Apache Guacamole and Parallels Secure Workspace offer a built-in RDP to HTML5 gateway, so it is no wonder these two solutions are often compared. In this blog post, I’ll examine what Guacamole is and how it compares to Parallels Secure Workspace.

Want to see how real users rate Parallels Secure Workspace and Apache Guacamole? Check our reviews on TrustRadius.

What is Apache Guacamole?

Apache Guacamole, a client-less remote desktop gateway, supports standard protocols like VNC, RDP, and SSH.

It is considered clientless because Guacamole delivers apps or desktops via HTML5 once installed on the back end. A free, open-source platform, Apache Guacamole is maintained by the Apache community.

Guacamole is a free, open-source tool with a nice fan base that includes individual users, businesses, and software companies. The latter groups may embed Guacamole in their products including VPNs and firewalls.

Does Parallels Secure Workspace rely on Guacamole?

For starters, I’ll be clear about this: Parallels Secure Workspace does not use (or build on or rely on) Apache Guacamole. The solution has its own proprietary HTML5 gateway. I frequently hear the false claim that Parallels Secure Workspace uses this open-source tool, and while this is true for several competitors in our space, it is certainly not true for our solution.

Is Parallels Secure Workspace an open-source tool like Guacamole?

No, Parallels Secure Workspace is not free nor is it an open-source tool. Rather, Parallels Secure Workspace is a commercial product. Accordingly, we provide support that includes detailed product documentation, technical support and training, commercial models for our channel partners, and more.

That’s the first big difference between Parallels Secure Workspace and the Apache product. Who will you call when you have a problem with Guacamole? What happens when security vulnerabilities are identified? And so on. Moreover, our product roadmap is very security and Zero Trust focused, with capabilities like MFA, SSL, context awareness, usage auditing, and more.

On the other hand, Apache Guacamole was hit by a severe vulnerability in July 2020. Since then, five other CVEs (Common Vulnerabilities and exposures) have been identified and reported fixed.

We have a broad channel ecosystem of certified engineers that extends globally. We also have a set of tested technology partnerships that extend and complement our perimeter.

The similarities and differences between Apache Guacamole and Parallels Secure Workspace

There are also some obvious (and less obvious) differences from the technology perspective. Parallels Secure Workspace was built with simplicity in mind. It is easy to deploy and work with for both Windows and Linux admins (the latter of which are often familiar with the open-source community and likely to be familiar with Guacamole)

Now, let’s take a deeper look into the architecture and features of both solutions:

What are the similarities between Apache Guacamole and Parallels Secure Workspace?

HTML5 gateway and protocols supported:

Guacamole supports SSH, VNC, and RDP. Parallels Secure Workspace supports RDP.

However, Parallels Secure Workspace also supports WebDAV and CiFS. Parallels Secure Workspace’s built-in reverse proxy supports web applications.

Similar features for published applications:

• HMTL5 access (browser-based)
• Virtual keyboard
• Virtual (PDF) printer
• Session sharing and session recording
• MFA TOTP built-in, including support for RADIUS

Identical restrictions for certain applications:

Neither Guacamole nor Parallels Secure Workspace were designed for graphic-intensive applications like 3D rendering, video, or running video/voice calls.

What are the differences between Parallels Secure Workspace and Apache Guacamole?

File Server Access

Parallels Secure Workspace includes access to file servers via WebDAV or CIFS via the files section. Parallels Secure Workspace files can be opened with associated published applications.

One can also share large and small files without the need to upload the file(s) elsewhere with Parallels Secure Workspace (e.g., into a third-party cloud like WeTransfer)

Built-in reverse proxy

Parallels Secure Workspace features a built-in reverse proxy that provides access to internal web applications without needing RDP or remote desktop services.

UX

Look at Parallels Secure Workspace’s intuitiveness and user-friendly look and feel, and you be the judge.

The front-end workspace is very intuitive. You can access files, various applications, and desktops easily.

