and make it easy for users to "do the right thing".

Companies stand to save a lot by adopting BYOC programs because they can get out of the business of owning and managing people's desktops and laptops. Support costs are actually lower with BYOC than with corporate-owned devices. Not only that, but BYO actually leads to happier and more productive users. One of our law firm customers had their employee satisfaction national ranking jump from 95th place to 16th place in one year, and the only change they made was to deploy MokaFive and allow their employees to choose Macs. Employees who participate in BYO programs also work longer hours, are more likely to work from home and in the evenings, and are less likely to lose or break their laptop.

Once companies realize their employees are already using their own devices anyway, and it is not that difficult to provide the corporate environment in a managed VM in a secure way while still letting employees and contractors use their own machines, they will start adopting official BYOC programs. Don't get me wrong - there are lot of challenges to setting up a successful BYOC program. But the organizations that embrace this change rather than resist or ignore it will be better off, with lower costs and happier, more productive employees.

Update: The slides for my RSA 2011 BYOC talk are now available online.

Wednesday, January 5, 2011

Desktop Virtualization Savings: It's in the Approach

One of the things we keep hearing from prospects about desktop virtualization is cost. In fact, in a meeting with our CIO Council this spring, the CIO of a major Wall Street bank said this firm’s investments in a virtual desktop infrastructure (VDI) solution had so ballooned out of proportion and the experience had been so painful that it’s left permanent bad taste in everyone’s mouth. There’s no way, he contends, that he could ever sell “desktop virtualization” to his firm again – management and end users alike.

That point really inspired us to work on a TCO model – so companies know what the costs entail before they commit to a desktop management path. Fundamentally, desktop virtualization is about easier desktop management and cost savings the icing on the cake.

In our TCO calculations, we show how MokaFive can dramatically cut desktop TCO by at least 45% by delivering savings in three areas:

1. Operational costs;
2. Helpdesk costs; and
3. Capital costs.

Operational Savings. MokaFive’s management model -- central management and distributed execution – is unique in the market, and critical to lowering overall TCO. The IT administrator creates one golden image, called the LivePC, which is sent down to thousands of users. To patch or update OS or applications, IT updates the single golden image in a central location, and automatically the changes are distributed to users’ machines. Contrast that to traditional software distribution, which requires every endpoint to be individually patched which can result in errors, complications and costs. (It’s no wonder companies are dreading the Windows 7 migration – and I am not at all surprised by the costs.)

Helpdesk Savings. MokaFive also delivers savings in helpdesk costs. Typically the most expensive calls occur when a user corrupts their machine with a virus. With MokaFive’s rejuvenate capability, a corrupted desktop can be “rejuvenated” back to its pristine state with all personal data intact – all with just a click of a button. The user doesn’t have to even make a helpdesk call or be online. The CIO of one of our earliest customers – a major law firm in Silicon Valley – recently raved to me about the unexpected savings in their helpdesk costs. They hadn’t even calculated it into their models (nor we, for that matter), but we now expect them to have paid for their initial investment in the next year.

If not for MokaFive, this customer’s helpdesk would be fielding level two and level three calls when a user corrupts their machine with a virus. This specific case calls for a desktop re-image, which can be a very cumbersome process taking hours, if not days to complete. When you re-image the machine, IT needs to supply a new OS, restore all the applications, and then re-apply all the user data.

We estimate steady state this is going to be true whether it’s a VDI instance or with software distribution because even in a VDI scenario the user has to make a helpdesk call and the administrator has engage and to revoke the VM and put the data back on.

Capital Savings. With MokaFive, enterprises have the option to implement BYOC (bring your own computer) programs for employees and contractors. Cisco and Dell made headlines last year when they initiated BYOC programs giving their employees a stipend to purchase their own computer. Both used virtualization to deliver company approved applications, but their approaches had significant limitations. In Dell's case, the only real choices was, well, Dell machines. Cisco at least allowed more latitude, so employees could purchase Macs, but "they are pretty much on their own for tech support." With these traditional desktop management models, and even with VDI, BYOC hits a snag due to online-offline access issues.

With MokaFive, IT deploys and manages the virtualized corporate environment on employee-chosen machines (Mac or a PC, online or offline) using MokaFive and benefit from the central management and distributed model I discussed above.

