Badges

gestaltitbadge

follow-me-twitter

Subscribe to me on FriendFeed

Comments / DISQUS
Feedjit.com

How Will Admins Provide Mobile Access To Virtual Infrastructure?


Image via Wikipedia

With all the recent talk about the software from Rove and VMware that provides mobile device access to managing VMware Infrastructure, administrators now need to consider how they will actually connect mobile phones to vCenter and ESX hosts behind the firewall. Fortunately, a thread from the VMware vCenter Mobile Access Technology Preview Community sheds some insight on how VMware actually tested the vCenter Mobile Access virtual appliance (vCMA) with several different mobile devices.

From The official “how will I connect to this thing” thread:

1. BlackBerry, with a BlackBerry Enterprise Server (BES). This is by far the easiest way, because BlackBerries that are connected to a BES are already on their company’s intranets. Loading the app should be as simple as pointing at the app URL (the format of which will be documented at release).

2. Iphone. We tested two methods successfully. The first was to create an ipsec vpn connection to our intranet. Once we were in things worked flawlessly. The second method worked on every device we tested but is slightly specific to our setup. We used our generic ssl/vpn gateway to authenticate, then we used the web proxying feature of the vpn landing page to get to the url we needed. The resulting app ends up with a vpn “bar” at the top since the page is hosted in this case but functionality is not impaired.

3. Symbian/Nokia. The ssl/vpn solution worked well. There might be vpn solutions out there, check with your network administrator.

4. WinMo. The ssl/vpn solution worked well. We couldn’t get the built-in vpn client to negotiate with our network but it certainly seems possible.

5. Android. The ssl/vpn solution worked well. There might be vpn solutions out there, check with your network administrator.

6. BlackBerry without BES. Can you guess? The ssl/vpn solution worked well. There might be vpn solutions out there, check with your network administrator.

I would guess that the majority of admins will have a Blackberry on a BES (Enterprise Server) like me (scenario 1 above). A quick test to make sure that your Blackberry device can see internal servers in this case would be to open your phone browser and go to the FQDN or ip address of a vCenter or ESX server. You should get the VMware web interface. I was able to do this on my Blackberry 8900 Curve. Now I am wondering why I never thought to do this sooner?!!

VMware announced yesterday that the vCMA is now available for download as a technology preview beta. Rove’s Mobile Admin is available in a 14 day trial.

Reblog this post [with Zemanta]

Related Posts

  • http://virtualize.wordpress.com MartijnL

    There are some other considerations with mobile endpoint security because you would have to make sure that the connecting device is a device that you allow on the network, not just the user.

    Another option (but I don't know if you can get that everywhere) is to get a dedicated connection for the enterprise mobile phones to connect these phones directly to the corporate network. With GSM phones the telco can set an APN (Access Point Name) for the SIM card and route all the data traffic from the phones from their network onto the dedicated line in stead of to the public internet. When the phones are reconfigured to only use that APN (which can be done with mobile device management software) you have effectively closed the loop and don't need to use a VPN session on the phone to make the connection.

    You can still put a firewall or ISA between the connection and the network ofcourse but that's depending on the security design of the network.

    Note: I only have experience with an implementation like this with Windows Mobile phones. :)

  • http://vmetc.com rbrambley

    Martijn,

    Thanks for the cell phone access expertise and experience. It's
    definitely more complex than I ever considered- especially since I
    would think only a small number of admin users would really need
    access to VI management servers. Although, I understand the security
    advantages of all user mobile devices actually being internal.

  • http://www.roveit.com Laura Kedziora

    Thanks for the mentions Rich!

    The biggest differences between Mobile Admin and vCMA is that while the VMware solution is focused solely on VMware administration – Mobile Admin gives the ability to administer 40+ other servers in addition to our VMware Virtual Center support as well as being integrated into the Microsoft’s powerful Operations Manager.

  • http://vmetc.com rbrambley

    Laura,

    Yep, Mobile Admin gives you mobile phone admin access to most all of the applications running inside all the VMs!

  • http://vmetc.com rbrambley

    Laura,

    Yep, Mobile Admin gives you mobile phone admin access to most all of the applications running inside all the VMs!

Get My Podcast On iTunes!
Support VM /ETC
Support VMETC.com

Support VMETC.com

Free Business and Tech Magazines and eBooks
@rbrambley tweets
VMTN Roundtable Podcasts
Subscribe



Add to Google Reader or Homepage
Subscribe in NewsGator Online
Add to netvibes
Add to Plusmo