Securely connect to your infrastructure with hcl nomad clients using ssl

Simplify Notes Client Management
Securely connect to your
infrastructure with HCL
Nomad Clients using SSL

Speakers
Daniel Klas
@panagenda
Inbound Marketing Coordinator
panagenda
Christoph Adler
@cadler80
Senior Consultant
panagenda
Thomas Hampel
@ThomasHampel
Director at Product Management
HCL
Join the conversation using #HCLSafeLinx & #DominoForever & @HCLDigital & @panagenda
Ketan Godhaniya
@ketangodhaniya
Product Manager for SafeLinx
HCL

HCL’s statements regarding its plans, directions, and intent are subject
to change or withdrawal without notice and at HCL’s sole discretion.
Information regarding potential future products is intended to outline our
general product direction and it should not be relied on in making a
purchasing decision.
The information mentioned regarding potential future products is not a
commitment, promise, or legal obligation to deliver any material, code
or functionality. Information about potential future products may not be
incorporated into any contract.
The development, release, and timing of any future features
or functionality described for our products remains at our sole discretion.
Performance is based on measurements and projections using standard
HCL benchmarks in a controlled environment. The actual throughput or
performance that any user will experience will vary depending upon many
factors, including considerations such as the amount of multiprogramming
in the user’s job stream, the I/O configuration, the storage configuration,
and the workload processed. Therefore, no assurance can be given that an
individual user will achieve results similar to those stated here.
Please Note

Copyright © 2020 HCL Technologies Limited | www.hcltechsw.com
Why are we doing this?
4
Urgent need:
§ Make IT services available externally because users are no longer just
working in classic office environments
Source: https://www.forbes.com/sites/blakemorgan/2020/04/05/is-
covid-19-forcing-your-digital-transformation-12-steps-to-move-faster/

Challenges
5
1
2
3
4
5
6
7
Heightened Security
Quick remote access
Geo-Independence
Stay productive
Connect several devices
to one account
Over provisioning of
resources
Cost effective

Working from Home
6
• Ease of use
• Not limited to specific OS
• Desktop/Notebook/Mobile è all of them!
User’s expectation
• Expose IT services to extranet
• Securely connect users to intranet
• Support Bring Your Own Device (BYOD)
strategy
How?

HCL Safelinx Offers the Solution
7
Provides a security-rich and seamless connection to
business applications and data anytime/anywhere
in a highly secure manner regardless of the physical
network.
Rich Mobility Client - Full feature Client installs
on Desktop, Laptop and select mobile devices
Authentication options: Industry Standard
Authentication Methods, Single Sign-On and
Two Factor
Reverse Proxy capabilities - Clientless HTTP
access
On-premises Resources Cloud Resources

Working from Home
Accessing exposed Apps on the
intranet securely
SafeLinx Proxy
SafeLinx VPN
For general network access purpose
Any many many other services, e.g.:
• ERP application
• File & Print
• …any web application

Domino & Safelinx : Best Friends
https://blog.hcltechsw.com/domino/licensing-update-hcl-complete-collaboration-ccb-guest-licensing/
https://blog.hcltechsw.com/domino/new-release-hcl-safelinx-1-1-secure-vpn-services-for-cloud-or-on-premise/
For all Notes Domino Complete Collaboration Customers, SafeLinx v1.1 is now available as
a free entitlement and will be listed under supporting programs. (SafeLinx is available as a
standalone to non-Notes-Domino Complete Collaboration customers.)
CCB customers can use SafeLinx’s server component without the need for an additional
VPN client to securely access their Domino apps from mobile. With this release, we’d like
to provide our customers the opportunity to evaluate SafeLinx VPN for broader usage.
NEW

Safelinx but not on CCB ?
https://blog.hcltechsw.com/domino/new-release-hcl-safelinx-1-1-secure-vpn-services-for-cloud-or-on-premise/
What if you are not a Domino CCB customer ?
§ Available as standalone product
§ Price per user
§ All clients / all operating systems included

Why HCL Safelinx matters
11
Strong
Customer Base
• Lots of Customers WW
• Used by Europe’s leading
banks and one of the Big4
company
Analyst Recognitions
• IBM runs SafeLinx servers
in the various geographies
for production and
development access for
organizations across the
company.
• Top Analysts report
Industry Leader Capabilities
• A robust, mature, security
rich and reliable VPN
solution
• Reverse Proxy Capabilities
• Recognized for its
reliability, scalability and
flexibility
• Flexible option to
implement on prem or on
cloud
• HCL lab services
• Standard Support
On Premise &
Cloud
Easy Pricing
• Free of charge for
customers with Domino
CCB licensing
• Easy and flexible pricing on
per user/month/year
pricing model.
• Customer can opt either
VPN or Reverse proxy and
both (VPN and Reverse
Proxy

