ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security...
Transcript of ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security...
![Page 1: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/1.jpg)
Joerg Vosse
Senior Systems Engineer - Citrix ShareFile – CEE
ShareFileTechnical Presentation
![Page 2: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/2.jpg)
ShareFile EnterpriseArchitecture Overview
![Page 3: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/3.jpg)
ShareFile “Document Cloud”
ShareFile.com
ShareFile.eu
SaaS application
Clients
Documents
![Page 4: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/4.jpg)
ShareFile “Document Cloud”
ShareFile.com
ShareFile.eu
SaaS application• Business logic
• Web application
• Reporting
Clients• Mobile, Windows,
Outlook, OS X, Web
• XenDesktop / XenApp
• Mobile Office Editor
• XenMobile DLP Policies Documents• Citrix-managed
• Customer-managed
• Existing repositories
![Page 5: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/5.jpg)
ShareFile “Document Cloud” Architecture
Authorization
Authorization
SaaS
Application• USA or Europe
• Business Logic
• Web Application
• Reporting
Document Storage• Citrix-Managed
• Customer-Managed
• Existing Repositories
Authentication• Sharefile integrated
• SAML 2.0 IdPClients
![Page 6: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/6.jpg)
ShareFile EnterpriseClienttools Overview
![Page 7: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/7.jpg)
Files & Folders available on any device
![Page 8: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/8.jpg)
ShareFile Web User Interface
![Page 9: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/9.jpg)
ShareFile Windows Synctool (Explorer)
![Page 10: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/10.jpg)
ShareFile Mac Synctool (Finder)
![Page 11: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/11.jpg)
ShareFile Outlook Plug-in
Send or request files from Outlook
using ShareFile plug-in
Control attachment policy, link
expiration, and access
![Page 12: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/12.jpg)
ShareFile Mobile Client
Personal Folders
Shared Folders
Favorite Folders
Network Drives (R/W)
SharePoint Document Libraries (R/W)
![Page 13: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/13.jpg)
ShareFile Mobile Client (new design)
![Page 14: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/14.jpg)
Built-in Mobile Content Editor
![Page 15: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/15.jpg)
Microsoft Office Web Apps IntegrationHTML rendering of Microsoft Office and Adobe PDF documents
• Supported with Citrix-
managed StorageZones
(only) today
• Rich file interaction without
requiring download
• Leverages Microsoft web
app viewer ᵒ PowerPoint animations
ᵒ Excel calculations
ᵒ MS Word & PDF rendering
![Page 16: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/16.jpg)
ShareFile EnterpriseIn Virtual Environments
![Page 17: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/17.jpg)
Use Citrix Receiver to access
published application or desktop
XenDesktop / XenApp integration
Open ShareFile documents
from a published application
![Page 18: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/18.jpg)
Use Citrix Receiver to access
published application or desktop
XenDesktop / XenApp integration
Open ShareFile documents
from a published desktop
![Page 19: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/19.jpg)
Without On-Demand SyncEvery login to non-persistent desktop
• Full file download ofᵒ My Files & Folders
ᵒ Shared Folders (if configured)
• Likely to cause a capacity issue on PVS or
MCS differencing disk
• Increased write IO during sync
![Page 20: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/20.jpg)
With On-Demand SyncDesigned for XenDesktop and XenApp
• Same look & feel as “normal” Windows Sync
• 4 KB placeholder for each file
• Only brings over files when requiredᵒ Copy
ᵒ Opening/editing in application
• Files are uploaded when changed
• During next login the locally sync’d files are deleted
![Page 21: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/21.jpg)
Before & After On-Demand Sync
Without On-Demand Sync - 20 MB With On-Demand Sync – 4 KB
![Page 22: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/22.jpg)
ShareFile EnterpriseSecure File Sharing
![Page 23: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/23.jpg)
Anonymous - Download