Going Green. There is one final area of savings I'd like to highlight -- though it may not necessarily be considered by CIOs when making a decision on desktop virtualization: the environmental impact. With MokaFive's approach, companies can use existing equipment; existing personal devices and existing corporate devices. In the case of contractors, companies are no longer buying assets, nor are they provisioning servers to the datacenter. All these add up to a reduction in new power-hungry equipment. MokaFive’s approach give you almost status-quo type of energy in the case of most work from home and contractor scenarios – and is even more effective than what we have today. I go into a lot more detail on this in an earlier post.

For our customers, the savings in all these areas have been very real. But the fact remains that desktop virtualization has over-promised and under-delivered for many years -- to the detriment of all of us. Just because two (with a third making very fast progress) very large vendors dominate virtualization, it doesn't mean innovation has ceased. It's still happening, and MokaFive is proof of it, 20+ patents and still coming.

We've really put a lot of thought into all the costs associated with managing desktops. Our customers have weighed in and helped us create a TCO model that factors in these four areas. We invite you to sign up for a personalized TCO for your environment.



Purnima Padmanabhan, VP of Products and Marketing

Wednesday, December 8, 2010

Windows 7 Migration Just Got Easier with MokaFive Suite 3.0

Today, MokaFive hit a significant milestone: the release of MokaFive Suite 3.0.

We began pilots over two years ago with some early adopter customers. Since then, these customers have gone into production – in some cases even increasing the size of their deployment – and now they’re beginning to see real, tangible business benefits from a centrally managed, distributed execution approach to desktop virtualization:
  • A Silicon Valley-based international law firm saw its employee satisfaction ratings skyrocket
  • A Global investment banking and securities firm whose traveling executives can carry one laptop (either a  Mac or PC) for both work and personal use
I point to these customers because their feedback has been absolutely critical for what we are delivering in version 3.0. This is the next-generation evolution of our product. We have made it Windows 7 ready, truly integrated into the enterprise with more policy controls and security features, and we hope to get more leverage from a market perspective with a multi-tenant managed services model.

Full Windows 7 support.

In my recent blog about the costs of Windows 7 migrations, I argued that this massive IT disruption could be a golden opportunity to future-proof the management architecture. And with 3.0, we’ve given IT leaders just that.

Rather than having to go from one desktop to the next and one office to the next over a 12 to 30 month period to manual upgrade machines, enterprises can implement MokaFive Suite to create a full Windows 7 VM that runs on existing hardware – and still access legacy applications – without waiting for the hardware refresh cycle. This means no additional capital costs to migrate to Windows 7, and companies can refresh hardware on their own timeline.

MokaFive’s Windows 7 support is not just a container. We now have full layering support on Windows 7 both in terms of AD domain join layering, OS layering, user-installed apps, data and settings.  We have changed the architecture of the layering so that it leverages some of the inherent features of Windows 7 much better.

Data center to endpoint security.

In the past, we’ve often talked about our seven layers of security, but for MokaFive Suite 3.0, we upped the ante with security at the device level.

With server hosted desktop virtualization solutions, you can secure the data in the data center, but how do you ensure that the browser accessing the VM is not being screen-scraped at the endpoint? Back in August, we announced a partnership with AVG to solve exactly this security gap; MokaFive Suite 3.0 now takes advantage of this full integration. The solution includes a secure virtual encrypted desktop container that can be deployed to the endpoint and further be secured from key-logging and screen-scraping attacks from the host machine by the AVG security scanning capability. Now virtual desktops can be a secure container that can be accessed by many devices, both corporate and personal.

Desktop management as-a-service.

We’ve been talking to some managed service providers that wanted to be able to leverage MokaFive Suite to deliver desktop management services to multiple organizations and their end-users. It seemed like a great idea, so we created a multi-tenant infrastructure as well as new reporting tools and the ability to delegate management to any tenant.

We see 3.0 valuable to three types of providers:
  • Outsourced services firms currently using “brute force” to manage desktops for their clients. Now, with a single platform, they can increase the operational efficiency of their delivery model.
  • Service providers and carriers that want to expand their footprint with a client or to add a new revenue stream.
  • Hosting companies that have no specific desktop management expertise but want to add more services and move beyond providing just rack space.
These are the three big-ticket items in version 3.0, but we have many, many more features. Check out Brian Madden's latest blog post for more info and video interview.



Purnima Padmanabhan, VP of Products and Marketing