Yes, if connecting to a Citrix security gateway. Yes, if using PCoIP to a Windows 2008 security server. No, but you can use GPO MSFT policies to accomplish this Yes, very granular criteria including: VID, PID, REL, Class, SubClass, Prot tags in the USB device descriptor field No, files and folders cannot be copied between host and view using PCoIPįull Screen only mode with no toggle to local host OS Kerberos Realm in mixed AD/MIT Kerberos environmentsĬontrol redirection/mapping of local host hard drivesĬontrol Host Clipboard redirection for text copy/pasteĬontrol Host Clipboard redirection for files and folders?

Here is a matrix that compares the security features of XenDesktop 5 and View 4.6: Device drivers are a favorite attack vector of the determined hacker. Some others are mapping infected local drives into the VDI client, malware that can hijack the VDI session, infected USB device mapping into VDI client, allowing anything that maps to a local device driver like printers, graphics card, HDD, etc. Of course there are lots of other security concerns with VDI but those are the two I most worry about. If these two things are running on the host OS that is running a VDI session then you've got a security breach on your hands. My two biggest concerns with type 2 VDI clients (those that run on a host OS and not bare metal) are keyboard loggers and malware that does screen scrapes. I couldn't find a comprehensive security review of the two big players in this space (citrix and vmware) so I decided to do my own research and write it up. Everyone is scrambling to figure out which VDI solution is the most secure, what security features they have and most importantly how can I securely roll out VDI.

The absolute explosion of VDI deployments recently is driving security teams nuts.

Xendesktop server vdi