How to Configure Amazon WorkSpaces Multi-Region Resilience with Liquidware ProfileUnity and PeerGFS

In 2022 AWS announced Amazon WorkSpaces Multi-Region Resilience offering a cost-effective, easy to manage solution to keep your users online and productive using standby WorkSpaces in another AWS Region during disruptive events. In this blog we will expand on this solution by utilizing Liquidware ProfileUnity and Peer Global File Service (“PeerGFS”) to replicate a user’s profile and data to the standby WorkSpaces offering a true business continuity and disaster recovery solution ensuring your end users remain productive during disruptive events.

Overview of the solution

The following figure illustrates the solution. Liquidware ProfileUnity is utilized as the profile management portion while PeerGFS is utilized to synchronize files between the FSx for NetApp ONTAP instances.  


Prerequisites

Note: Using FSx for NetApp ONTAP is not a requirement for this solution but it is recommended as FSx for NetApp ONTAP is a managed service with multi-az capability. Individual Windows-based file servers can be utilized if desired.

Setup

Step 1: Configure Amazon FSx for NetApp ONTAP

Note: If not using FSx for NetApp ONTAP, you may skip this section.

  • Follow the prerequisite guide from the Peer Knowledge Base to configure your FSx for NetApp ONTAP instances for PeerGFS

Step 2: Deploy Liquidware ProfileUnity

ProfileUnity delivers User Environment Management for virtual desktop deployments such as AWS Workspace and AppStream 2.0. ProfileUnity decouples user profiles, settings, and data from the workspace. ProfileUnity separately stores and dynamically applies user profiles, configurations, and data to a Windows OS at login.

  1. Deploy the ProfileUnity Management Console from the AWS Marketplace. Alternatively, you can provision an EC2 instance manually and install ProfileUnity manually.  Profile Unity software can be found here. And you can reference the ProfileUnity installation and configuration guide located here
     
     
     
     
  2. Log in to the ProfileUnity management console and create a new configuration by either using the guided or manual configuration options.


  3. Once created, edit the configuration by clicking on the newly created configuration.
  4. Open the portability settings and determine which of the auto-provisioned settings you wish to implement. You can disable any settings you do not wish to capture. Ensure Save and Restore are selected.


  5. Open the folder redirection section and determine which shell folders you would like to redirect.


  6. Configure any additional ProfileUnity settings that are pertinent to your organization’s requirements. 
  7. When completed, select Update.
  8. Deploy your configuration to your ProfileUnity deployment path. 

Configuration rules will be applied next time users login on their workspace. If you need assistance in configuring Liquidware ProfileUnity ™, contact your sales team or sales@liquidware.com.

Step 3: Deploy PeerGFS management server and agents

The PeerGFS solution consists of a Peer management console and Peer agents for each region where WorkSpaces are deployed. The agents are typically installed on EC2 instances (t3.xlarge recommended) and facilitate the replication jobs between the FSx for NetApp ONTAP instances.

  1. Deploy the PeerGFS management console from the AWS Marketplace
  2. Deploy an EC2 instance in each region where WorkSpaces are deployed. Install the Peer agent on each of the deployed EC2 instances. 

Note: When installing the Peer agent, you will be prompted to run the Peer service as a domain user. This is the same user that is specified in Step 7 of the Amazon FSx for NetApp ONTAP Prerequisites guide.

Once the agents are installed, log into the Peer management server and verify the agents are visible in the console.


Step 4: Connect agents to FSx for NetApp ONTAP

Each agent needs to be registered to an FSx for NetApp ONTAP file system. The following steps outline that process:

  1. From the Peer management console, open the preference menu and navigate to NAS Configuration / Amazon FSxN Configuration and select Create.
  2. Select the server hosting the primary Peer Agent. Provide the connection information for the FSx for NetApp ONTAP svm and select Validate.
  3. Repeat steps 1 & 2 to add the second Peer Agent for replication.

Step 5: Create a File Replication job

In this example, we’ll configure a File Replication job which enables one-way replication to a specified target. The target can be any addressable UNC path. Use File Replication jobs when you want to guarantee that no writes that occur on the target can be synced back to the source. In this design, only the source will be “active”.

When “active-active” (read/write everywhere) is desired where we want multiple instances to serve files to users and writes from any location can be synced to all other locations, use a File Synchronization job which enables omni-directional synchronization. Unlike File Replication, you must use one of our supported platforms for all targets.