![Page 24: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/24.jpg)
Contact Info Request - Download
![Page 25: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/25.jpg)
Require Client Login - Download
![Page 26: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/26.jpg)
ShareFile EnterpriseEnterprise Security Controls
![Page 27: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/27.jpg)
ShareFile Mobile Device Security
• Encryption at rest / in-transit
• Offline / Online access to files
• Device Restrictions
• File Self Destruct (Poison Pill)
• Passcode / Pin Code
• Modified Device Detection
• External Applications
![Page 28: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/28.jpg)
ShareFile Mobile Device Security
Provided by ShareFile
Poison Pill
Require password
Data retention
Encrypt files at rest
Passcode lock
Device lock
Jail-break detection
Remote wipe
Wipe status and auditing
Disable external applications
Secure Sharing
Network IP restrictions
Session inactivity timeout
Encryption at rest
• Requires passcode
Poison Pill
• Lost device protection / data expiration
Remote Wipe
• Wipes only ShareFile app data
Disable External Applications
• Prevent “Open In” 3rd party apps
![Page 29: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/29.jpg)
Mobile DLP Controls with XenMobile
Provided by ShareFile
Disable download
Require password
Data retention
Encrypt files at rest
Passcode lock
Device lock
Jail-break detection
Remote wipe
Wipe status and auditing
Disable external applications
Secure Sharing
Network IP restrictions
Session inactivity timeout
Provided by MDX Wrapping
Constrain clipboard cut and copy Define maximum offline period
Constrain clipboard paste Require regular re-authentication
Constrain external applications Wipe data after security event
Constrain URL Schemes Online access only
Block camera Constrain Wi-Fi networks
Block microphone Require internal network
Block screen capture Constrain network access
Block email compose App update grace period
Disable print Require device encryption
Require Citrix Worx Homeauthentication
Require device pattern screen lock
![Page 30: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/30.jpg)
Mobile Device Deployment
Public App StoreMobile Application Management
(MAM)
Mobile Device Management
(MDM)
![Page 31: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/31.jpg)
Mobile Device Deployment
Public App StoreMobile Application Management
(MAM)
Mobile Device Management
(MDM)
![Page 32: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/32.jpg)
Windows / OS X Device Registration
• Restricts login to devices only with a valid access key
![Page 33: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/33.jpg)
Sharing Controls
Blacklist / Whitelist• Prohibit sharing with specific email domains
• Restrict sharing to only specific email domains
Require Client Login• Disables anonymous sharing of documents
• Restricts ability for recipients to forward shared documents to someone else
Client 2-step verification• 2-step verification on untrusted devices using SMS messages, Google Authenticator
![Page 34: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/34.jpg)
ShareFile EnterpriseStorage Zones
![Page 35: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/35.jpg)
ShareFile with StorageZonesChoose where your data is stored
Meet compliance &
security requirements
Best economics,
most elastic
Cloud On-Prem
![Page 36: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/36.jpg)
ShareFile with StorageZonesChoose where your data is stored
Meet compliance &
security requirements
Best economics,
most elastic
Cloud On-PremExisting
Systems
StorageZone
Connectors
Mobile productivity with
existing data sources
![Page 37: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/37.jpg)
ShareFile with Citrix-managed StorageZones
Object
StoreShareFile.com
![Page 38: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/38.jpg)
ShareFile with customer-managed
StorageZones
Object
Store
![Page 39: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/39.jpg)
ShareFile StorageZones
Object
StoreShareFile.com
Citrix-managed
Customer-managed
Network
Shares
StorageZone Connectors
Existing
Systems
![Page 40: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/40.jpg)
ShareFile StorageZone options
Object
Store
Existing
Systems
• Cloud-optimized storage technology
• Either Citrix-managed or customer-managed
• Full ShareFile feature set (Sync, Send/Share,
retention, versioning, etc.)