Multi-monitor capabilities

The multi-monitor capabilities are better developed with multiple options available in Parallels Secure Workspace.

Smart card support (in-app usage)

Parallels Secure Workspace can support the use of smart cards (e.g., eID cards) within applications (e.g. reading an eID card’s info) with its RAH (Remote Application Helper).

The RAH is the only exception to the TML5-centric story. The RAH agent must be installed on the local computers (Windows, MacOS, or Linux). In-app usage is not supported by the free Apache tool.

Otherwise, you don’t need to install other plugins or clients to work with Parallels Secure Workspace!

Security and compliance

Parallels Secure Workspace offers exciting capabilities that make your data even more secure:

• Built-in Context Awareness capabilities based on location or IP address as context access can be turned off for a user (group), giving admins extra control and capabilities.
• Built-in usage audit and anomaly detection that can be connected to an SIEM.
• Single Sign-On (SSO) with SAML or OpenID Connect without sending passwords to the Parallels Secure Workspace appliance.
• Guacamole supports SSO but uses password caching — so I believe the Parallels Secure Workspace setup is more secure.
• SSL encryption is built-in.
• No local data.

Here’s an overview of the Zero Trust capabilities of Parallels Secure Workspace:

Architecture

There are also some key differences from an architecture perspective:

Parallels Secure Workspace is delivered as a virtual appliance for simplicity and speed of deployment. Apache Guacamole requires installing multiple services or multiple docker containers, which need to be linked.

Guacamole leverages an internal translation protocol (RDP Guacamole protocol HTML5), while Parallels Secure Workspace does not use an internal protocol, which makes Parallels Secure Workspace a better, more resource-optimized HTML5 gateway.

Parallels Secure Workspace can enable HA (High Availability), so in a multi-node deployment, it can fail over between nodes if issues arise.

Parallels Secure Workspace is a multi-tenancy solution right out of the box.

The architecture is simple and non-intrusive.

Parallels Secure Workspace vs Apache Guacamole

When comparing Apache Guacamole to Parallels Secure Workspace, we see a lot of similarities, but there are also many differences.

Based on my knowledge of Apache Guacamole —which might not be complete, and I don’t pretend to be a Guacamole expert —this blog post provides a deeper look into the elements our customers are most concerned with.

Interested in making the comparison yourself? Try Parallels Secure Workspace in your environment — download it now.

A multi-cloud approach can help enhance performance and optimize costs by allowing MSPs to select the best cloud platform to deliver solutions their clients need and avoid vendor lock-in. This fosters growth and enables MSPs to navigate a challenging environment more effectively as the managed service provider industry shifts and evolves.

MSPs face a myriad of technical challenges while navigating multi-cloud environments. These challenges span from managing and administrating multiple environments to addressing technical skill gaps, impacting the operational efficiency of MSPs in delivering their services.

See how Parallels RAS can help your MSP adopt an effective multi-cloud strategy and more!

The Benefits of integrated multi-cloud for MSPs

Empowering service delivery

1. Enhancing service offerings. Integrating multi-cloud environments allows MSPs to cherry-pick the best-of-breed capabilities from different cloud providers, enhancing their end-to-end managed services.

2. Cost optimization. Multi-cloud setups enable dynamic load balancing across different providers based on pricing and workload demands. MSPs can shift workloads to a cloud provider with the most cost-effective pricing.

3. Flexibility and scalability. By harnessing a multi-cloud approach, MSPs can boost agility and scalability as per customer requirements. Multi-cloud solutions can maximize resources by spreading workloads across platforms and minimizing the risk of service disruptions and improving overall reliability.

4. Compliance and security. Compliance requirements play a vital role in the choice of vendors, as different cloud providers may offer specific certifications or regulatory requirements catering to a range of client needs. Moreover, multi-cloud environments improve cybersecurity by diversifying risk across multiple platforms, mitigating the impact of potential breaches or downtime while meeting various customers’ security requirements for different types of data.

