Archive | November 2018

Black Friday – Cyber Monday. “Be a beneficiary not a casualty”

This must be the “strangest” of strange states as our consumer society evolves from zero “Black Fridays” to two – and gives my original article a second lease of life. The early bird resellers launched Black Friday part one last week attempting to steal a march on the masses, but the real frenzy and furore starts now with the default Black Friday fast approaching followed by Cyber Monday just around the corner.

These two shopping days were absent from my childhood as I lived a world of window shopping that on the odd occasions evolved to in store browsing when I sought to interact and engage with the myriad of products I hoped I could one day afford to buy. Click and collect didn’t exist but via a very thick paper based catalogue “click and deliver” was a highly rewarding activity with the click of buttons on the home phone followed by that feeling of Christmas when the catalogue item was delivered via the postal service (nothing ever fitted or looked as amazing as the catalogue pictures).

But as we fast forward to the present day with frequent announcements of the demise of the high street, much of our in store browsing is online (and frequently from a mobile device), click and collect / deliver an essential way of life and our approach to product selection and purchasing is now unrecognisable from a decade ago. Our immersion in social networks, digital procurement platforms and financial systems have helped to make many of us digital by default when we shift into product buying mode because the sheer breadth of offerings and convenience is unmatched.

But it comes with a health risk. The “digital me (or you)” and our always on entity existing on both known and unknown public platforms, ensures we become valid targets for attackers seeking to emulate our digital personas for financial gain. Black Friday signals the start of one of the busiest and most frenzied trading weekends of the year. The mix of in store and online price reductions results in both “want and need” based purchasing to ensure “too good to be true” deals are not missed, culminating on Cyber Monday with an online price war second to none.

Secure business, secure purchasing, secure user experience are often assumed by customers without a second thought of the cyber threat spectre waiting in the wings. This leaves many combing the net for deals, offers, codes or any other digital token to make “cheap” even “cheaper”, blissfully unware that many of those “benefits” are fake, malware ridden or designed to harvest personal credentials for future use.

Cyber Monday 2017 surpassed $6.7bn of sales which for both retailers and cyber treat actors is a prize too lucrative to ignore (stat CNBC). For retailers, getting the security basics right will be essential to ensure successful and secure consumer trading outcomes. DDOS mitigation, enhanced phishing protection, web application security, anti-malware, access review and least privilege are essential controls that must be tested and optimised in advance of the starting gun for Black Friday.

For consumers / users, education and heightened levels of cyber vigilance plus a realisation that too good to be true – “is too good to be true” when interacting with online systems prior to and beyond the Black Friday / Cyber Monday weekend. This is the time of year where spam and phishing Email volumes reach unprecedented levels with social engineering used to make those “offers” too compelling to ignore. DONT CLICK emails for “amazing deals and offers” – pure and simple as a moment of weakness may result in malware, ransomware or other forms of compromise taking hold of your digital persona and potentially that of your company. Its safer to visit the website of the vendor in question “directly”, no need to click a link that may not be from the company in question.   

If you want to be “online smart” a few simple things can deliver HUGE security enhancements to your Black Friday shopping experience. Ensure you turn on the two-factor (or multi) authentication and notification options on your various online email services and accounts with further security improvements gained by using a password manager to ensure different passwords are applied to various services you use.

Building the walls higher just won’t do, both vendors and consumers must work in tandem to ensure the most secure possible online and digital trading experience is realised by all reducing the potential for data breach or subsequent misuse.

Safe and happy shopping during Black Friday and Cyber Monday 2018 (and beyond).

Until next time.

Colin W

Twitter: @Colinwccuk

LOB CTO UK: Networking and Security – Computacenter UK

So, who should you compare VMware Workspace ONE with?

I am fresh back from the biggest ever VMworld Europe, buoyed by the numerous announcements and developments in their end-user capabilities. On the back of our strengthening strategic partnership I thought it was time to address that age-old question; which is best Citrix or VMware?

It’s not easy being a consultant. It’s even harder when you don’t work for a vendor and so aren’t invested in a specific technology stack. Yes, I get it, there are worse things in life, but all things are relative. For me, nothing represents that better than organisations asking whether they should choose VMware or Citrix? The response ‘it depends’ is often met with exasperation, but it’s key to everything we do, by focusing on the value to a business and the requirements they are trying to meet.

Back in 2014, VMware bought AirWatch for $1.54 billion; a staggering fifteen times it’s reputed worth. We had already seen the explosion of mobile devices into organisations and the realisation of how much more productive they could make people, but it was also evident that managing mobile devices was a different proposition to managing static PCs.

Pretty soon that was looking like a smart move.  However, roll forward to 2018 and the benefits of Mobile Device Management are being exploited across the wider estate. Making the purchase look like a fabulous move. The development of Unified Endpoint Management (UEM) has allowed VMware to talk not just about virtual desktops, not just about mobile devices but the whole end-user estate. With this the focus has shifted just from competing with Citrix to move directly with Microsoft. With virtual desktops constant at around 10% for most customers the bigger opportunity remains the physical world hence the development of Workspace ONE. The prize now is looking beyond the Microsoft ecosystem at how the workplace is becoming more disparate, driven by consumer/colleague choice. This strategic, holistic, vision is now more often what drives solution choice.

In August 2017, VMware bought Apteligent, nine months later they bought E8 Security and delivered Workspace ONE Intelligence to improve user experience, optimise resources and strengthen security and compliance. In May of this year, they announced their strategic partnership with Okta which increased their capabilities to deliver a compelling identity story. I said above that the focus has shifted from Citrix to Microsoft, with these acquisitions and the capabilities they bring, in truth VMware is battling against their partnership.

The decision to remain on a certain virtual platform should be considered alongside how devices will be managed, how identity will be handled, what cloud investment strategy has been decided, which endpoint security requirements you have. Most organisations have existing investments in technology that come up for renewal at different times so changes need to be modular and fit an end vision. They must interact and exist alongside other products until the time is right to retire them. So where do you start? In Workspace ONE I see four opportunities.

Device diversity – organisations are increasingly looking beyond Microsoft Windows to support greater user choice. The drive from Apple and Google into Enterprise organisations is, so far, better supported and has more focus from VMware

Consumerisation of IT – as the consumer world now leads the Enterprise world there is an expectation of a certain user experience and ease of use. Workspace ONE delivers a consistent consumer-like experience across multiple OS platforms and form-factors.

Existing AirWatch investment – where mobile devices are already being managed via AirWatch the ability to extend that management to the primary device estate through a ‘single pane of glass’ can make a strong case for retaining and strategically developing investment in VMware.

Existing virtual desktop and app investment – where VMware Horizon has been deployed the built-in integration into Workspace ONE and potential licence benefits could make the case for deploying the wider portfolio of products. Publishing applications through the Workspace ONE app can be a key driver to greater end-point diversity.

VMware can co-exist with traditional management systems to manage a wide range of devices and form factors. Using analytics, they now have insight into the user experience, with their open security platform they can take advantage off best of breed vendors and with their partnership with Okta they have an identity solution to integrate any application strategy safely and securely. That gives them the capability to offer a direct comparison to Microsoft’s Enterprise Mobility and Security suite.

Competition provides benefits for the user and drives vendors to be innovative. If you believe that your future desktop strategy extends beyond the Microsoft world, then Workspace ONE is something you need to consider. Let’s have the conversation, just don’t expect a simple answer.