Expand Beyond's Mobile Suite for Microsoft 2.3 reviewed [Archive]

Philip Colmer

01-05-2004, 10:05 PM

There are many products available to assist with remote systems management, from the telnet server, Terminal Services, Internet-connected KVM devices, through to hardware built into servers themselves. The drawback to most of the products available, though, is that they (not unreasonably) reproduce the screen on the server. This can make the system unwieldy to manage through the relatively small display of the Pocket PC. What would be better would be an administration product that is tailored for use on mobile devices. Enter Expand Beyond's Mobile Suite … <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminIcons.gif" /> <!> Expand Beyond have a portfolio of remote management products that can be accessed through Web browsers, including customised layouts for Pocket PCs. The Mobile Suite for Microsoft contains two of those products, specifically for the Microsoft server platforms. About This Review I've tried several different approaches to this review, principally because the capabilities of the product are so extensive. At the end of it all, though, I've decided that I do need to explain what the product is capable of doing. To miss a feature might mean that you decide not to buy the product because you think it can't do something you want. To that end, therefore, this is a big review. I've tried to keep the number of screenshots under control, but the review is still big. A True Story Friday - the entire IT Department is out enjoying a Christmas lunch together. The waxing lyrical about the Lord of the Rings is interrupted by a pager going off - software monitoring the Internet Mail Service on the Exchange 5.5 server has noticed that the service has stopped. The monitoring software had been installed because the IMS has a tendency to stop without warning and it can take a while to realise that you haven't received any email for, ooh, the last 30 seconds :wink: Thirty minutes later and a second monitoring system pages the poor on-call person to tell him that SMTP access isn't working, confirming that the IMS has stopped running. There aren't any other alerts, so it is just that service and not the whole Exchange server. The problem, though, is that none of us have got any means of fixing the problem whilst still in the restaurant. There was no choice but to finish the meal, drive back to the office & restart the service. If only … Mobile Suite Overview Expand Beyond's Mobile Suite for Microsoft consists of two products: PocketDBA and Pocket Admin. The products both work in a similar way, namely providing a secure Web interface to administrators for management of the underlying systems. The Web interface has been designed with mobile devices in mind and the server redesigns the layout of the interface according to the device you are using. PocketDBA provides an administrator with live access to any DB2 UDB, Oracle, SQL Server or Teradata database. PocketAdmin allows an administrator to control any Windows environment, from Active Directory, Exchange and IIS through to workstations and servers, with secure command line access to any device that supports telnet. The one exception to the last item is Windows - SSH must be used for command line access to any Windows systems. The cornerstone of the suite is the XBanywhere server. This can be installed on a Linux, Solaris or Windows server - more details can be found near the end of this review in the Specifications section. It is the XBanywhere server that you connect to with a browser. It then communicates directly with the database server (if it is PocketDBA that you are using) or a Windows gateway interface (if it is PocketAdmin you are using). For the purposes of this review, I installed the XBanywhere server on a Windows 2003 server and the Gateway and SSH software on a Windows 2000 server. At the moment, it is not possible to install the Gateway software onto Windows 2003, but Expand Beyond are working on this. Installation of the XBanywhere server is very straight forward - just run the installer, point it at your licence file and accept the defaults, unless you want to do things like change the port numbers used for the Web interface. Expand Beyond's documentation takes you through the prerequisities for the product. This includes thinking about how you are going to secure the communications between the Web browser & the XBanywhere server through SSL, how to control access with RSA SecurID and what ports you need to open on the firewall to permit remote browser access. It is recommended that the server itself is located in the DMZ part of your network topology. Installing the Gateway server can be a little trickier, primarily because of the setting up that needs to be done beforehand:<ul><li>For command-line access to the Windows servers, an SSH server needs to be installed. Expand Beyond do not provide one but do make recommendations instead; <li>If you want to manage Exchange servers, the Exchange administration tools need to be installed on the Gateway server hardware before the Gateway server itself is installed.</ul>Expand Beyond recommend that the Gateway server is installed on your main network and not in the DMZ - in fact, they do not support having the Gateway server in the DMZ. In addition, they recommend the use of SSL to encrypt communications between the XBanywhere server and the Gateway server. The documentation provides step-by-step instructions to achieve this. It is possible to use an internally generated certificate for this purpose. Once all the software has been installed, you need to configure the XBanywhere server so that it knows which machine is the Gateway server and which databases you want to administer. This is done by pointing a browser at the XBanywhere server and entering the administrator username & password. Adding an SQL server to the list of application servers is a bit tricky and the documentation, for once, isn't entirely clear on the subject. There are quite a few bits of information that are required, as can be seen in Figure 1. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASetup.gif" /> Figure 1: Adding a new SQL server. The part that the documentation particularly skips is the port number to use. You can try to infer it from a SQL screenshot that the documentation contains, but it is wrong 8O The screenshot says "1108", but you actually need to use 1433. The "protocol" option is used by PocketDBA when submitting OS commands to the server. As with the Gateway server, only SSH is supported with Windows systems. If you want to administer databases on other operating systems (e.g. Oracle on Solaris), you can use telnet or SSH. The username & password (used for verification purposes at this point) must be valid within the database environment. It is not possible to authenticate against the database server with a Windows account. With the current release of the software, it is necessary to configure the system in advance for each separate database that you want to manage (e.g. Northwind, pubs, master, etc). If you’ve got a lot of databases on a single server, this can get a bit unwieldy, but the Web interface does remember the values you've used after you add a database, so there isn't as much to fill in when you add the next one. Expand Beyond are planning a new release in 2004 that will allow you to specify the database server and then select the database that you want to manage. Setting up the XBanywhere server to manage Windows systems is relatively straightforward. If you want to manage a stand-alone system, all the product wants to know is an alias for the system and its hostname. If you want to manage systems within an Active Directory setup, you need a bit more information, as can be seen in Figure 2. As with SQL databases, the alias is for you to recognise the system by. The forest is the domain name of the Active Directory root and the URL is the address of the gateway server. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminSetup.gif" /> Figure 2: Adding a gateway server. So, you've installed SSH, the XBanywhere server, the Gateway server, configured everything … time to start administering! <PAGEBREAK> PocketDBA When you first point your Web browser at the application administration interface on the XBanywhere server, what you see will depend on what you are licensed for. For example, Figure 3 shows the login screen for my test system - licensed to administer SQL Server and to use PocketAdmin. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBALogin.gif" /> Figure 3: Logging into the XBanywhere server. The tabs across the top of the web page allow you to select the login for either PocketDBA or PocketAdmin, or to see the XBanywhere version information. Logging into PocketDBA is straightforward - enter an authorised SQL Server username & password and click on Login. Assuming the information is valid, you should then see a screen something like Figure 4. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAIcons.gif" /> Figure 4: The facilities within PocketDBA. The layout of the screen is very similar when you click on any of the available options. The top row of buttons takes you to the SQL page, the Shell page and the Logout page. If you are working on a specific database, the logout button is removed and clicking on the database name instead, takes you to the logout option. Beneath the buttons is a "crumb trail", showing you where you are in the hierarchy of the interface. Some of the options can go down two or three levels of interface, so it is useful to be able to specify how far back up you want to go. Finally, the page contains the content for the option you are currently looking at. If there is too much content to comfortably display, even with scrolling, the software paginates it. You can then step backwards & forwards through the pages of data, or scroll down to the bottom of the screen and enter a page number to jump to directly. An example of the various aspects of the user interface can be seen in Figure 5. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAInstanceLogsDetail.gif" /> Figure 5: How the user interface looks. The functionality provided by the various icons shown in Figure 4 will now be looked at in more detail. Connection Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAConnection.gif" /> Figure 6: Connections. The connection browser allows viewing of all current database users and running processes. From here, you can monitor existing locks, view resource usage for the current connection and examine processes that may be blocking other sessions. It is possible to kill sessions from this option. Security Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASecurity.gif" /> Figure 7: Security. This allows you to manage the users, roles, profiles and their permissions. You can tap on a user or role name to look at more detail. From there, you can manage, assign or revoke permissions of users and roles. Objects Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAObjects.gif" /> Figure 8: Objects. The objects browser allows you to look at every object stored in the current database, e.g. tables, views, stored procedures, rules, defaults, user defined data types and user defined functions. It is also possible to modify much of what can be seen, for example the permissions on a table, or rebuild an index on a database. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAObjectsTable.gif" /> Figure 9: Drilling down to a table. <PAGEBREAK> Storage Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAStorage.gif" /> Figure 10: Storage. This allows you to manage the physical organisation of the databases. From here, you can manage filegroups, data files and transaction logs. SQL Command Center <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASQL.gif" /> Figure 11: SQL Command Center This feature allows you to execute any of the commands that you might execute using the SQL Query Analyzer on a Windows PC. It allows you to create and execute any ad hoc SQL statement. These commands can also be saved for future execution - a very powerful feature, given the difficulties of entering complex text on a Pocket PC :wink: The software allows you to save the command in one of three places, depending on how you want to re-use it: accessible from any user on just that database, accessible from any database by just the current user or accessible by just the current userid on just the current database. The documentation mentions a fourth option - global (any database, any user) - but it isn't available in the user interface, so it isn't clear whether the feature has been removed, never implemented or is still on its way. The SQL command feature becomes even more powerful when you use the ability to have variables in statements. When you execute the statement, you are prompted for the variable's value. When you first enter the SQL screen, the statement shown is the last SQL statement executed by PocketDBA. For example, if you were looking at the jobs & then clicked on the SQL button, you might see a screen like Figure 12. Personally, I'm not sure what Expand Beyond were thinking of when they decided this would be a good idea. Whenever I've gone into this screen, the first thing I've had to do is to cut the existing text :roll: <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASQLJobs.gif" /> Figure 12: The SQL screen after the Jobs screen. Jobs Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAJobs.gif" /> Figure 13: Jobs. The jobs browser allows you to view existing jobs and execute, stop, start, enable and disable jobs. From here, for example, you can manually run a pre-defined backup job or a DTS package that has been stored on the system. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAJobsDetail.gif" /> Figure 14: Detail for the backup job. Instance Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAInstance.gif" /> Figure 15: Instance options. This part of the product allows you to modify the instance configuration properties, view server logs, maintenance plans, all scheduled jobs and backup devices. The interface for the Jobs section is extensive in the amount of detail you can see, but is limited in terms of what you can do. You can enable, disable, start or stop jobs. You can drop parts of a job, e.g. a step or a schedule. However, you cannot edit a step or schedule. From a remote administration point of view, I suppose this is reasonable. I don't think I'd want a DBA to be making large changes remotely without having thought things through. I would view a product like this as being used for emergencies more than anything else. <PAGEBREAK> Database Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBADatabase.gif" /> Figure 16: Database information. The database browser is used to view general database information, change database settings or grant database level permissions to a user or role. Shell Command Center <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAShell.gif" /> Figure 17: Shell command center. This allows you to execute commands in the OS environment on which your database resides. In the configuration under review, this would be Windows, but the Expand Beyond product supports Solaris & Linux as well. You can enter multiple lines of commands, which is useful if you need to do things like change directory, and then click on the submit button. There are options to turn off the row-based formatting (so you just get the output without the tables), setting a timeout, turning on or off the support for variable substitution and saving the command for future use. As with other output, the results are paginated. Unfortunately, there seemed to be a bug in the software so that I couldn't get the subsequent pages of output to display. Clicking on the Service Manager tab takes you to Figure 18. Unlike the service management feature built into PocketAdmin (more on this below), this feature is limited to the services used by the SQL server. Rather than just having the links shown, I would have preferred visual confirmation of the current status of the services. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBAShellServices.gif" /> Figure 18: Managing the SQL services. Tuning Browser This provides you with a variety of statistics from the system to help you tune or reconfigure parts of the server. Some of the screens are shown below. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASQLTuningSQL.gif" /> Figure 19: Data and procedure cache statistics. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASQLTuningLog.gif" /> Figure 20: Log statistics. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketDBASQLTuningCache.gif" /> Figure 21: Cache usage statistics. It is a shame that Figure 21 doesn't fit properly into the browser. The "Statistic" column could clearly be made narrower, which would help to bring the "Value" column back onto the screen. <PAGEBREAK> PocketAdmin If, when you connect to the XBanywhere server, you want to log into PocketAdmin instead of PocketDBA, a valid login presents you with a list of the domains that can be managed from the gateway server selected or you can choose a "non-directory machine". This phrase describes a server or workstation that is not a member of an Active Directory domain. This allows you to manage, for example, NT 4 servers. If you choose a domain, the page will change to something like Figure 22. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminIcons.gif" /> Figure 22: The facilities within PocketAdmin. As you can see from the previous screenshot, PocketAdmin works on two levels - the domain and the computer. The domain configuration affects those entities stored in Active Directory. The computer configuration affects entities that are local to the selected computer. This can include additional functionality such as Exchange and IIS. The process to select objects such as users or computers is done through the OU browser, as shown in Figure 23. This is a flexible interface that allows you to step down into the OU tree structure to find the object you are looking for. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminOUbrowser.gif" /> Figure 23: Browsing organisational units & containers. As with PocketDBA, the screens produced by PocketAdmin follow a similar structure. The top portion of the screen consists of the domain link (allowing you to choose a different domain or a non-directory computer), the computer link (allowing you to choose a different computer within the current domain), the logout button (allowing you to log off from PocketAdmin) and the Shell button (giving you access to the command line interface. Following the structure set down by PocketDBA, the rest of the screen contains the crumb trail and the content, with pagination buttons if required. The functionality provided by the various icons shown in Figure 22 will now be looked at in more detail. Domain Users Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminUsers.gif" /> Figure 24: Domain users. This browser allows you to add users to the currently selected domain, or manage existing users. Drilling down the OU to select a user provides you with details on that user including mailbox information if Exchange is being used in your organisation. An example is shown in Figure 25. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminUser.gif" /> Figure 25: Managing a user. From here, you can change the user's password, see what groups the user is in, create, move or delete the user's mailbox, allow or reject email from specified addresses or set mail size limitations. You can also enable, disable or delete the user. Note that you cannot change group membership here. You have to do that with the next tool. Domain Groups Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminGroups.gif" /> Figure 26: Domain groups. From here, you can manage the membership of existing groups. It is not possible to add or delete groups. Domain Printers Browser I could not get this feature to work on my test installation. That said, when it does work, you see what printers have been published in Active Directory. From there, you can see what jobs are in the queue for a given printer and, if there are any, restart, pause or cancel a job. Domain Shares Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminShares.gif" /> Figure 27: Domain shares. This feature allows you to see a list of all shares that have been published to the Active Directory. It also allows you to publish further shares. There is no facility for removing published shares. <PAGEBREAK> Local Users Browser As with the domain users browser, here you can add, delete, enable & disable users, change their password and see which groups they are a member of. Local Groups Browser As with the domain groups browser, you can see what groups exist and manage the membership of those groups. You cannot delete or add groups. Local Printers Browser As with the domain printers browser, you can see what printers are defined for the currently selected computer. If there are any jobs in the queue for a printer, you can pause, cancel or resume the job. Local Shares Browser Here, you can see all of the shares defined for the currently selected computer. For non-administrative shares, you can see further details of the share and manipulate the permissions of the share. It is also possible to add new shares. Local Computers Browser It is from the local computers browser that you can see general information about the system, browse the defined environment variables, shutdown, reboot or power off the computer and manage IIS or Exchange. It should be noted that only IIS 6 can be managed - earlier versions do not support the programming interfaces that Expand Beyond are using. IIS management is currently limited to stopping, starting or pausing the selected Web site within the IIS configuration. As can be seen from Figure 28, the software doesn't display the proper name for each Web site. Instead, it displays an internal IIS name, which isn't very helpful if you've got more than one site defined. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminIIS.gif" /> Figure 28: Managing IIS. If the selected computer is running Exchange, two additional tabs appear, allowing you to review the queues (Figure 29) and the connectors (Figure 30). If you are using Exchange 2003, you can list all of the messages that are in a queue and freeze, thaw or remove individual messages. The table layout for the queues could do with a bit of time spent improving it - taking up five lines for each row means that (a) you don't see many queues on a screen, (b) you lose the column headers off the top of the screen too quickly and (c) it is just too darn hard to figure how which cell matches onto which column. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminExchangeQueues.gif" /> Figure 29: Exchange queues. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminExchangeConnector.gif" /> Figure 30: Detail of an Exchange connector. Local Events Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminEvents.gif" /> Figure 31: Events browser. The local events browser allows you to drill down the events log of the currently selected computer. As you can see from Figure 31, the list of event logs shown is dependent on the logs available from the computer. The server selected in this example is a Domain Controller. Selecting a log takes you down to the next level, where you can clear the log or page through the events (Figure 32). You can then click on a specific event entry to see the full detail (Figure 33). <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminEvents2.gif" /> Figure 32: Looking at the application events. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminEvents3.gif" /> Figure 33: Looking at a specific event entry. <PAGEBREAK> Local Processes Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminProcesses.gif" /> Figure 34: Process browser. From the processes browser, you can click on a process to get further information on the process or to kill that process. Some of the additional detail available can be see in Figure 35. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminProcessDetail.gif" /> Figure 35: Process detail. Local Services Browser <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminServices.gif" /> Figure 36: Services browser. From the services browser, you can select the service of interest and then stop or start it, or change the startup method for the service (automatic, manual or disabled). Shell Command Center This is identical to the shell command center feature offered by PocketDBA. Performance Monitoring <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminPerfmon.gif" /> Figure 37: Browsing the performance categories. To utilise the performance monitoring feature, you can to start by selecting the performance category required. Once you've done that, the criteria for that category will be displayed. Once you've selected the criteria, the monitoring process will start and you can view a graph that tracks the results, as shown in Figure 38. <img src="http://www.pocketpcthoughts.com/images/web/2003/PocketAdminPerfmon2.gif" /> Figure 38: Page faults being monitored. Unlike PerfMon on a Windows PC, only one criteria can be monitored at a time, and the system will only keep samples for up to a minute, after which you just see the last minute's worth. Those limitations aside, this is a fantastic way of being able to drill down into specific areas of interest. On a Pocket PC, it can be a bit awkward paging through the options available, so it might be useful in a future version to be able to bookmark favourite categories & criteria to make it easier to pick the monitors you tend to favour more than others. PocketAdmin Console Although both PocketDBA & PocketAdmin provide a command line interface to the servers that are managed by the suite, the design of the user interface is limited to enter a command, submit it, see the results. For a typical administrator who is trying to troubleshoot a problem, the flow is more likely to be "try a command, try a different command, look at the output, try a third command", i.e. the ability to be able to retain the output from previous commands would be useful. With that in mind, Expand Beyond also provide the PocketAdmin Console. This is a very simple to use application that establishes an SSH connection between your Pocket PC and the system you are trying to connect to. A useful feature of the console is the ability to create macros, thus avoiding the need to manually enter useful & often used commands like "netstat -a". Another important use of this application is the ability, once you've set up the secure connection to the SSH server, to then telnet on to other systems that might not be actively managed from the software. Such systems might include routers & firewalls. Gotchas Some problems were experienced with a few of the features during the writing of this review, specifically around adding users to domain groups, looking at domain printers and moving onto the next page of a set of results. These problems may be down to the test environment I was using, or it may be that I've found some bugs in the product. Expand Beyond's Technical Support team are currently trying to reproduce my reports in order to determine the cause(s). Beyond that, the only other quibble I've got is that, as pointed out during the review, some of the tables could do with a slightly better layout in order to fit more information onto the Pocket PC display. Where To Buy The product can be bought directly from <a href="http://www.xb.com">Expand Beyond</a>. Prices for the Mobile Suite start at $2,500 for managing between one and 10 objects, and go up to $50,000 for an Enterprise license. An object is a CPU under PocketDBA, a workstation or server under PocketAdmin for Windows and any host you wish to connect to under PocketAdmin Console. Please contact their Sales department ([email protected]) for pricing for licences to suit your needs. A 30 day trial can be requested. Specifications The XBanywhere server can be installed on Windows 2003, Windows 2000 (service pack 2 or later), Windows NT 4 (service pack 6a), Sun Solaris (version 8 and 9) or Red Hat Linux (version 7.3 and 8.0). An X virtual frame buffer (Xvfb) is required for Solaris and Linux use. SSH from OpenSSH or SSH.com is required for command-line access to Windows systems, and optionally for Solaris or Linux systems (telnet is supported as an alternative). Approximately 100MB if free disc space is required to install XBanywhere. A minimum of 256MB of free RAM is recommended. For Windows & Linux, a Pentium II process or better is recommended. For Sun Solaris, a 250MHz or better SPARC processor is recommended. The Gateway software can be installed on Windows 2000 (Service Pack 2 or later) or Windows XP Professional. It is not currently supported on Windows Server 2003. The OS installation will also require IIS, .NET Framework v1.1 and MDAC v2.7. If you have an Exchange infrastructure you want to manage, the Exchange Administration software must also be installed on the Gateway system. The PocketAdmin Console software requires an ARM or XScale processor device. The documentation states that it is compatible with Pocket PC 2002 and 2000 (subject to the processor restriction). I can't see any reason why it wouldn't work with Pocket PC 2003, but I didn't have such a device to test it on. A list of tested devices is available at <a href="http://www.xb.com/faqs.html">http://www.xb.com/faqs.html</a>, along with details of wireless modems that have been tested. Conclusions The product is relatively straightforward to install, requiring two servers in a typical environment. That's all - there aren't any agents to install onto the managed systems, which is of great benefit as it minimises the impact on the deployment of the product and makes it easier to maintain as new releases come out. That everything can then be managed from a Web browser is just fantastic. The documentation is clear and contains lots of practical examples so that it is clear how the product can be used. The Mobile Suite is an extremely powerful product that is very easy to use. It makes good use of technology to deliver a low bandwidth yet sophisticated user interface. I have used both version 2.2 and 2.3, and I am impressed with the way Expand Beyond continue to develop and enhance the product. They are working on a new release for later on in 2004 and, from the replies they've sent me, are clearly open to suggestions as to what features would be useful to see in the product.