  1. From the Peer management console, create a new File Replication job. 
  2. Select the Peer agent from the primary FSx for NetApp ONTAP svm as your source, NetApp ONTAP for your storage platform, and select the credentials you provided in Step 4.
  3. For the Source Path enter the ProfileUnity storage location configured on the FSx for NetApp ONTAP svm.
  4. Select the Peer agent from the secondary FSx for NetApp ONTAP svm as your destination, NetApp ONTAP for your storage platform, and select the credentials you provide in Step 4.
  5. For the Destination Path enter the ProfileUnity storage location configured on the FSx for NetApp ONTAP svm.
  6. Select the following options for the File Metadata section:
    1. Synchronize File Security Information: CHECKED
      1. Enable synchronizing file security information in real time: CHECKED
      2. Enable synchronizing file security information with master host during initial scan: CHECKED
    2. Synchronize Security and ACL Options
      1. Owner: CHECKED
      2. DACL: Discretionary Access Control List: CHECKED
      3. SACL: System Access Control List: CHECKED
    3. Metadata Conflict Resolution
      1. Select master host for initial scan: Select primary Peer agent
  7. Select Finish.

At this point the file replication job will be created but not running. Before starting the job, we need to make a few additional changes.

  1. Right-click on the file replication job and select Edit Job.
  2. Use the following table to adjust the job settings for best practices:
SectionSettingValueDescription
GeneralEnable Multipart TransferscheckedTransfers large files in multi-streamed chunks for optimized file transfer
Delta ReplicationEnabledcheckedSyncs only changed file blocks rather than the whole file
Target ProtectionEnabledDependent on org. preference Retains copies of modified and deleted files for restoration. The default number of versions to keep is 3.

NOTE: This setting can consume large amounts of storage. 
  1. Select OK to save the settings.
  2. Right-click on the job and select Start.


Your file replication job will begin and continuously monitor your file system. Files will be replicated from the primary FSx for NetApp ONTAP file system to the secondary in a single direction. Changes from the secondary file system will not overwrite those on the primary.

If you need assistance in configuring PeerGFS, contact your sales team or sales@peersoftware.com.

Testing

At this point, your deployment should be complete. Begin by logging into your primary WorkSpace, performing some modifications on our operating system, adding files to your documents folder, etc. Log out of your primary WorkSpace and log into your secondary WorkSpace. You should see the operating system changes and files added have replicated to the secondary WorkSpace.

Cleaning Up

  1. Open the EC2 Console in the primary region. Terminate the PeerGFS Management Server, ProfileUnity Management Server, and Peer Agent Server. Repeat this process for the secondary region.
  2. Open the FSxN Management Console. Delete the FSx for NetApp ONTAP volumes, svm, and file system in that order. Repeat this step in the secondary region.

Conclusion

In this post, we expanded on the existing multi-region resiliency offered with Amazon WorkSpaces by replicating an end user’s profile and data to a secondary region.  

An Industry First! Integrated OAuth – Zero Trust Security for any Application via Liquidware FlexApp

FlexApp v6.8.6 recently became generally available and includes yet another industry first –optional integrated OAuth (Open Authorization). Now, virtually any Windows application can easily incorporate OAuth capabilities through FlexApp’s FlexApp One container format to achieve a Zero Trust application access policy.

Industries burdened with compliance, such as federal agencies, healthcare, and financial institutions, are poised to benefit from the new OAuth functionality in FlexApp. This includes organizations deploying Windows workspaces, such as Citrix CVAD and DaaS, VMware Horizon, Amazon Workspaces and AppStream, and Microsoft physical, AVD, Windows 365 desktops.

The new feature in FlexApp promotes a zero-trust framework, even in offline scenarios. By facilitating OAuth, FlexApp ensures that only validated users can access applications, aligning with an organization’s Zero Trust strategy. Even if applications inherently lack OAuth support, FlexApp ensures compliance by preventing deactivated or unauthorized accounts from accessing the applications. FlexApp’s OAuth capabilities are integrated with an organization’s Microsoft Entra ID (formerly Azure AD) instance. Watch a great quick video demo here!

As more organizations implement Zero Trust architecture, OAuth plays a critical role. The traditional “trust but verify” approach is no longer sufficient; instead, the Zero Trust motto of “never trust, always verify” is essential to modern security strategies, especially in virtual application environments. Liquidware FlexApp acknowledges this necessity and actively integrates Zero Trust principles.