• Network shares, SharePoint
• Typically in customer datacenter
• Feature set determined by repositories capabilities
![Page 41: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/41.jpg)
![Page 42: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/42.jpg)
ShareFile EnterpriseAuthentication Options
![Page 43: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/43.jpg)
Authentication Options
ShareFile Managed
• Uses email address and a
ShareFile password
• Passwords are stored hashed in
the ShareFile Control Plane
• Admin portal supports password
policy management
• Unified storefront for all
applications, data and services
• Instant user provisioning and de-
provisioning
• Single sign-on with Citrix Worx
• Real-time SaaS application
monitoring
• Comprehensive access control
policies
Customer IdP
• Requires customer provided and
configured SAML 2.0 identity
provider
• Supports Forms, Basic, and
Windows Integrated protocols
• Tested with ADFS 2.0,
PingFederate, SiteMinder, Okta
• Supported only with ‘Enterprise’
tools
![Page 44: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/44.jpg)
SAML Authentication
• Employee account is still required in ShareFile• Folder Access Control
• Licensing
• Employees will be matched by email address
• Employee password will never be sent to
SaaS Application Tier
• ShareFile Authentication can be blocked for
Employee users
• Basic, Integrated Windows Authentication, and
Forms are supported for all Enterprise clients
![Page 45: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/45.jpg)
7 8 91 2 3
Service Provider
(sharefile.com)Identity Provider
(e.g. XenMobile,
ADFS)
4 5
6
1 Client requests ShareFile SSO login URL
2 Client discovers identity provider
3 Client redirected to identify provider
4 Client requests identity provider URL
5 Identity Provider identifies the user
6User is authenticated and is redirected to
Assertion Consumer Service URL with SAML
response
7 User agent requests ACS URL
8ACS validates SAML response and redirects
user agent to ShareFile URL
9 User agent requests ShareFile URL
User has access
SAMLHow it works
Client
![Page 46: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/46.jpg)
IdP / SP Authentication
ShareFile.com Customer Active
Directory
Rights
SAML
Service
Provider
(SP)
SAML
Identity
Provider
(IdP)
Trust
Claims
LDAP
Signed
![Page 47: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/47.jpg)
So how do we get the Identity?
• <NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">[email protected]</NameID>...
Attribute Store
(AD) Rule Transform
Claims
![Page 48: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/48.jpg)
SAML: IDP-Initiated Sign-On
SAML Identity
Provider
(IDP)
ShareFile.com
Service Provier
(SP)
Go to sharefile.com
Claims302 +
https://account.sharefile.com/saml/acs + Claims
![Page 49: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/49.jpg)
SAML: SP-Initiated Sign-OnSAML Identity
Provider
(IDP)
ShareFile.com
Service Provider
(SP)
../adfs/ls +
Request302 +
https://account.sharefile.com/saml/acs + Claims
https://account.sharefile.com/saml/login
Request
401(Auth Challenge)
../adfs/ls + +Request
Claims302 +
![Page 50: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/50.jpg)
ShareFile EnterpriseUser Provisioning
![Page 51: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/51.jpg)
Manual
![Page 52: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/52.jpg)
Bulk Import
![Page 53: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/53.jpg)
User Management Tool
![Page 54: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/54.jpg)
XenMobile AppController
![Page 55: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/55.jpg)
ShareFile EnterpriseAPI
![Page 56: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/56.jpg)
Solutions Through Platforms
ShareFile
Clients
Platform
Partners
Connectors SDK (Data Sources)
V3 API
![Page 57: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/57.jpg)
ShareFile Platform
Connectors
SDK
RESTful API
PowerShell
SDK
.NET SDK
Desktop
Apps
Web
Mobile
Apps
Java
SDK
Objective-C
SDK
Javascript
SDK
Personal
Cloud
SharePoint
Network
Shares
ShareFile
![Page 58: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/58.jpg)
ShareFile