that_kid

01-05-2004, 11:46 PM

Great review, this sounds like something I could really use on my network but my pockets don't run that deep. Guess i'll keep on TS'n.

PR.

01-06-2004, 12:25 AM

Looks useful but the price?! 8O

Janak Parekh

01-06-2004, 12:28 AM

Looks useful but the price?! 8O
Enterprise-class pricing. ;)

--janak

Terry

01-06-2004, 12:58 AM

With a price like this, your IT department better have enough people to have someone at the office! Sheesh! And if your servers are that mission critical, perhaps a Wireless SSH connection to the Internet on YOUR LAN (since the DMZ is not supported) may not be the best idea. Double sheesh.

Eitel

01-06-2004, 01:18 AM

Ok, I need some help here. How can I explain my boss that we need to spend $50,000 so I can manage the servers while I'm eating at a restaurant? :roll:

that_kid

01-06-2004, 01:58 AM

Ok, I need some help here. How can I explain my boss that we need to spend $50,000 so I can manage the servers while I'm eating at a restaurant? :roll:

Yeah my friend is having a hard enough time trying to get his boss to buy a citrix server.

Janak Parekh

01-06-2004, 02:34 AM

Ok, I need some help here. How can I explain my boss that we need to spend $50,000 so I can manage the servers while I'm eating at a restaurant? :roll:
Maybe it's for larger entities where 24/7 support is needed, such as when the techs are on the beach? :) You'd think, though, if they can afford a $50k software, you could hire a backup admin... but who knows. ;)

--janak

Eitel

01-06-2004, 03:07 AM

Ok, I need some help here. How can I explain my boss that we need to spend $50,000 so I can manage the servers while I'm eating at a restaurant? :roll:
Maybe it's for larger entities where 24/7 support is needed, such as when the techs are on the beach? :) You'd think, though, if they can afford a $50k software, you could hire a backup admin... but who knows. ;)

--janak

That's no sweat for my company, since it's a Fortune 500 (Borders Group). But for $50,000 we can pay yet one more person to be on the overnight shift. :wink:

Philip Colmer

01-06-2004, 10:12 AM

Prices for the Mobile Suite start at $2,500 for managing between one and 10 objects.
I thought I better re-emphasise that bit of the pricing, since everyone seems to have latched onto the maximum price!

--Philip

JRedd

01-06-2004, 09:38 PM

Hi All,

First, in the interest of fairness, please let me disclose that I am employed by Expand Beyond in a sales capacity, so my obvious interest here should be plain.