OAuth is pivotal in FlexApp’s security, offering detailed, user-specific application entitlements that reinforce the Zero Trust model. This modern security standard ensures that applications are not merely secure but are also used by verified and authorized users. Key OAuth integration in FlexApp supports application security scenarios such as:

  • Entitlement of Apps per User or Group: FlexApp allows precise control over who can access each application, enabling administrators to assign application access at both individual and group levels. This granularity is not just about control but about maintaining a strict ‘least privilege’ approach, vital for Zero Trust.
  • Disabling Access: In a Zero Trust environment, the ability to revoke access is as important as granting it. If a user’s status changes, or if they no longer require access to a specific application, FlexApp enables immediate revocation of access rights, an essential aspect of maintaining a secure environment.
  • Reporting on Usage: Transparency and traceability are pillars of Zero Trust. FlexApp supports detailed reporting, allowing administrators to actively monitor application usage. This insight is critical for assessing security posture, ensuring compliance, and making informed decisions based on user behavior and activity patterns.
  • Validation Against Azure AD Users and Groups: FlexApp integrates with Azure Active Directory (Azure AD), allowing for the validation of user identities and group memberships. This capability ensures that only authenticated and authorized users can access applications, consistent with Zero Trust’s stringent requirements.

FlexApp takes these capabilities further, promoting a zero-trust framework even in offline scenarios. By facilitating OAuth, FlexApp ensures that only validated users can access the applications, aligning with the organization’s Zero Trust strategy. Even if applications inherently lack OAuth support, FlexApp ensures compliance by preventing deactivated or unauthorized accounts from accessing the applications.

The integration of these advanced OAuth functionalities in FlexApp doesn’t only fortify security; it’s fundamental for organizations aiming for a comprehensive Zero Trust strategy. This approach, especially when combined with Citrix, forms a layered defense strategy, reducing vulnerabilities and placing enterprises at the forefront of modern cybersecurity practices.

Embracing a Zero Trust architecture is not a mere enhancement; it’s a necessity in the face of evolving digital threats. Liquidware FlexApp’s alignment with Zero Trust, especially its advanced OAuth features, redefines application security in virtual environments. By trusting FlexApp for application layering and delivery, organizations are not just optimizing application management; they’re investing in a robust security future.

FlexApp One is so easy that you can download and try an app over a cup of coffee! We’ve packaged up a few apps for you to try including, VLC Media Player, Firefox, Slack, PowerBI Desktop, Microsoft Teams, and even 3D Pinball! Just click on this link to get started!

HUGE Innovations now GA in Liquidware FlexApp v6.8.6 – Nothing Compares to FlexApp!

In case you missed it this week, we unveiled FlexApp v6.8.6, a groundbreaking update that redefines application delivery and user experience in today’s hybrid and remote work environments.

Offline FlexApp: Uninterrupted Productivity Anytime, Anywhere

In today’s “work from anywhere” world, network connectivity can be unpredictable, especially for users on the go. With FlexApp Offline, we’ve expanded offline capabilities to traditional FlexApp packages, ensuring users can access their critical applications even when connectivity is limited. This feature is a game-changer for field workers, remote employees, and those operating in areas with unreliable internet access. While attached Windows applications could already go offline with the self-contained “FlexApp One” format, this capability has now been extended to traditional FlexApp packages.

OAuth Support: Fortifying Application Security with Zero Trust

Application security is paramount in today’s threat landscape, and FlexApp v6.8.6 empowers organizations to implement a robust Zero Trust framework. Our new OAuth support seamlessly integrates with Microsoft Entra ID (formerly Azure AD), enabling organizations to enforce granular access controls and secure applications against unauthorized user access. This feature aligns seamlessly with Zero Trust strategies, ensuring that only validated users can access applications, regardless of network connectivity.

FlexApp One Memory Caching: Boosting Performance for Demanding Applications

Large, memory-intensive applications can strain system resources and impact user experience. FlexApp One Memory Caching leverages session memory to boost the performance of these applications, significantly reducing load times and enhancing user productivity. This feature is particularly valuable for organizations that rely on resource-intensive applications in their daily operations.

FlexApp Automated Packaging 1.5 – Further Streamlining Application Packaging at Scale

FlexApp Automated Packaging is the industry’s only fully automated application packaging system, and now it’s even better with version 1.5. This update includes support for FlexApp One packages, enhanced compatibility, auto-optimized capture machines, and continuous packaging capabilities. FlexApp Automated Packaging is ideal for organizations that manage large application portfolios, enabling them to automate the packaging process and ensure that applications are always up to date.