The complexities of multi-cloud environments

1. Differentiation of cloud services. Variations in interfaces, tools, and functionalities across cloud providers create hurdles in achieving seamless communication across multi-cloud platforms. These complexities intensify when integrating or synchronizing data and applications across multiple cloud environments for multiple organizations.

2. Management and automation. Managing workflows and automation processes across various clouds can be challenging. MSPs often require monitoring and optimization tools to effectively manage deployments, resources, and configurations.

3. Cost optimization. Managing costs across multi-cloud environments poses a significant challenge for MSPs. Different cloud providers have varying pricing structures, making estimating and managing expenses a complex challenge. The management and allocation of customer billing processes across multiple organizations adds an additional layer of complexity.

4. Technical efforts for setup and operation. The deployment and operation of cloud architectures demand substantial technical resources, both in terms of time and cost. Developing the technical skills to maneuver and manage across different clouds amplifies this challenge, impacting the ability of MSPs to provide cost-effective and comprehensive multi-vendor solutions.

Parallels RAS: Addressing Multi-cloud challenges for MSPs

Parallels RAS emerges as a pivotal tool for MSPs seeking to overcome the issues of multi-cloud environments, streamline operations, and mitigate complexities for managing multi-cloud setups, simplifying administration by enabling centralized management.

Parallels RAS can be deployed across multiple public clouds including AWS and Azure and in on-premises data centers, all managed from one single admin console or single pane of glass.

1. Simplified integration. Parallels RAS offers a unified interface, streamlining the integration of disparate cloud infrastructure services. A single management console minimizes the efforts required by MSPs for deployment, management, and administration, particularly in multi-vendor environments. All of this is made easier through a single license model, without the need for additional complex add-ons.

2. Technical skills and training. Parallels RAS minimizes the demand for specialized cloud-specific technical skills. Its user-friendly interface empowers MSPs to efficiently manage multi-cloud environments without extensive upskilling, retraining, or hiring efforts. What’s more, Parallels RAS includes technical training free of charge for all partners, reducing technical barriers and facilitating smoother integration and operation.

3. Facilitating transition. Parallels RAS aids in the transition from single-cloud to integrated multi-cloud setups. Its capabilities enable seamless migration of workloads and services, crucial for MSPs wanting to adopt a multi-cloud approach or switch vendors, avoiding vendor lock-ins.

4. Increased security. Parallels RAS adds to the security advantages of centrally managed published resources with extra layers of protection such as 2FA/MFA and smart card access, client policies, and granular filtering.

As managed service providers look to multi-cloud deployments and solutions, Parallels RAS emerges as a critical partner, empowering MSPs to overcome technical barriers and deliver seamless, value-driven services within multi-cloud environments. Discover how Parallels can empower your MSP!

How much does Microsoft RDS and VDI licensing cost?

The technology and architecture basis below RDS and VDI is complex, and the rules of the game are constantly evolving.

There is a vast matrix of possibilities!

When buying RDP-related licenses, you must work with a good advisor and thoroughly examine the Microsoft Product terms.

Before continuing with this blog post, read our blog post on the options and components of RDP. You should also check out part 2 on accessing and visualizing RDP environments.

Ready to start your journey with Parallels Secure Workspace? Download your free trial now.

The basics of RDS licensing

What is a CAL?

CAL stands for Client Access License in the context of Microsoft Remote Desktop Services (RDS) licensing.

A CAL is a software license granting a user or device the right to access and use Microsoft RDS features and services on a Windows Server. Microsoft defines a CAL as a Client Access License or a license that gives a user permission to access the services of the server. You probably depend on the network server software to perform file and print-sharing functions if your workstations are networked. Therefore, a CAL or client access license may be necessary to access this software legally.

When do you need a Microsoft RDS (Remote Desktop Services) CAL?

You need a CAL when you use Remote Desktop Services (RDS). According to Microsoft, each user and device that connects to a Remote Desktop Session host needs a client access license (CAL).

What about an RDP connection to a VDI (without using RDS)?

