Abstract: Methods and systems for generating and presenting one or more user interfaces on devices with foldable displays are described herein. An application, executing on the device, displays a first user interface on a first portion of a foldable display. The first user interface includes an indication of tasks for a plurality of applications hosted on a remote server. The application displays a second user interface on the first portion and a second portion of the foldable display when the device unfolded. The second user interface includes the tasks indicated by the first user interface. In response to receiving an input to initiate execution of at least one task, the application provides data to an application hosted by the remote server and associated with the at least one task. By adapting to the different displays provided by the foldable device, the application improves users' experiences with applications executing on the device.

Abstract: Disclosed herein includes a system, a method, and a device for providing persistence across applications using a content switching server. A device can receive a first request from a client for a version of an application having different versions provided by one or more servers. The device can provide access to each version of the application via different load balancing virtual servers. A content switching virtual server of the device can select a load balancing virtual server to handle the first request for the version of the application. The content switching virtual server can generate a session identifier for a session between the client and the version of the application to persist the session with the selected load balancing virtual server for subsequent requests from the client for the version of the application.

Abstract: Described embodiments provide systems and methods for resource appropriation in a multi-tenant environment using risk and value modeling. A resource server can provide a plurality of applications access to a plurality of resources in response to requests from clients based in part on risk scores and value scores. The resource server can generate and execute a risk model and a value model to determine a risk score and a value score for each of the applications. The resource server can use the risk and value scores to determine access to a particular resource for a requested application. The resource server can assign a first allocation of resource tokens to an application. The resource tokens can correspond to access privileges to plurality of resources. The resource server can dynamically modify the resource allocation for applications responsive to changes to a risk score or value score of a respective application.

Abstract: Described embodiments provide systems and methods for validating session tokens using network properties. A first device having one or more processors coupled with memory may identify a session token from an initiation of a session between the first device and a second device via a network path of a plurality of network paths. The first device may determine that the first network path is to be trusted based at least on a property of the network path. The first device may validate the session token for use over the plurality of network paths, responsive to determining that the network path is to be trusted. The first device may provide, responsive to validating, the session token to the second device for use in communications over the plurality of network paths.

Abstract: Described embodiments provide systems and method for determining action insights to address, correct or fix application failures. A device can identify an assignment of a user to a virtual machine and the assignment can enable launch of an application with use of the same virtual machine on behalf of the user. The virtual machine can be one of a delivery group of virtual machines. A threshold can be determined for the virtual machine that indicates a likely failure of the virtual machine to launch the application based data about performance of the delivery group. The device can modify the assignment of a user from the virtual machine to another virtual machine of the delivery group based on a comparison of a load on the virtual machine and the determined threshold, so as to avoid failure of the application to launch.

Abstract: Described embodiments provide systems and methods for validating a microservice. A device intermediary to a plurality of microservices may identify a synthetic error and a first criteria for implementing the synthetic error to validate a first microservice of the plurality of microservices. The device may determine that the first criteria for implementing the synthetic error has been met. The device may receive a request from the first microservice to access a second microservice of the plurality of microservices. Responsive to the determination, the device may transmit, to the first microservice, a response on behalf of the second microservice, the response implementing the synthetic error. The device may validate that the first microservice one of handled or did not handle the synthetic error.

Abstract: A computer system includes a client device to remotely access a virtual desktop. The client device is configured to launch application windows on at least one display based on default launch positions, and monitor usage of applications within the application windows to identify user patterns on how the applications are used in various layouts on the at least one display. The various layouts correspond to preferred positions. Usage of the applications within the application windows is mapped, with the mapping including associating the preferred positions to the corresponding default launch positions. At least one of the application windows is repositioned to the preferred position associated therewith based on the mapping in response to the at least one application window not being in the preferred position.

Abstract: Methods, systems, and computer-readable media for processing policy variance requests in an enterprise computing environment are presented. A computing platform may receive, from a first endpoint computing device, a request for a first policy variance. In response to receiving the request, the computing platform may authenticate the first endpoint computing device based on enrollment information and may validate contents of the request. Subsequently, the computing platform may generate a policy variance result message based on approval or rejection of the request for the first policy variance. Then, the computing platform may send, to the first endpoint computing device, the policy variance result message. By sending the policy variance result message to the first endpoint computing device, the computing platform may cause the first endpoint computing device to execute a policy action corresponding to the approval or rejection of the request for the first policy variance.

Abstract: Embodiments described include systems and methods for managing downloads from an embedded browser. The client application can control the locations to which downloads are directed. A system administrator can configure a policy to restrict downloads to approved locations. The client application can prevent a user from navigating to and downloading a file to a location that has not been approved according to the policy.

Abstract: Methods and systems for receiving an indication that an application running on a first device is ready to perform a task, determining a device capability associated with performing the task, determining one or more devices associated with a user of the first device, wherein each of the one or more devices is associated with the device capability, selecting, based on the task and one or more user preferences associated with the user, a second device from the one or more devices, and sending an instruction to the second device, wherein the instruction causes the second device to perform the task, are described herein.