What is Safelinx
12
§ Central authentication
§ Username+Password, Certificate, 2FA ( TOTP / RSA Token)
§ Authentication against LDAP (e.g. Domino or AD)
§ Integration in Mobile Device Management Systems
§ Load Balancing & Failover Support
§ Rock Solid
VPN Client
§ Android
§ Windows
§ MacOS
HTTP Reverse Proxy
§ Map external URL to an internal URL
§ Also changing ports, e.g. port 8443
(external) to 443 (internal)
§ Independent from Operating System
§ Single URL for Access to backend systems
§ Single Sign On between SafeLinx und HCL
backend systems
§ Integrated ruleset for popular HCL services
§ Traveler, iNotes, Sametime,
Connections

HCL Traveler
NRPCHTTP(S)
HCL Domino
Scenario #1
Internet DMZ Intranet
Wants to have
§ Mobile access to PIM (Email, Calendar, Contacts)
Services provided:
§ Verse Mobile for iOS & Android
Optional:
§ Traveler High Availability
§ Scale # of Servers for supporting more users / devices
https://help.hcltechsw.com/traveler/11.0.0/traveler_welcome.html

HTTP(S)
HCL Domino
HCL Traveler
Scenario #2
Wants to have:
§ Browser & Mobile access to PIM (Email, Calendar, Contacts)
Services provided:
§ Verse (Web & Mobile mail)
Benefits:
§ Single Point of Access control for all services
HTTP(S)
https://help.hcltechsw.com/safelinx/1.1/index.html
SafeLinx Proxy:
https://mobile.company.com/traveler
https://mobile.company.com/webmail

HTTP(S)
HCL Domino
HCL Traveler
Scenario #3
Wants to have:
§ Secure Chat & online Meetings
Services provided:
§ Sametime Chat & Meetings
Benefits:
HTTP(S)
HCL Sametime
SafeLinx Proxy:
https://sametime.company.com

HTTP(S)
HCL Domino
HCL Traveler
Scenario #4
Wants to have:
§ Secure Chat & online Meetings + HCL Domino Volt Apps
Services provided:
§ Sametime Chat & Meetings + Volt
Benefits:
§ Quickly build Apps in the browser
HTTP(S)
HCL Sametime
SafeLinx Proxy:
https://domino.company.com

HTTP(S)
HCL Domino
HCL Traveler
Scenario #5
Wants to have:
§ Mobile Access to Domino Applications == HCL Nomad (Mobile)
Services provided:
§ Domino Apps & Mail
Benefits:
§ Mobilize Domino apps
HTTP(S)
NRPC
HCL Sametime
SafeLinx Proxy + VPN:

Typical Client deployment
Domino Domain A
NRPC
Port 1352
ID Vault
Firewall
Domino
Mail Server
Domino
App Server
Nomad
iOS / Android
Notes/
HCAA
Current Network Flow

New Network Flow options with HCL Nomad
Domino Domain A
Browser Clients
domino.company.com
TLS/SSL
Port 443
NRPC
Port 1352
ID Vault
Firewall
Domino
Mail Server
Domino
App Server
TLS/SSL
Port 443
Nomad Web
Static Resources
Nomad
iOS / Android
TLS/SSL
Port 443

HTTP(S)
HCL Domino
HCL Traveler
Scenario #6
Wants to have:
§ Mobile Access to Domino Applications == HCL Nomad (Mobile)
§ Notes Client access to Domino + Access to other corporate Services
Services provided:
§ Domino Apps & Mail
§ Full VPN Access
Benefits:
§ Full VPN Access to any (defined) services
incl. File & Print, ERP, etc.
HTTP(S)
NRPC
HCL Sametime
VPN
SafeLinx Proxy + VPN:
vpn.company.com