An RDS CAL is unnecessary for an RDP connection to a VDI (without RDS).

That said, you will need a Windows VDA (Virtual Desktop Access) license if you have an RDP connection to a VDI (not using RDS).

This requirement is covered with Windows E3 and E5 licenses and can also be purchased on top of Windows if you do not have the E3 or E5 versions.

Windows E3 or E5 is the evolution of the former Windows SA (Software Assurance). The former is typically user-based, while the latter is device-based licensing.

As Microsoft mentions, Windows Virtual Desktop Access (VDA) is an authorization strategy that requires each device seeking access to a Windows virtual desktop in a virtual desktop infrastructure (VDI) to be licensed.

VDA is a feature of Windows E3 and E5 subscriptions, meaning that primary users of devices with such a license can access their virtual desktops at no extra charge.

In a special case where you need to access a Windows client (and thus a VDI scenario) by using an RDS platform, you would require both the Windows VDA license (as part of Windows E3 or E5 or a standalone license) as well as an RDS CAL.

The picture below illustrates this on a high level:

RDS and VDI licensing options at a glance.

RDS CAL licensing options

Now that we have the basics covered, let’s go one level deeper into RDS CAL licensing.

The RD license server

This role is mandatory for Microsoft to be set up in your RDS environment. The RD license server can be deployed on the RD Session Host for small deployments.

For larger deployments, a separate virtual machine (VM) is advised. CALs must be uploaded to the license server.

If an appropriate RDS CAL is available from a license server, the client can connect to the RD Session Host server, provided the RDS CAL is also issued to the client. From there, they can connect to the desktop or apps they want to use.

There are typically grace periods during which the license server will accept connections.

What types of RDS CAL exist?

You must choose between a user CAL and a device CAL when using RDS.

In Microsoft RDS, there are two main types of CALs:

Device CAL (Per device ER DEVICE)

Each specific device has a device CAL assigned to it, allowing any user who logs in to that device to access RDS services. It is a device-based licensing model, meaning one Device CAL is required for each device that needs access, regardless of the number of users who use that device.

• CALs are physically assigned to each device
• CALs are tracked by the license server
• CALs can be tracked regardless of AD membership
• Up to 20% of CALs can be revoked
• CALs cannot be over-allocated

User CAL (Per user)

User CAL is assigned to a specific user, allowing that user to access RDS services from any device. It is a user-based licensing model, meaning one User CAL is required for each user who needs access, regardless of how many devices they use to connect.

• CALs are assigned to a user in AD
• CALs are tracked by the license server
• CALs cannot be tracked within a workgroup
• You cannot revoke any CALs
• CALs can be over-allocated (breach w/ agreement)

Organizations typically choose between User CALs and Device CALs based on their specific needs and the licensing model that aligns with their usage patterns. It’s important to note that CALs are separate from the Windows Server licenses themselves.

In addition to the server license, they are required to ensure compliance with Microsoft’s licensing terms. Failure to have the appropriate CALs can result in licensing violations and potential legal consequences.

Comparison of RDS CALs (for Windows Server 2016)

Not upward compatible.

As I explained in our RDP introduction blog, RDS is tied to a Windows Server version; i.e., the RDS versions of Windows Server 2008R2 and 2016 are hardwired into each platform and are pretty different from each other in terms of functionalities and performance. Now comes the tricky part: the CALs you bought for a Windows Server 2012 deployment will not be accepted on a Windows Server 2016 platform if you didn’t purchase the Software Assurance. However, the 2016 RDS CAL is downwards compatible with RDS 2012.

According to Microsoft, any RDS license server can host licenses from all previous versions of Remote Desktop Services plus the current version of Remote Desktop Services.

However, upward compatibility is possible if Software Assurance has been purchased for the RDS CAL licenses. In that case, you can upgrade to the latest available version.

If Software Assurance was not purchased, new RDS CALs must be purchased.

The following table puts the theory into practice (in case of no Software Assurance):

Microsoft RDS CAL version compatibility.