Setting the Standard for Enterprise Efficiency and Performance

FlexApp v6.8.6 delivers an unmatched level of application management, delivery, and user experience optimization. With features like offline FlexApp, OAuth support, FlexApp One memory caching, and FlexApp Automated Packaging 1.5, we’re setting a new standard for enterprise efficiency and performance.

Experience the Future of Digital Workspace Management

Learn more about FlexApp v6.8.6 and how it can transform your digital workspace, visit our website today. FlexApp is the most innovative application delivery solution for Windows and in use by numerous mid-size to very large enterprises today. The solution supports Citrix, Microsoft AVD, Windows 365, VMware Horizon, and any Windows platform, including physical PCs and Laptops. What are you waiting for!? FlexApp One packages are so easy you can try them over a cup of coffee here by downloading a sample app and double-clicking on it!

E2EVC a unique EUC Community Event

E2EVC is now in its 20th year having started in 2003. It is a unique event bringing together independent consultants, customers, partners, vendors, and even competitors. The E2EVC community is the most talented community within the EUC industry.
The latest event took place in Rome from November 3-5. My journey started in Dublin on the afternoon of the November2; the flight was fairly uneventful apart from the last 20 minutes, this was due to the extreme turbulence we encountered.

After a quick taxi ride and after dropping my bags in my room, I joined the pre-event networking event. It was great to be among my peers again and see people whom I’ve not seen since the pandemic.

Day 1

I started the day with a quick review of my slides as I was presenting two sessions – the Liquidware sponsor session and a community session with Gerjon Kunst on the impact of AI on EUC.

I headed down to watch the intro session from Alex Cooper, the founder of E2EVC who, as usual, was dressed to suit the city – he was supposed to be Michael Corleone but looked more like a member of the Peaky Blinders.

Last time I checked E2E has never been in Birmingham!

The morning continued with sponsor sessions, starting with Eugene Kaleyev talking about the latest ControlUp release and how the platform is moving towards a SaaS model. Next up was Chris Marks from Parallels, with some very impressive PowerPoint skills, who walked through the latest Parallels release. After this Helge Klein took us through the latest developments in UberAgent. After Helge was Thomas Poppelgaard, who talked about the latest innovations in GPUs including the latest Nvidia release, Lovelace. Thomas also talked about how GPUs are been utilized for AI, in some the use cases (Midjourney, ChatGPT, Copilot) were mentioned, he also highlighted some of the risks of generative AI – risks such as data privacy, security, IP rights, Biases, and ethical implications. Following Thomas was the session from AWS where Matt Olson and Paolo Maggi talked through how AWS operate a global DaaS infrastructure.

I then took some time to further review my slides and then it was time for my first session!
In my presentation, I briefly showed the 4 solutions from Liquidware – which are ProfileUnity™ that delivers superior full-featured User Environment Management, FlexApp ™ delivers advanced application portability, integrated with UEM and is easy to manage, and Stratusphere™ UX that offers sophisticated digital experience monitoring and diagnostics to support the complete lifecycle of digital workspaces.

As I was limited to 15 mins, I moved on the explain the 4 key innovations of our new SaaS real-time remediation solution, CommandCTRL™.

These 4 key innovations are ChatGPT integration for Process Identification, that allows us to use ChatGPT to determine the name, location and description of a process without the need for a lengthy Google search, giving you the information immediately so you can determine whether the process is valid or rogue . Our DVR playback mode Captures up to 7-days history so admins can see exactly what occurred in the environment at specific dates and times. This is incredibly helpful in the troubleshooting process and dramatically reduces the time to resolution. One of our other key innovations is CommandCTRL Switch which enables administrators to seamlessly switch and navigate between two distinct desktop environments: the local desktop and the cloud-based desktop to identify areas of concern, and diagnose performance-related issues. Finally we have Protocol Mirroring which gives the user the ability to view the metrics for the local endpoint and overlay the display metrics from the cloud desktop on the same screen. This aids the troubleshooting process by providing end-to-end visibility.

I then did a full walk though of CommandCTRL . You can watch a video of my full walk-through here

After lunch, I took some time to prepare for my community session with Gerjon Kunst, which was focused on the impact of AI on EUC.