However, I do wish to shine some light on who we are and what kind of service we're trying to provide and the typical customer interest.

Also to comment that this was indeed an involved review, and we appreciate the fair amount of effort and the nice comments.

>Ok, I need some help here. How can I explain my boss that we need to spend $50,000 so I can manage the servers while I'm eating at a restaurant?<

Yep, this is not the way to present this type of request. : )

First a comment...everyone, and I mean everyone... seems to have seized on the high end of pricing, which is more of the Enterprise level pricing, and Perpetual Licensing at that.

This could cost significently less for an Annual license for a single server and factoring in Live tech support, our adherence to "Standards Based" and our record of constantly releasing additional functionality, this should be reasonable enough for most companies.

At the $50,000.00 range you're probably not just covering the Windows stuff but licensing pretty much everything in your Enterprise. (100's + Servers)

Really though, if your Management keeps after you to improve and live up to really tight SLA's and yet won't give you more head count this is a great way to help achieve them without stressing your department or sacrificing your personal time.

>Maybe it's for larger entities where 24/7 support is needed, such as when the techs are on the beach? You'd think, though, if they can afford a $50k software, you could hire a backup admin... but who knows.<

You can always hire more people but aside from the fact that 50K only covers the cost of finding, recruiting, training and providing benefits to that individual , forgetting about salary and all that...typically more advanced problems may require more senior intervention and sometimes moving up the foodchain can be just as difficult if there's 10 people standing there..I mean you just cannot be accessable 24x7 without
sacrificing something.

>With a price like this, your IT department better have enough people to have someone at the office! Sheesh! And if your servers are that mission critical, perhaps a Wireless SSH connection to the Internet on YOUR LAN (since the DMZ is not supported) may not be the best idea. Double sheesh.<

Aside from our embedded security, which is SSH, SSL,Triple DES etc, and all "Standards" based, we also allow you to utilize your corporate VPN's and/or 2-Factor Authentication, such as RSA SecurID etc. The DMZ reference applies to the Windows Gateway aspect of your installation only.

>Guess i'll keep on TS'n.<

I get this a lot, and to use one example, changing a users password...Our software not only shows more than the one user but also allows you to pull them up by a "partial string" search and not have to "Scroll" from A-Z.
There's a number of Navigation aids and as we were designed to be a "Thin Client" type of solution, typically sub 1 second response times are the norm, even with the VPN running.

We'll be happy to provide anyone with a live evaluation copy of the software and can even loan a Qualified Company a device to do the Proof of Concept, so feel free to see for yourself.

Our vision is to become the wireless portal for ALL your IT infrastructure and applications and with the new Custom Applications work we're doing now we're on the way to making our software an integral part of operations at many Fortune 500 companies.

I'll quit the sales speech but if you do have any questions or concerns, even if they pertain more to the wireless aspects, feel free to e-mail and I'll take a run at them.

DaleReeck

01-07-2004, 03:41 PM

Before I make my comments, I have to say that I don't have knowledge of how much development cost goes into these products or how well they sell as a whole. But I'll butt in anyways :)

I have to say that pricing for these types of remote admin tools is generally the same - way too high - for all of them, not just Expand Beyond.

My University does have the money, but we won't spend it since there are free solutions that, while they aren't as tight as dedicated mobile remote admin solutions, work well enough. For instance, for administering a Windows AD domain as is my case, the PocketPC VPN tool and a screen compression tool for $15 works fine, though again, not quite as convenient or secure as dedicated mobile remote admin tools. If you need more capability, a small, wireless laptop works even better - and with free, native admin tools. Plus, there's always the hope that MS will release native PPC network admin tools as a free download - though they may not as to not risk alienating the mobile remote tool vendors.

But my point is, spending thousands of dollars to remote admin on a PPC or a laptop is something most companies won't do - especially in the case of a laptop which can do it all natively. While there are some situations where remote admin on a PDA is useful, really, how many would rely on it so much as to justify the cost? And I'm not even talking about the $50,000 high end. Given the current tools that are available for free, $2,500, $5,000 or $10,000 is still too high. Especially, as I said, there are less glamorous solutions available. Don't get me wrong, Expand Beyond's product looks excellent and I'm sure its of high quality. It defintely has a high "cool" factor. But cost has to be compared with value and take into account current solutions available, especially free ones. Pricing can't simply be based on how much development resources it cost. Unfortunately, it seems that remote tool vendors have decided how much "value" the product has without considering how people are doing it currently for free or little cost (i.e., VPN and native MS tools).