Developer
![Page 59: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/59.jpg)
ShareFile EnterpriseCommunications & Diagrams
![Page 60: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/60.jpg)
Client Communication
S
Z
C
ShareFile.comSaaS Application Tier• *.sharefile.com
• *.sharefile.eu
Documents• StorageZones Controller
• Amazon, Azure, on-premises
SAML IdP• XenMobile
• Microsoft ADFS v2
• CA SiteMinder
• Ping Federate/Identity
Clients• Mobile, Windows,
Outlook, OS X, Web
• XenDesktop / XenApp173.199.5.0/24
78.108.127.0/24
![Page 61: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/61.jpg)
StorageZones Controller Req & Communication
StorageZones Controller• Windows Server 2008 R2 or
2012 R2
• IIS Services with ASP.NET
• .NET Framework 4.5
• 2 vCPU, 4GB RAM
• Public IP address with DNS
• Public SSL certificate
SZ
CSZC
ShareFile.comSaaS Application Tier• *.sharefile.com 173.199.5.0/24
• *.sharefile.eu 78.108.127.0/24
Object
Store
Network
Shares
ShareFile Data• CIFS/SMB file share
• Service account
SharePoint• http/https
Network Shares• CIFS/SMB
Internal
![Page 62: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/62.jpg)
Exte
rnal
Fir
ewal
l
Inte
rnal
Fir
ewal
l
Port 80 on localhost
health check
Port 80 on localhost
health check
Port 443Port 80 or 443
(recommended)
Inbound from * on Port 443
FQDN on External DNS with valid Public SSL cert
Outbound to*.sharefile.com 173.199.5.0/24*.sharefile.eu 78.108.127.0/24
Port 443
DMZ Proxy(e.g. NetScaler)
ShareFIle StorageZone Controller(s)(physical or virtual)
ShareFile StorageZones Networking Diagram
![Page 63: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/63.jpg)
ShareFile
Client
NetScaler
App
Controller
Device
Manager
DMZ
Port 80 or 443
SZC.company.com
StorageZone
Controller
Internet & Remote Users Internal Network
Port 443
Port 443
App Controller
User Provisioning
Worx WebWorx Mail Worx Home
SharePoint
File Server
Active Directory
Port 443
Port 443
Port 389 or 636
Port 80 or 443
SMB
Port 389 or 636
Op
tio
na
l
Op
tion
al
Citrix-Managed Customer- Managed
![Page 64: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/64.jpg)
ShareFile
NetScaler
DMZ
Port 80 or 443
SZC.company.com
StorageZone
Controller
Internet & Remote Users Internal Network
Port 80 or 443
Port 443
App Controller
User Provisioning
SharePoint
File Server
Active Directory
Port 443
Port 443
Port 389 or 636
Port 80 or 443
SMB
Port 389 or 636
Op
tio
na
l
Op
tion
al
IdP
Citrix-Managed Customer- Managed
![Page 65: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/65.jpg)
DMZ
App Communication
SZ
CSZC
Data /
Connectors
Identity Provider
StorageZone
Controller
ShareFile.com
NetScaler
SSO
/saml/login SSO URL
Download / Upload URL
Internal NetworkInternet
![Page 66: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/66.jpg)
AppControllerNetscaler
____
____
____
ShareFile Docs
____
____
____
ShareFile_SAML_SP
.mdx
ShareFile & XenMobile AppController
![Page 67: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/67.jpg)
StorageZones
ControllersNetScaler
Inserting NetScaler
Content Switching
vServer
Load
Balancing
vServer/
/cifs
/sp
ShareFile.com
Load
Balancing
vServer w/auth
StorageZone
request
CIFS/SharePoint
request
StorageZone
request
SharePoint
request
CIFS
request
Hash
Validation
Authentication
LDAP
![Page 68: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/68.jpg)
StorageZone
ControllersNetScaler
NetScaler ShareFile Data Flow
Content Switching
vServer
Load
Balancing
vServer /
ShareFile.com
StorageZone
request
StorageZone
request
Hash
Validation
![Page 69: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/69.jpg)
StorageZone
ControllersNetScaler
NetScaler ShareFile Data Flow
Content Switching
vServer
Load
Balancing
vServer
ShareFile.com
CIFS or
SharePoint
request
LDAP
AAA
Authentication
/sp
/cifsCIFS
request
SharePoint
request
![Page 70: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/70.jpg)
Q & A
![Page 71: ShareFile - Amazon Web Services · · 2015-12-12ShareFile Enterprise Enterprise Security Controls. ... ShareFile.com Citrix-managed Customer-managed Network Shares ... 11/24/2014](https://reader031.fdocuments.us/reader031/viewer/2022020303/5ae962177f8b9ac3618c59ed/html5/thumbnails/71.jpg)
Work better. Live better.