Ready to explore what Parallels Secure Workspace can do for you? Get your trial download here, and check out Part 1 and Part 2 of our series explaining RDP.

In this post, I’ll explain the benefits and capabilities of Parallels RAS as they relate to RDS and AVD. Read on to learn more and access your free trial here.

Measuring performance in remote sessions

Collecting telemetry data about the performance inside a remote session provides insights into the required CPU, memory, disk I/O usage, and resources. It does, however, not always provide insight into the actual user experience.

Being able to see the actual perceived end-user experience is what makes the difference. EUC Scores do exactly that by measuring and quantifying the perceived end user experience in remote and digital workspaces, both on-premises and in the cloud. They combine both telemetry data and the recorded user experience in a single view.

This blog post highlights two specific features of Parallels RAS that provide additional benefits and an enhanced end user experience —accelerating the enumeration of local files and folders based on Parallels RAS Accelerated File Retrieval and accelerating access to redirected printers with Parallels RAS Universal Printing.

Get your free trial of Parallels RAS now!

Introducing the EUC Score test methodology

The EUC Score involves a range of criteria. As described on EUCScore.com, the scores are compiled based on the following elements:

“When interacting with virtual desktops or remote applications, there are several usability and performance aspects with significant relevance for most users: fast logon, short application load times, high refresh rate of the endpoint display, great graphics quality, unnoticeable user interface response time delays, support of all common media formats, and high session reliability. Only systems that come close to this ideal allow users to naturally emerge into the digital workspace through a range of endpoint devices with different capabilities and form factors.” –EUCScore.com

Benny Tritsch, Parallels VIPP and owner of EUCScore has conducted a series of tests to compare the perceived end-user experience of Parallels RAS (Remote Application Server) with the Native Remote Desktop Services (RDS) and the native Azure Virtual Desktop (AVD) experience.

The Parallels RAS performance tests performed

This series of tests covers the user experience when accessing local files and folders from within a remote session and accessing local printers from within a remote session.

The sessions were conducted with Parallels RAS features enabled and without Parallels RAS features enabled (creating an experience similar to native Remote Desktop Services (RDS) and Azure Virtual Desktop (AVD)).

All tests were conducted using a session host server running in Azure based on Standard_D2s_v5 size, which contains 2 vCPU, 8Gb memory, and a 128Gb disk based on Premium SSD.

Accelerating enumeration of local files and folders

Parallels RAS includes a feature called Accelerated File Retrieval, which significantly speeds up the enumeration of local files and folders. This feature optimizes communication (compared to standard RDP) and adds caching of the folder structure.

This optimization applies to both the Parallels Client for Windows and the Parallels Client for macOS. It also applies to published desktops and published applications in both single-session and multi-session modes.

Parallels RAS makes access to local files 60 times faster

As I mentioned in the introduction, seeing the actual differences in the perceived end user experience is what makes test results and telemetry data come to life. The results of this test were visibly clear.

Without Parallels RAS Accelerated File retrieval, the user must wait over 60 seconds before getting proper access to all content inside folders stored on the local client.

With Parallels RAS Accelerated File retrieval, however, the same process takes about a second to complete.

Beyond the user experience, Parallels RAS Accelerated File retrieval can also enable higher user densities because fewer resources are consumed by the same user actions. When using a public cloud provider like Azure, it allows organizations to save on cloud consumption costs.

The EUC Score visualizer shows the results of these tests in an easy-to-understand, logical way by presenting the perceived end-user experience alongside telemetry data and recorded user activity, including options to zoom into specific quadrants and open side-by-side comparisons.

The screenshot below shows the EUC Score visualizer in action.

The table below contains links to all interactive test results published on eucscore.com.

Parallels RAS Accelerated File Retrieval vs the native RDS and AVD experience

The test results show that when comparing the native Remote Desktop Services (RDS) or Azure Virtual Desktop (AVD) experience with Parallels RAS Accelerated File Retrieval, Parallels RAS clearly wins.