If I were selling such a product, I probably would go for, say, $250 for the initial license and $10 per object to be administered. Ten objects for $1,250 isn't unreasonable. But $2,500 for a similar setup is a bit steep in my opinion.

JRedd

01-07-2004, 04:42 PM

Hi Dale,
Just my 2 cents on your last post.

This is something we do hear from the University crowd, and the common thread there is you'll typically have more freedom to do those kinds of research and the implementations etc.

Which is a good thing, and most of the time you pretty much get to do what you need to do or want to do and don't typically have much pushback on your requests UNLESS they involve money.

There are exceptions to this of course and I don't claim to know everything about the EDU's but have seen this often enough to feel comfortable commenting.

In the larger corporations, there's all kinds of hoops you have to jump through, and the fact that there might be a "Standards" committee reviewing software, a "Security" Group, then the Admins are divided between the Windows Group, the Unix Group , maybe a Wireless or Telecom Group, the DBA Groups which may be separated between the SQL Server and Oracle, maybe some Mainframe sprinkled in and then everyone moves up the food chain towards the administrative, VP and "C" Level execs.

Trying to get everyone on the same page has always been an issue in this kind of setup and throw in your typical politics and now the real challenge is getting anyone to commit much less put their skin on the line which is practically impossible.

Where we do well in this type of situation is we're able to provide a single point of access, a single license file to maintain, a single vendor to contact for support and allow you access to ALL the different wireless modules and application we support (not just Windows) from a single device that you can pass between the on-call groups.

No Superuser wants to wake up one day and find unauthorized devices and access points and untested or uncerted software lurking in their network, and at most major corporations they trot around at least once a year asking you to sign a document and disclose anything you're done so they can root this out and kill it.

Outfitting everyone with laptops, sure, but 20 people at average 2K each is 40 K for those laptops plus they still need the cell phones and beepers and the 3 different wireless accounts each month plus they look like Dilbert walking down the street. We cut all the hard costs down and using these metrics you can amortize/pay for our software in less than 1 year, which makes even the bean counters smile. Plus the bean counters don't have to hunt you down each month to ask, "Does this person really need all these wireless accounts?...The bills seem high...whatever.

Even if everyone took the "Freeware" or licensing provided for all the different applications and infrastructure and used that at no cost, now you're maintaining all this stuff on scattered servers, separate user accounts and frankly, some of the "wireless" interfaces are just rewritten LAN apps originally designed to run over 100mb pipes, and don't run nearly as well over restrictive bandwidth. If it's kludgy, you won't use it no matter the device provided.

Not to mention in a problem situation we've all been the victim of different vendors pointing the finger at the other vendors saying "It's not us, it's someone else causing the problem", leaving you to do the hunting. Meanwhile your VP's and CIO's are burning up your phone line and your ears looking for that report caught in the "Twilight Zone".

You aren't able to immediately reach "Live" tech support anyway in the freeware domains and it's just you and your job on the line. Plus the CEO's are all terrified of finding their company on the front page with a Security breach of their customer info and their Board and Underwriters are asking them what they're doing for "Disaster Recovery", in case the Ice Storms take the power out etc.

50K is a small price to all these people and no-one in this arena is going to stand up in front of anybody and say, Oh there's some free software I can get off the Internet and we can always get a 24 hour turnaround on tech support via e-mail from the guys in Sweden...They pretty much get their head handed to them, if they get to keep their job. Their boss wants this NOW and hired you to make sure they get results NOW and don't want to hear any different.

Anyway, it seems to work well in this situation and we have a few hundred customers who put up their money so here we are.

Joseph Redd
Expand Beyond Corp.
t: 1.312.587.2639
f: 1.312.587.8510
[email protected]

www.XB.com

Worldwide Leader in Mobile Software for IT Management.

Maximize Performance and Productivity Beyond the Desktop.

Janak Parekh

01-07-2004, 04:51 PM

Thanks for the comments, Joseph. 8)

--janak