The Pano Device

The Pano Device is often referred to as a zero client because unlike traditional thin-clients is has no CPU, no memory, no operating system, no drivers, no software and no moving parts. The Pano device serves to connect peripheral input-output devices - a keyboard, mouse, VGA display, and audio – along with other USB peripherals to an instance of the Microsoft Windows operating system running on a virtualized server in the datacenter. Pano Device is also very power friendly, consuming only 3% of the energy consumed by a traditional desktop computer.

Pano Devices connect using standard IP communications over local area networks via an Ethernet port making them easy to integrate into existing LAN infrastructure. The Pano Device can be thought of as using the LAN as a long KVM extension cord to move the display and input to the virtualized PC running on the datacenter server.

Pano Devices are also stateless – in other words, the Pano Device does not store anything at all about the user, the virtual machine, or any data used by it. The statelessness of the Pano Device provides users with other flexibility: for example they can suspend their personal virtual machine attached to one Pano Device and them immediately resume use at a different Pano Device – for example when moving from an office to a conference room to make a presentation – no longer do you need to equip every user with laptops to provide needed mobility.

The clean and functional design of the Pano Device was created by Whipsaw, one of the world's leading industrial design firms, helping it fit into modern office environments.

Deploying Pano Devices

To deploy a Pano device, simply connect it to a monitor, keyboard, mouse and other USB peripherals, along with an Ethernet network and power using the supplied adapter. There is no configuration to perform, no firmware to update, and no software to download.

As soon as a Pano Device is connected to a network, a logon screen appears. Users enter their user ID and password (managed by the Pano Manager) Windows credentials and are automatically connected to their virtual machines. From there on, it's the same Windows experience.

Pano peripherals and network connections

Pano can support a video display, keyboard, mouse, additional USB peripherals, plus external audio speakers or headphones.

Supported Peripherals	Connectors
Video display (resolutions up to 1600x1200)	One VGA
Ethernet (10/100 Mbps)	One RJ-45
USB peripherals	Three USB 2.0
Audio Out	Internal speaker
Audio Out	One mini-jack
Audio In	One mini-jack

 

Peripherals attached to the Pano device operate the same way they do when attached to a traditional PC. For instance, when users want to read data from CD, they simply attach an external CD reader via one of Pano's USB ports. If the user is authorized to use the peripheral, the CD drive will appear to Windows as if it was locally attached. The only drivers that are used are the peripheral's native drivers, and these drivers only need to be installed on the Windows virtual desktop, not on the Pano.

Pano supports LAN deployments where both the servers running the virtual desktops and the client end-points are on one LAN. For best performance we recommend that servers hosting Pano virtual machine be connected to network switches by at least 1Gbps Ethernet while Pano Devices a should be connected to network switches by 100Mbps Ethernet. Pano devices do not work with Power over Ethernet systems and require a local AC outlet for the included power adapter.

Security and the Pano

The Pano Device is secure because it does not run an operating system or any other software. Because there is nothing in a Pano Device that can be infected by a virus or have malicious code installed, it doesn't need to be scanned for vulnerabilities or exploits. And while the virtualized Windows OS is still vulnerable to malware the ability to easily drop an infected virtual machine and provision a clean copy, even without IT intervention, makes recovering from malware infections simple and foolproof.

Even when a peripheral such as a USB thumb drive is connected, the Pano Device can remain secure. Peripherals work only when the user is authorized via policies enforced by the Pano Manager. If the user isn't authorized, Windows doesn't even see the peripheral that is connected to the Pano Device. If a user is authorized, the peripheral is connected directly to Windows using whatever native drivers are required. Pano enforces fine-grained access policies based on user group membership, USB device class, and operation. As an example, a user may be authorized to read from a CD, but not write to it. This policy allows users to copy files or load software onto their virtual desktop, but prevents data from leaking out. Even when users are authorized, Pano can record USB operations so that the business can keep track of all its information assets.

Next: Pano Manager

Pano Manager

Pano Manager is the central component of the Pano architecture and handles the following:

• Discovers and controls Pano devices
• Controls the virtual infrastructure and makes sure virtual desktops are available
• Connects users to their assigned virtual desktops
• Monitors status of user sessions and takes corrective action when necessary

Central management for virtual desktops

Pano Manager is continually discovering and controlling Pano devices to ensure users can always access their virtual desktops. Once a Pano Device is discovered on the network, Pano Manager tells the Pano Device to display a login screen Users enter their Windows credentials and are automatically connected to their virtual machines. From there on, the Pano Desktop Service drivers provide the connection to the Pano Device to deliver the same Windows experience users would get from a desktop PC.

Pano Manager ensures a secure and reliable logon process by integrating tightly with directory services such as Microsoft Active Directory. Rather than maintain a separate database of users that might get out of sync, Pano queries Active Directory directly for each logon attempt. IT administrators only need to perform user account management in one place: Active Directory.

Pano Manager integrates with a virtualization manager such as VMware VirtualCenter in order to track the status of desktop virtual machines and control their availability. Pano Manager determines which virtual desktop is assigned to a user based on the user's group membership in Active Directory. If the user's virtual desktop happens to be powered off, Pano Manager can automatically start the virtual desktop machine and connect the user once the desktop is ready.