In our session, we covered the history of AI, it did not just appear in 2023, the origin of AI goes back to the Turing test in the 1950s. Gerjon continued with the big players in this space: Google, OpenAI, Microsoft, Nvidia, Tesla and IBM and where to start with AI (ChatGPT, Midjourney, Dall-E, Business Application Integration and Microsoft-based options). We continued with use cases in VDI: Intelligent Assistance (proactive questions, seamless customer interactions, interactive VR-based training simulations and emotionally intelligent chatbots), predictive intelligence (predictive maintenance, smart resource allocation, adaptive interfaces, predictive content, instant actionable insights, automated dynamic reporting), collaboration/communications (real-time language translation, transcripts, AI-optimized virtual meetings), security/compliance (real-time compliance, intent-based detections, behavioural biometrics) and wellness/productivity enhancements (ai-enabled ergonomic suggestions, cognitive well-being monitoring).

The next topic from Gerjon was how to start the journey of AI showing the possibilities of AI (Team integrations, building your own bot). I continued with Responsible AI based on the principles of inclusiveness, fairness, transparency, accountability, reliability/safety and privacy/security, followed by downsides of AI and AI regulations (which are currently being discussed in the US and EU governments).

It was great to present with Gerjon and I feel we gave a good account of where AI currently is but because it is developing so rapidly, it is hard to predict where it will go next. We have already decided to do the session again next November and to review the developments over the year.

The final session of the day was What’s New in Citrix by Christian Schwendemann. The first topic was bringing cloud innovations to on-premises: these included universal subscription, web studio on-premises, Autoscale on-premises (power management, dynamic provisioning, vertical load balancing), Hybrid Citrix Director (both Cloud and on-prem from one console). Christian further discussed  Secure Private Access for On-Premises, new Citrix Workspace User Interface, Custom Domain to Citrix Workspace, Citrix HDX Plus for Windows365 and EDT Lossy on Citrix Gateway Service. The topic was Director and monitor enhancements, followed by MFS Synthetic Monitoring Probes. Christian continued with the Local Host Cache Dashboard and configured Sync Failure alerts. Citrix Analytics for Performance was the next topic Christian discussed, followed by Session Recording Events in Citrix Analytics and Session Recording in Citrix Director. Also, VDA Clipboard Activity is now available in Citrix Analytics.

The evening finished with dinner in a nearby restaurant and then the conversation continued in the hotel bar.

Day 2

My day started with Jack Madden’s session What is VMware Anywhere Workspace and What Does it Have to do With Horizon? In the session, Jack went through the components of the Anywhere Workspace Platform (Virtual Apps/Desktops, Unified Endpoint Management, Digital Employee Experience including Platform Services). Of most interest was Jack going through VMware’s approach to DEX. In this section he covered Deliver, Measure, Analyse, and Remediate, including an overview of the DEX solution overview (Workspace ONE Intelligent Hub, Workspace ONE Intelligence Experience Management, Employee Sentiment, Guided Root Cause Analysis, Workspace ONE Intelligence for Horizon, Digital Employee Experience for Horizon, Workspace ONE Assist for Horizon). It was interesting to hear how another vendor approaches DEX. I recently talked with Jack’s former colleague Gabe Knuth on a podcast episode about DEX and how it is defined from his perspective.


Following this, I went to support my colleagues Andreas Van Wingerden and Berry Haveman in their session “”Unleashing the Dynamic Duo: Intune and Liquidware Supercharge Cloud-based Workspaces”. In their session Andreas started by laying out Liquidware’s modular approach to the digital workspace which starts at the delivery platform, we are agnostic so can support any platform, and covered the following layers – operating system, security context, applications, user environment, and experience monitoring. Berry then continued with a look at the main challenges and how ProfileUnity can overcome these challenges. He then talked about out latest FlexApp release 6.8.6 and the new features that are available in the release notes.


After lunch, I headed into Rome to experience some of its history and charm. The evening was spent at a steak house with some community friends before returning to hotel where the tech conversation continued including a deep look at AI and how it will be implemented within EUC.

Day 3

The next, and final, morning brought a surprise because Christian Schwendemann asked Gerjon and me to take part in a session on offline AI along with Thomas Poppelgaard.

In the session we looked at how you can get set with running an offline AI which, unsurprisingly, requires a decent GPU! We looked at some open source models, why you would run an offline model, and the advantages and disadvantages of running offline.

E2EVC finished, as always, with Geekspeak. It is open forum where everyone, who is left, talks about the weekend sessions and the state of the EUC industry. It really is a great experience because you get uncensored insights from people across the industry.

