Hello and welcome to the VMware Anywhere Workspace secure access
and SASE point of presence demonstration video in this video we will be showing how a remote
user can securely access corporate resources both on premises and in the cloud to begin
the demonstration we will start with a remote employee with an unmanaged Windows 10 device
as a result access to a business critical intranet site and Office 365 is not possible
these resources are only accessible to employees outside the corporate network via VMware's per app
tunnel connection and based on conditional access policies configured within Workspace ONE Access
the user logs into the Workspace ONE web portal and attempts to connect to the intranet site
and then launches Office 365 and the user is redirected to Workspace ONE Access
where access is denied because the device is not managed and is located on an untrusted network
in order to focus on the latest Anywhere Workspace features some steps in the process
will not be shown in this video including user onboarding Windows 10 provisioning
and software distribution the user will enroll their device in Workspace ONE UEM
using the Intelligent Hub application as part of the device provisioning steps several updates were
made on the device such as checking for OS updates installing the Workspace ONE Tunnel application
and configuring device traffic rules which define on-demand tunnel connections to the
business critical intranet site and Office 365 resources during the rest of the demonstration we
will show how the authenticated user automatically gains access to the tunnel the benefits of SD-WAN
routing application single sign-on malware application detection with Carbon Black
and automatic alerting and enforcement using Workspace ONE Intelligence now that the device
is managed the user has access to the corporate network and cloud applications because they are
connected to the SASE POP using the Workspace ONE Tunnel in addition to being connected the
device is also blocked from accessing known malicious sites and for normal browsing on
the internet traffic will not be routed through the SASE POP using split tunneling technology
the user launches the Intelligent Hub app catalog and we see the Workspace ONE Tunnel connect the user
launches the intranet site and the browser is now able to resolve and connect to the site via the
per-app tunnel routing through the VMware SASE POP with SD-WAN optimization the user attempts
to connect to Office 365 which is now passing through the per app tunnel via the VMware SASE
POP with SD-WAN thereby meeting the conditional access policy trusted network criteria as a result
Workspace ONE Access facilitates single sign-on to Office 365. Using cloud web security or CWS the
user is also protected from many threats including phishing attacks here we see the user checking
their email and finding a new item that looks like information on new employee discount programs
the user opens the email to find that there are new discounts available at a local car dealership
so they click on the link to get more details since this is a malicious email with a link to
a bad site the request was blocked and the user is informed that their action was not allowed
let's look at the performance of a traditional VPN connection versus a connection over Workspace
ONE Tunnel and SD-WAN on the left we see the user connected over a full device VPN
to the corporate data center before being hair pinned out to the internet for resources such as
Office 365 and other SaaS apps on the right we see the user connecting to the internet
over the Workspace ONE Tunnel via the VMware SASE POP optimized by SD-WAN technology
using the traditional VPN on the left we can see the round trip latency is 101 milliseconds
the download speed is about 18 megabits per second and the upload speed is just under 10 megabits per
second as you can imagine this is not a great connection and it would likely have a negative
impact on the end user experience and productivity using the Workspace ONE Tunnel in SD-WAN we see
reduced latency in the round trip time of 19 milliseconds download speed is much improved
at around 109 megabits per second as is the upload speed now at around 119 megabits per second this
is a significant improvement over a traditional VPN connection enabling the user to be more
productive using web-based apps like Office 365 which translates into a more productive workforce
finally let's take a look at how the user and the corporate assets are protected from malware
installed on the device once malware is detected by Carbon Black the user will be informed that
there is a problem and information will be sent to Workspace ONE Intelligence which will then
instruct the tunnel to disconnect which protects the corporate resources from being infected
here is the same user working on a managed Windows 10 device the user now launches malware
we see the operation is denied and a pop-up from Carbon Black cloud sensor notifies the user that
malware has been detected this malware launch triggers a workflow in Workspace ONE Intelligence
that automatically places the device into a quarantine state and notifies administrators
that malware has been found the user can no longer access any network or internet resources
until an administrator can investigate the incident thank you for watching this demonstration
of the VMware Anywhere Workspace please visit techzone.vmware.com/anywhere-
workspace to learn more about the technologies that were shown during this
demonstration