Abstract: Described embodiments provide systems and methods for path selection proportional to a penalty delay in processing packets. A server-side intermediary may identify a delay penalty for processing packets of a server destined for a client. The server-side intermediary may be in communication via links of different latencies with a client-side intermediary. The server-side intermediary may select a second link with a latency that deviates from the lowest latency of a first link by the delay penalty. The server-side intermediary may transmit, to the client-side intermediary, duplicates of the packets via the selected second link with information indicating to hold the duplicates at the client-side intermediary. The server-side intermediary may receive an indication to drop or send the duplicates to the client. The server-side intermediary may transmit the indication to the client-side intermediary to drop or send the duplicates according to the indication.

Abstract: Described herein are systems and techniques for segregating different types of auto-generated enterprise communications, identifying actionable items found within the enterprise communications and automatically generating a list of unified events/tasks for presentation to a user. The systems and techniques utilize templates to identify a communication. Once a communication is identified, rule sets are applied to parse the communication and generate an event which can be presented to a user as part of an event/task list. Described systems and techniques may process different type of communications such as email and real-time communications, parses each type of communication and generate a unified event/task list (i.e. a single task list which includes events from emails, real time messages and other communication channels) which can be presented to a user.

Abstract: Systems and methods for adjusting a user interface presented in a mobile device display. A method for adjusting a user interface presented on a mobile device display includes receiving sensor data from one or more sensors of a mobile device, determining a hand of a user that is holding the mobile device based on the received sensor data, and adjusting the user interface presented on the mobile device display based on the determination.

Abstract: A stack-based conversation engine is provided. The conversation engine enables a voice or text based virtual assistant to create interactive, conversational experiences in an extensible manner. The conversation engine can be used to support a conversation between a user and a virtual assistant. The conversation engine can be configured to receive, from the virtual assistant, a fulfillment request specifying an intent from the virtual assistant; push an item onto a conversation stack stored, the item including an identifier of the intent; execute an action handler associated with the intent to generate instructions to manipulate the conversation stack; manipulate the conversation stack according to the instructions; and store the conversation stack for subsequent processing in support of the conversation.

Abstract: Aspects described herein provide improved system architectures for a cross-domain proxy so that server/controller software may be placed in a cloud-based environment, with only limited equipment required on-premises at a user location for use by application client software. Aspects described herein provide techniques for communicating information between disparate domains, while each party to the transaction believes it is on the same domain as the other party to the transaction. Aspects described herein generally relate to a method to transparently transport the Citrix Brokering Protocol (CBP, or other protocols) between On-Premises VDAs (e.g., virtualized Windows computers) to an In-Cloud Broker running on the Desktop Delivery Controllers (DDCs) when each resides in different domains. Using aspects described herein, resources that otherwise need to be co-located on the same administrative domain can be moved to different domains, e.g., using a cloud-based system architecture.

Abstract: A method can include receiving, by a high-availability (HA) service running in a data center having a plurality of virtual machines (VMs) and a hypervisor, credentials for the hypervisor and a list of VMs, the hypervisor credentials and the list of VMs received from a power and capacity management (PCM) service, the PCM service configured to selectively power VMs from the list of VMs on and off; sending, from the HA service to the PCM service, a health check request to determine if the PCM service is able of selectively power the VMs from the list of VMs on and off; and in response to determining the PCM service is unable to selectively power the VMs from the list of VMs on and off, powering on, by the HA service, one or more of the VMs from the list of VMs using the hypervisor credentials received from the PCM service.

Abstract: Aspects of the disclosure relate to processing systems using improved techniques for mapping events from user device to a cloud storage system. A computing platform, such as a cloud event mapping platform, may receive, at a task manager hosted on the computing platform, events to be processed. The computing platform may use the task manager to determine file objects corresponding to each event. The computing platform may use the task manager to determine a subset of the events to be processed by each dispatcher. The computing platform may use a first dispatcher to generate an event dispatch queue using a plurality of heuristics. After determining expiration of a delay corresponding to each event in the dispatch queue, the computing platform may dispatch each event in the dispatch queue for execution.

Abstract: The present disclosure is directed towards systems and methods of maintaining a session via an intermediary device. A first device intermediary to a client and a plurality of servers receives a packet of a session. The packet of the session includes application protocol data and application session metadata used to maintain a state of an application accessed via the session. The first device marks a session state of the session to an update state. The first device determines that a second device intermediary to the client and the plurality of servers is in a ready state and the session state of the session is in the update state. The first device forwards the application protocol data and the application session metadata of the packet to the second device to maintain, on the second device, the same state of the application accessed via the session provided by the first device.

Abstract: A machine learning system may monitor usage of network or hosted resources by users or employees, and may dynamically generate short or “micro” surveys for immediate presentation. These surveys may be aggregated and analyzed by the machine learning system, reducing delays of responses. As a result, engagement may be measured in real-time or near real-time, actionable insights generated, and responsive actions taken. The machine learning system may monitor various interactions of users or employees with a virtual or hosted environment or workspace, including connections to virtual machines, remote desktop applications, SaaS applications, web applications, or other such entities, as well as environmental characteristics such as network location and/or quality.

Abstract: A method for providing a visual indication of the security threat awareness level is disclosed. Such a visual indication helps improve the security of a device or an enterprise by giving a user an indication of the security risks associated with currently open and active applications. In turn, the user can use the visual indication as a cue to take mitigating actions to reduce the security risk, such as by using the application more carefully or by exiting the application. Each application is assigned a security score and the system determines the security threat awareness level based on the security score(s) of the open and active applications.