Finally, after some pizza, it was time to head to the airport and home to Dublin. E2EVC, as always, was an amazing experience and a fantastic way to see the current state of the industry, but also have deep technical conversations in a relaxed atmosphere.

AI was obviously a major topic during the event and there were 4 sessions related to AI during E2E, I fully expect that to increase in 2024.

I am already looking forward to the next event and also the development of AI within EUC.


CommandCTRL Clinches Best Windows Endpoint Security & Threat Intelligence Product Award

We are thrilled to share that Liquidware’s CommandCTRL has been honored by Redmond Magazine as the Best Windows Endpoint Security & Threat Intelligence solution of 2023​. This recognition, bestowed by a leading voice of the Microsoft IT community, underscores the robust capabilities of CommandCTRL in delivering top-notch security and threat intelligence.

It is through our relentless commitment to innovation and security excellence that CommandCTRL has been able to stand out among a competitive lineup, showcasing its powerful real-time metrics, diagnostics, and remediation capabilities

Features of CommandCTRL:

CommandCTRL Liquidware’s first SaaS-based solution is full of innovations including CommandCTRL Switch, DVR-like Playback Mode, and Process Identification with ChatGPT, which offer real-time insights and control over endpoint security.

CommandCTRL Switch creates a relationship between an endpoint and a Cloud Desktop allowing administrators to seamlessly switch and navigate between two distinct desktop environments. By effortlessly switching between these platforms, administrators gain comprehensive insights into performance metrics, identify areas of concern, and diagnose performance-related issues.

DVR -like Playback Mode captures up to 7 days history so admins can see exactly what occurred in the environment at specific dates and times. This is incredibly helpful in the troubleshooting process and dramatically reduces the time to resolution.

Process Identification for ChatGPT delivers efficient process identification. With this powerful feature, users can easily determine the purpose and origin of unfamiliar processes consuming system resources. Say goodbye to manual searches and embrace the convenience of AI-assisted process identification.

Furthermore, CommandCTRL’s real-time remediation solution significantly accelerates the resolution time of issues, boosting productivity and enhancing user satisfaction​.The inclusion of multi-factor authentication and Role-Based Access Control (RBAC) fortifies the security framework, ensuring a robust defense against potential threats​​.

Integration with Azure Marketplace:

We are also excited to announce that CommandCTRL is now available on Azure Marketplace. This integration facilitates a streamlined deployment process, eliminating the need for additional infrastructure or setup​

Check it out here

CommandCTRL for Azure and W365 Deployments

The adaptability of Liquidware solutions, including CommandCTRL, with AVD (Azure Virtual Desktop) and Windows 365 deployments, offers a transformative approach to virtual desktop delivery​6​. The integration of CommandCTRL with Windows 365 extends enhanced monitoring capabilities, ensuring a seamless operational flow​​. In harmony with Liquidware FlexApp, CommandCTRL optimizes the management and delivery of applications within AVD and Windows 365 environments, fostering a more flexible and efficient user experience​.

Continue reading

First to Market: Stratusphere UX App Now Available for IGEL OS12

Get in the Know – reveal blind spots in your digital workspace and enhance user experience


IT admins are having to deal with many challenges on the rocky road to digital transformation. The importance of security, cloud adoption, cost savings, and the rapid evolution of SaaS-based applications is driving organizations to a hybrid workspace that requires different approaches to how endpoints are deployed, used, managed, and controlled.


While the demand for applications is increasing, organizations are choosing to deploy a variety of platforms that bring together a hybrid mix of on-premises, virtual, and cloud-based workspaces in their environments. Whereas users expect more flexibility to work when and where they prefer, on their endpoint devices of choice with applications that ‘just work’.


This shift towards cloud-based workspaces promotes a SaaS approach to deploy applications, which combines a number of components to provide expanded functionality as a service. Therefore, it has become vital to deploy tools that allow organizations to not only get an inventory of their used applications, but also to understand how they are being deployed and used in their environments.


Stratusphere UX monitors application performance by providing detailed metrics and diagnostics data that reveal blind spots to support IT teams and CIOs make data-driven decisions.

Key Features:

Metrics for application performance, device health, and network connectivity.
Detailed device inventory and configuration insights.
Proactive event logs and alerts.
Comprehensive compliance reporting.

Reveal user blind spots

User Persona and Authored Data: Stratusphere UX allows authorized IT admins gain an accurate and granular view into user persona and authored data, enabling them to better understand how users are interacting with their applications and make data-driven decisions to improve performance.