Some key takeaways include:

• Local files and folders are enumerated 60 times faster
• On average, the CPU Queue length is 50% less
• On average, the required disk IOPS is 25% less

More information on Accelerated File Retrieval and other user experience enhancements built into Parallels RAS can be found in this blog post.

Accelerated access to redirected printers

Parallels RAS offers Universal Printing technology, a comprehensive way of dealing with printing in remote sessions. It is designed to enhance the printing experience in virtualized and remote environments.

Some of its features include compression, multi-functional support, increased performance, and an optimized user experience. This test specifically measures the time it takes to get access to redirected printers upon reconnecting to a disconnected session, a very common scenario when dealing with published applications and desktops.

Parallels RAS makes access to redirected printers five times faster

I’ve established that to answer the question of whether a feature makes a noticeable difference in accelerating a specific action for the end user, investigating the perceived user experience is key. The result of a test of the printing features shows a significant difference in perceived user experience.

Without Parallels RAS Universal Printing getting access to eight printers takes 16 seconds upon reconnecting. With Parallels RAS Universal Printing, that same action takes less than three seconds.

In the scenario with Parallels RAS Universal Printing, fewer resources are consumed, which can lead to less user density and ultimately cost savings.

Beyond these aspects, Parallels RAS Universal Printing also overcomes issues in certain scenarios where third-party applications require printers to be available before launch. This scenario may result in specific third-party applications failing to launch or require a restart once the local printers are redirected again. Such occurrences significantly affect the overall user experience as perceived by end users.

The EUC Score visualizer presents this result comprehensively by showing the perceived end user experience alongside telemetry data and recorded user activity, including options to zoom into specific quadrants and open side-by-side comparisons.

The screenshot below shows the EUC Score visualizer in action.

The table below contains links to all interactive test results gathered and published on eucscore.com.

Parallels RAS Universal Printing vs the native RDS and AVD experience

The test results show that when comparing the native Remote Desktop Services (RDS) or Azure Virtual Desktop (AVD) experience with Parallels RAS Universal Printing, Parallels RAS clearly wins.

With Parallels RAS:

• Printers are reconnected 2 times faster.
• The peaks in disk read bytes are 89% lower
• The peaks in disk write bytes are 27% lower
• The peaks in disk IOPS are 82% lower

More information on this and all the other enhancements that Parallels RAS Universal Printing provides can be found in this blog post and by watching this video.

Take advantage of these and many other features included in Parallels RAS to enhance the user experience of virtual applications and desktops through a unified workspace.

Remote Desktop vs. RemoteApp 

Parallels Secure Workspace with a mix of RemoteApp and Remote Desktop-based services, including:

1. Bob50 deployed as RemoteApp.
2. Windows 10 deployed with BOB50 as a local app.

Opening a published RemoteApp application in Parallels Secure Workspace.

Opening the same application in a published Remote Desktop in Parallels Secure Workspace.

How do end users access their VDI or RDS environment?

Example: Connecting to RDP on a Windows 10 device.

From the client side, using an RDP client is the most used access method by far.

This mechanism is available from Microsoft on Windows, but there are other versions available on other platforms, such as Linux and MacOS). This client needs to be installed on the end user’s device.

For most end users, the initial setup and connection will require help from the IT department. Furthermore, it requires additional security measures to be in place, as discussed in this article about the WannaCry ransomware attacks.

Example: Connecting to RDP on a Windows 10 device.

In the past few years, access to virtual apps and desktops via HTML5 without needing dedicated client software has become increasingly popular.

In this case, the browser becomes a very efficient client.

Because nearly all devices are equipped with browsers these days, browser-based access doesn’t require the installation or management of additional software.

The latest version of RDP comes with RDWeb, which offers HTML5 capabilities. This is only available on the most recent version of RDP and therefore is not available on versions older than Windows Server 2016. Read more on HTML5 as the client of the future in this blog post.

Since the beginning, Parallels Secure Workspace has been based on using the browser as the sole client, delivering RDP in HTML5 via the proprietary Parallels Secure Workspace HTML5 Gateway.