Summary
Christoph now has everything he needs to be productive
§ Mail, applications and other corporate services accessible from
mobile device and desktop/notebook.
§ Key services accessible with any (current) browser
§ VPN Client
§ Secure access to corporate network resources
§ Seamless integration
§ Get work done as if he would be in the office
§ Without need to travel

v
Funktionsweise & Installation
Requirements

SafeLinx Server:
• Windows – 2008 / 2012 / 2016 / 2019 Server
• Linux – RHEL 6 / 7 /8 and CentOS 6 / 7 /8
• LDAP v3
Administrator Client
• Java based Admin Client for Linux und Windows
SafeLinx Clients (VPN):
• Microsoft Windows 7 / 8 / 10
• Apple MacOS starting at 10.13
• Linux (RHEL and CentOS)
• Android 8.0 or higher
SafeLinx Clientless (Reverse Proxy):
• iOS, Android, Windows, ChromeOS, Linux…
• Any current Browser
• Any application using HTTP Transport
System Requirements
https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0081251

SafeLinx Server:
• Min. 2 CPU Cores
• 8 Gbyte Memory
• 1 GByte Disk
Administrator
• Min. 2 CPU Cores
• 4 Gbyte Memory
• 200 MByte Disk
Sizing Recommendations for SafeLinx Server
• Individual workload depends on usage
• Rule of thumb : 2000 concurrent sessions per CPU Core (up to 8 cores)
Advanced
• High Availability
Sizing & Advanced Features

SafeLinx Components
LDAPRelational DB
Proxy VPN
§ LDAP v3
§ RADIUS
§ Multiple Directory
Services at once
§ IBM DB2 / Express
§ Oracle
§ MSSQL
§ Planned : MySQL
SafeLinx Admin
(wgcfg)
§ Java based
§ Linux /
Windows
https://help.hcltechsw.com/safelinx/1.1/adminguide/installing_and_initial_configuration.html
TCP Port 9555 / 9559
Authentication
§ Username/password
§ 2FA / TOTP
§ RSA Secure ID
§ Certificate Authorities

Large Scale / Integrated deployment

Ask the HCL Community
midpoints GmbH
Web: http://www.midpoints.de
Blog: http://www.netzgoetter.net
HCL Business Partner
Apple - Enterprise Developer & MDM Group Member
Google - Android for Work – EMM Community
Samsung - Enterprise Alliance Partner
Experience
• Enterprise Mobility
• HCL Domino, HCL Sametime, HCL Traveler
• IBM Mobile Connect / HCL SafeLinx
Detlev Pöttgen

Real Customer Scenarios
ü ~700 users on HCL Domino
ü ~150+ iPads deployed
ü Manufacturing industry
Customer A – Wants to connect to Domino using Nomad without VPN but secure
ü Using HCL Nomad heavily on all iPads
ü Manually connect to VPN à issues!
ü No Domino servers available in DMZ

ü 100k+ users on HCL Domino
ü 25k+ Traveler / mobile devices
ü XYZ industry segment
Customer B – Wants to get rid of all Domino Servers in DMZ à more secure and less complex
ü SafeLinx with Traveler Server in DMZ
ü Domino Server (Passthrough) in DMZ for
Nomad / Notes Clients
ü No VPN available for mobile devices

ü 190k+ users on HCL Domino
ü High Secure / Regulated Industry
Customer C – Wants to have one secure Url for all users to connect to iNotes/Verse2.0
ü Additionally to Notes Client à iNotes/Verse 2.0
ü Needs a single Url for all users (different
networks)
ü High Availability (HA) needed

ü ~10k users (non Domino)
ü Oil & Gas industry
ü Evaluating enterprise VPN solutions
Customer D – wanting to implement enterprise VPN solution
ü SafeLinx evaluated against world top #3
competitors
ü Best fit for capabilities needed
ü VPN only

Questions & Answers
Daniel Klas
@panagenda
panagenda
Christoph Adler
@cadler80
Senior Consultant
panagenda
Thomas Hampel
@ThomasHampel
HCL
Ketan Godhaniya
@ketangodhaniya
HCL

Prize Drawing
Sony PlayStation of your CHOICE !
ØAvailable NOW – PS4
ØShipping when available – PS5

Thank you!
Daniel Klas
@panagenda
panagenda
Christoph Adler
@cadler80
Senior Consultant
panagenda
Thomas Hampel
@ThomasHampel
HCL
Ketan Godhaniya
@ketangodhaniya
HCL

www.hcltech.com
$8.6 BILLION ENTERPRISE | 137,000 IDEAPRENEURS | 44 COUNTRIES

Securely connect to your infrastructure with hcl nomad clients using ssl

Recommended

Recommended

More Related Content

More from panagenda

More from panagenda (20)

Recently uploaded

Recently uploaded (20)

Securely connect to your infrastructure with hcl nomad clients using ssl