IGEL Ready

We are a longstanding Igel Ready Certified partner and are the first partner to deliver an app on the IGEL APP Portal. The Stratusphere UX app allows our customers and IGEL OS 12 users direct access to deploy the Liquidware Stratusphere UX agent quickly and easily to remote endpoints.

The integration of Liquidware Stratusphere UX with IGEL Cosmos delivers the best digital user experience and maximizes the potential of IGEL solutions by streamlining deployment, updates, and security via Cosmos and with Stratusphere UX delivering enhanced visibility into user, application, and network experiences.

Continue reading

Unleash the Power of Liquidware FlexApp One: Trial it QUICK! Over a Cup of Coffee!

You may be sitting at your desk, sipping your favorite cup of coffee right now, and wondering how you can streamline your application management process. Suddenly, you stumble upon Liquidware FlexApp One, and you’re intrigued. What if I told you that trying it out is as easy as taking a coffee break? Yes, you read that right! In this blog, we’re going to explore the exciting world of FlexApp One and how you can get started with it in three simple steps, all while enjoying your daily caffeine fix.

What’s FlexApp One, Anyway?

FlexApp One is a game-changer in the world of application management. It allows you to deploy applications as containers seamlessly on both virtual and physical PCs (even offline!), without the hassle of additional infrastructure, complex management consoles, or time-consuming learning processes. With this approach, you can deploy an app by any means necessary, including Microsoft Intune, a USB stick, a web download, or your organization’s Windows Company Portal. There is NOTHING else like it on the market. It works on any Windows workspace, including Citrix CVAD, VMware Horizon, FRAME Dizzion, Workspot, Amazon Workspaces, HP Anywhere, physical, etc. FlexApp One Session isolation for Citrix Virtual Apps (XenApp) is also coming soon!

Additional benefits include zero Windows rot from applications trashing the system, drastically fewer base images to maintain –especially in VDI, DaaS, and multi-session environments, and getting apps out to users in seconds to ensure business continuity.

How to Get Started?

Now, you might be wondering, “How do I try FlexApp One?” We’ve got you covered, and it’s simpler than brewing your morning coffee. After you enter the FlexApp One easy trial site here, just follow these steps:

Continue reading

VMware Explore 2023 Wrap Up

As I boarded my flight from Dublin to Vegas for VMware Explore 2023, I realized we were at the moment everyone at Liquidware had eagerly anticipated: the launch of CommandCTRL!

In case you missed it, CommandCTRL is our groundbreaking real-time remediation solution that we unveiled at VMware Explore in Las Vegas.

Get all the details here

Day 1

Our experience at VMware Explore kicked off with setting up our impressive 20×20 booth and reuniting with the entire Liquidware team.

We eagerly awaited the start of the hall crawl and were thrilled with the reception at our booth. CommandCTRL drew a lot of attention with multiple demos, and attendees were particularly eager to get one of our exclusive CommandCTRL t-shirts.

VIP Dinner

On Monday evening, we organized a VIP dinner at TAO. This was our way of expressing gratitude to our valued customers, partners, and Inside Track members. It was fantastic to be able to spend time with the EUC Community.

Continue reading

FlexApp: Run Portable Windows Applications Everywhere

FlexApp is an innovative attached application layering technology that allows you to run Windows applications anywhere, on any Windows platform, physical, virtual, or cloud. FlexApp helps deliver a great digital employee experience (DEX) to your users and has been an award-winning innovator since 2013.

The Original Applications Everywhere Solution
FlexApp is the only solution that can deliver applications to any Windows desktop environment (including offline laptops) without affecting the underlying base image or operating system. Microsoft, Citrix, VMware, Amazon, Dizzion-Frame, and any other Windows workspace environment is supported – giving customers the true ability to run apps anywhere, on any platform, without repackaging or being tied to a desktop virtualization vendor.

FlexApp works by dynamically delivering applications to users’ desktops in real-time without modifying base images. This means that applications are not actually installed on the user’s device. FlexApp also supports offline use, so users can still access their applications even when they are not connected to the network.

FlexApp has won several awards including the top prize in the Best of VMworld Digital Workspace category in recent years.