Pano Manager itself runs as a VMware virtual machine on one of your datacenter servers simplifying deployment and further improving hardware utilization.

Web-based administration

Pano Manager includes a web-based Management Console that allows IT staff to centrally administer their entire Pano deployment. The Pano Management Console provides views and management functions for Pano devices and virtual machines. It also delivers a centralized log facility and simple setup page.

Enabling users with self-service virtual machine recovery

Pano Manager also provides out of band management and support for each session. If a user experiences a problem with the desktop virtual machine, the user simply presses the single button on the Pano Device and is presented with a choice of corrective actions. These corrective actions are offered by the Pano Manager; since they are implemented by the Pano system outside of the virtualized Windows OS the corrective actions are always available, no matter what happens to the desktop virtual machine. This way a user who experiences a severe problem with the operating system (such as a complete freeze or halt) can use the Pano button to initiate a reboot or complete refresh of their virtual machine.

Flexible use models that match business needs

Pano Manager supports a variety of usage models, each of which is appropriate for different businesses. For example, a Call Center that comprises multiple agents performing the same tasks and running the same applications is best suited to the Pooled Collection model. In this model, the Pano Management Server maintains a common set of identical virtual machines. Any individual user is assigned an arbitrary virtual machine each time they log in and start a new session. Pano Manager keeps track of how many virtual machines are unused and will automatically provision additional virtual machines when the number is too low, allowing the system to accommodate surges in user demand.

Another model-the Cloned Collection model-is appropriate for Knowledge Workers who require a dedicated virtual machine, but can still benefit from simplified management from a common template. With this model each user is permanently assigned a specific virtual desktop; however, the virtual desktops all originate from the same template. In this usage model Pano can automatically provision a new virtual desktop and assign it to a new user, taking the manual steps out of the process completely.

Finally, the Custom Collection model is most appropriate for Power Users who require a dedicated virtual machine and the ability to completely customize their work environment. In this model Pano can support virtual machines that are built from scratch, built from a template or created by converting a physical machine to a virtual machine.

Next: Desktop Service

Pano Desktop Service

Pano Desktop Service is a lightweight Windows service residing within each desktop virtual machine that links peripherals attached to the Pano Device to the unmodified Windows drivers installed in the virtual machine OS.

Pano Desktop Service is also a key component in supporting USB peripherals. When a USB peripheral such as a USB thumb drive is inserted into a Pano device, Pano Desktop Service and the Pano Manager work in conjunction to enforce the defined usage policies. The Pano Desktop Service will allow the USB operation and connection into Windows only if the user is authorized for the particular device and operation.

Supported USB Devices

In addition to support for USB keyboards and mice, Pano Desktop Service lets you use the three USB ports on the Pano Device to connect the following USB device types, including composite devices (often called, all-in-one solutions):

• USB flash drives, hard drives and mass storage devices
• USB CD/ DVD readers/burners and floppy drives
• printers and scanners, including business card scanners
• USB hubs and USB-to-serial converters
• RIM BlackBerry and Apple iPod
• touch screen displays
• and other USB devices

The Pano Desktop Service even allows the use of native Windows drivers for a wide range of other specialized USB peripherals devices such as credit card readers and modems used in retail point of sale terminals or data acquisition devices used on manufacturing plant floor equipment. Support for native drivers means that generally if it runs on a PC, it will run on a Pano.

Next: Pano Remote

Pano Remote provides Anytime, Anywhere Access

Pano Remote is a new addition to the Pano product line with the 2.6 release that allows Pano users to reach their Pano desktop virtual machine from a remote location over a wide-area-network like the Internet. Pano Remote lets users temporarily access their Pano virtual desktops when they are away from the office, whether working in the evening or when travelling by simply plugging a special secure USB key into any Microsoft Windows PC. Pano Remote can also help you inexpensively extend your Pano virtual desktop deployment to larger populations of transient users, such as guest users, users needing limited and intermittent access to a virtual desktop, or mobile temporary workers, without requiring you to provide them with a Pano device to take with them. Anywhere and anytime they can find a Windows PC with a network connection, they can use their Pano desktop.

Pano Remote provides access to a virtual desktop OS either in a window or using the full screen and administrators can set policies in Pano Manager to allow or restrict access to local printers and drives along with controlling transfer of data on the clipboard between the virtual and host operating systems. Pano Remote is delivered already installed on a secure USB key and can be used with either Microsoft Windows XP or Windows Vista on the host desktop computer.

Pano Gateway

Pano Gateway is a communication mechanism bundled with Pano Remote that provides secure connections from external networks using Microsoft Windows Server 2008 Terminal Services Gateway as supporting infrastructure. Pano Remote does not require the use of VPN software or hardware, but instead uses standard secure protocols (RDP via HTTPS/Secure Sockets Layer) to connect to the Pano Gateway server and in turn to the virtual desktops, simplifying the configuration of firewalls and security policies. Pano Gateway ensures that users get suitable performance in the remote Windows desktop, even over connections like consumer-level DSL or cable modems although performance will be better over higher speed connections.

Easy, Inexpensive Remote Access to Virtual Desktops

Pano Remote is priced at only $35 per USB key making it an economical way to extend the use of your Pano virtual desktops. And because it doesn't require expensive and complex VPN hardware and software it can ensure that you get secure and reliable access without increasing the burden on your IT staff and budget.