Discover how Parallels Secure Workspace can add layers of value to your RDP deployments. Start your free trial now!

The typical components of an RDP deployment

Until Windows Server 2019 was released, Remote Desktop Protocol was closely tied to the version of Windows Server used. For example, this meant if your applications were running on Windows Server 2008, you would be bound to the capabilities (and limitations) of this version of RDP.

RDS itself is the combination of several components or roles, and not all roles are required in every situation. In some cases, the components or roles involved will require additional infrastructure to be made available.

However, for a simple VDI connection (without RDS), you don’t need all these roles. Here is the overview:

1. Remote Desktop Session Host (RDSH)

RDSH enables a server to host both RemoteApp programs and session-based desktops (Remote Desktop). Users can connect to the RD Session Host servers in a session collection to run programs, save files, and use resources on those servers.

Users can access the Remote Desktop Session Host server by using the Remote Desktop Connection client or by using RemoteApp programs. Note: for VDI, you don’t require RDSH.

2. Remote Desktop Virtualization Host (RDVH)

RDVH enables to connect to virtual desktops by using RemoteApp and Desktop connection. It cuts costs by enabling the management of desktops from one place and reduces the need for advanced client hardware. Users can access their desktops from anywhere, enabling remote work and increasing flexibility. RDVH also simplifies data backups and disaster recovery.

3. Remote Desktop Connection Broker

This functionality allows users to reconnect to their existing virtual desktop, RemoteApp programs, and session-based desktops. It enables even load distribution across RD Session Host servers in a session collection or across pooled virtual desktops in a pooled virtual desktop collection. It also provides access to virtual desktops in a virtual desktop collection. The Connection Broker is not required for very simple deployments.

4. Remote Desktop Gateway

A capability that enables authorized users to connect to virtual desktops, Remote-App programs, and session-based desktops over a private network or the Internet. Basically, it enables secure access from a public network into a private network—more specifically to the session hosts, brokers, and VDIs.

5. Remote Desktop Web Access

Remote Desktop Web Access enables users to access RemoteApp and Desktop Connection through the Start Menu or through a web browser. RemoteApp and Desktop Connection provide users with customized views of RemoteApp programs, session-based desktops, and virtual desktops.

For web browser-based access, you can picture a webpage that displays published applications and desktops. When the user clicks to open, it will traditionally trigger the locally installed RDP client to launch and connect.

6. Remote Desktop Licensing

Remote Desktop Licensing enables a server to manage the RDS client access licenses (RDS CALs) that are required for each device or user to connect to a Remote Desktop Session Host server. RDS CALs are managed using the Remote Desktop Licensing Manager application.

See how Parallels Secure Workspace adds layers of value and security on top of RDP

Parallels Secure Workspace is a unified workspace and a workspace aggregator. It offers HTML5 browser-based access to Windows applications and desktops, Linux-based desktops, web and intranet applications, SaaS applications, and files.

For Windows-based applications and desktops that are deployed in server-based computing, Parallels Secure Workspace serves as a layer on top of RDP, adding security and value on top of the RDP foundation.

Aggregate access

Parallels Secure Workspace doesn’t just provide access to Windows applications and desktops, but also to files, intranets, web applications, SaaS, Linux desktops and apps, and more.

Enhanced security

Naked RDP is vulnerable to cyber-attacks. PSW can minimize these risks — multi-factor authentication, SSL encryption, and usage auditing are built-in.

Rich HTML5 experience

Parallels Secure Workspace has perfected HTML5 access over the years with useful additions such as a virtual printer, support for function keys, and in-app downloading.

Open API and multi-tenant

In contrast to RDP, Parallels Secure Workspace is multi-tenant and fully Open API-based. Making it perfect for ISVs, MSPs, and CSPs.

Collaboration functionalities are baked-in

With Parallels Secure Workspace, you can share access to application sessions and share documents of any size in a secure and controlled manner.