FlexApp is a powerful solution that can help organizations of all sizes to improve their desktop management. Here are some of the benefits of using FlexApp:

  • Reduces application management costs: FlexApp eliminates the need to manually install, update, and patch applications. This can save organizations a significant amount of time and money.
  • Improves security: FlexApp helps to protect applications from unauthorized access and tampering.
  • Increases user productivity: FlexApp provides a consistent user experience across all devices and platforms. This can help to improve user productivity.
  • Supports a variety of deployment models: FlexApp can be deployed in a variety of ways, including on-premises, in the cloud, and in hybrid environments. A feature known as FlexApp One gives packages the ability to be deployed directly with Microsoft Intune or by any other deployment means. FlexApp One packages can also go offline for laptop use.
  • Highly Available (HA) without the hidden costs- FlexApp’s architecture is HA, relying on industry standard VHDX containers which require no elaborate architecture or costly load balancers.
  • Can be context aware: FlexApp can deliver applications based on the user’s location, group, or other factors. This can help to improve efficiency and productivity, as well as security.

If you are looking for a solution to help you run Windows applications everywhere, then FlexApp is the right choice for you. FlexApp is a powerful and versatile solution that can help you to improve your desktop management and save money.

How FlexApp Works

FlexApp works by creating a lightweight, portable application layer that contains all of the files and registry entries that an application needs to run. This application layer is then dynamically delivered to users’ desktops in real time.

FlexApp leverages a system service that communicates between the application layer and the underlying operating system. This allows FlexApp to deliver applications without affecting the base image or operating system. The result is zero Windows rot from the install/uninstall of applications where Windows workspaces run as fast as the day they were first imaged with the base OS.

FlexApp Use Cases

FlexApp can be used in a variety of organizations, including:

  • Education: FlexApp can be used to deliver applications to students and faculty across a variety of devices and platforms. Apps can be delivered based on the user’s location, group, or other factors.
  • Healthcare: FlexApp can be used to deliver applications to doctors, nurses, and other healthcare professionals. Apps can be delivered based on the user’s role, department, or location.
  • Financial services: FlexApp can be used to deliver applications to traders, bankers, and other financial professionals. Apps can be delivered based on the user’s role, department, or location.
  • Manufacturing: FlexApp can be used to deliver applications to factory workers and other manufacturing employees. Apps can be delivered based on the user’s role, department, or location.
  • Retail: FlexApp can be used to deliver applications to sales associates and other retail employees. Apps can be delivered based on the user’s role, department, or location.

FlexApp is a powerful and versatile solution that can help you to run Windows applications everywhere. If you are looking for a way to improve your desktop management and save money, then FlexApp is the right choice for you.

CommandCTRL: Now Generally Available, Shines as Finalist at VMware Explore!

What an incredible week it has been! Just one week ago, we unveiled CommandCTRL, a cutting-edge real-time remediation DEX (Digital Experience) solution at VMware Explore. The response from attendees was nothing short of remarkable, as TechTarget honored us with the distinction of being a Finalist (Honorable Mention) in the prestigious Best of Show awards. This recognition in the Multi-cloud and App Modernization category affirms that CommandCTRL has emerged as a true contender for organizations seeking an innovative real-time remediation solution.

CommandCTRL captivated the attention of not only event attendees but also industry influencers and editors, thanks to a suite of innovative features that we proudly showcased:

ChatGPT-AI Integration: Our product seamlessly integrates with ChatGPT-AI, empowering it to identify and monitor running processes with unprecedented efficiency.

DVR Playback: The inclusion of a DVR-like playback feature allows users to delve into historical events, gaining valuable insights into what truly transpired during critical moments. This is not screen scraping, it’s better, all integral DEX telemetry is recorded and you can go back in time for 30-days!

SWITCH Feature: CommandCTRL introduces a fluid and intuitive workspace-switching capability, enabling admin support users to seamlessly transition between two distinct workspaces with ease and efficiency. Pinpoint the underlying DEX issue in seconds!

Protocol Mirroring: Our platform goes beyond conventional solutions by offering a mirroring feature that vividly displays the communication protocol connecting to physical machine endpoints. Use this feature to directly compare two machines to determine root-cause quickly.

Community Edition: For those that want to try the full power of CommandCTRL we also launched a FREE Community Edition. It has all the same great features but is limited to 24-hour DVR of telemetry and 5 users.

CommandCTRL’s recognition as a Best of Show Finalist at VMware Explore is a testament to its innovative prowess. This remarkable achievement underscores the product’s potential to revolutionize real-time remediation solutions for organizations across industries. We look forward to the exciting journey ahead as CommandCTRL continues to set new standards and empower organizations to take control of their digital experiences. To those that posted on social media, were briefed first-hand, judged the awards, or attended our booth at VMware Explore, thank you for being a part of this incredible milestone!