10-point plan for a future-proof Vertec installation

Identifies the most important areas to consider when maintaining a Vertec installation.

Vertec is highly customizable and open to individual business processes. Customization is of great benefit if used correctly. However, Vertec can also be “assembled”. The following 10 points list the most important areas to consider when maintaining a Vertec installation:

  Good Poor
1 Update Stay on old version
2 Web App / Cloud App Desktop App
3 Office reports Legacy Office reports
4 BI module Excel reports
5 Outlook App Outlook add-in
6 Low code customization Overengineering
7 Python VB scripts
8 Safe Vulnerable
9 Performant Too slow
10 Use additional features Many hours of effort

 

For an expert review of your Vertec installation, Vertec offers the Review package for future-proof vertec installations.

Point 1: Update vs. Stay on old version

Cloud Suite customers are not aware of the problem as they always work on the latest Vertec version. On-Premises customers, on the other hand, have to implement updates proactively. For security reasons alone, we recommend using only the last two major versions.

Updates are easier, the smaller the version jumps. This fact, therefore, speaks for regular updates. If several major versions have to be skipped, extensive testing is mandatory and thus drives up the effort.

If a module or technology is replaced, we usually publish the new feature with a major version. The replaced feature is then expanded with the next major version.

Frequently asked questions/arguments

Please note that, with the minor releases, new functionalities will be added again and again.

An update is not a big deal if you do it regularly. Our support will be happy to assist you with this, then it is completed quickly and associated with little risk.

In addition, you immediately benefit from the improvements, bug fixes and new features of the latest Vertec version.

 

 

Point 2: Web App / Cloud App vs. Desktop App

Whenever possible, we recommend you use the Web App or the Cloud App, instead of the Desktop App. Performance is significantly better, especially if in home office or doing other work remotely. There is not much need to still use the Desktop App: For instance, with COM forwarding, the extensions to a financial accounting system, can now be handled via Cloud App. In addition, the Desktop App will be discontinued in the future.

As well as improved performance, our cloud clients Web App and Cloud App also offer other advantages: They are much easier to install and provide better security.

Frequently asked questions/arguments

Depending on the financial accounting system:

  • Yes, there are cloud-capable extensions that also work with the Cloud App or Web App. For an overview of which extensions are cloud-capable, see All vertec extensions at a glance.
  • No, the extension requires the Desktop App.
    But the various apps can be used in parallel, i.e. only the few workstations that use the financial accounting system remain on the Desktop App (e.g. via Terminal Servers), all others use the Cloud App.

 

Point 3: Office reports vs. Legacy Office reports

Office Reports are based on a report definition in the form of Python code. Office reports are generated by Vertec on the server side and the resulting documents are delivered to the apps in Word, Excel or PDF formats. Office reports are powerful, cloud-ready and available in all full-featured apps. In addition, unlike legacy Office reports, they are independent of local installations of external programs (e.g. Word, Excel).

Legacy Office reports are no longer being developed because it is strongly recommended to work with Office reports. For more information, see The Vertec Reporting System.

Frequently asked questions/arguments

The risks of COM reports: not fully cloud-ready, slow, vulnerable. Moreover, the authorization system only works within Vertec – once the reports are stored somewhere, they are potentially reachable.

Office reports can also be used to generate Excel reports if you want to continue to work with the data in any way. 

The Vertec Business Intelligence module can also be used for evaluations, and the pre-calculated figures can also be output efficiently in Vertec lists. All these evaluations can be exported to Excel at the push of a button. See also point 4.

The XML Schnittstelle can also be used for exchanging data.However, the risks of COM reports are: not fully cloud-capable, slow, vulnerable, and vulnerable to changes in the Excel workbook.

If the Legacy Office report contains Visual Basic code, it will no longer run. For security reasons, the Vertec instance is encapsulated in the Cloud Suite and does not allow the execution of Vba code as used in Legacy Office reports.

Is the complexity still understood? And is it still understandable in two years’ time?

Is the complexity necessary or can it also be simplified and calculated using BI measures? A high level of complexity can also be reflected in the calculation of the measures.

 

Point 4: Business Intelligence module vs. Excel reports

Excel Reports only run reasonably well if they are run via the Desktop App in a LAN. But, as described in point 2, the Desktop App should only be used in very specific scenarios. For evaluations, we provide the Business Intelligence Module. The BI measures are pre-calculated by Vertec and are therefore quick to use – and also cloud capable! What’s more, the figures can also be displayed in external BI tools or Excel via BI API, as well as directly shown in Vertec lists via OCL, and queried via Python. However, the figures are processed by Vertec.

Frequently asked questions/arguments

The measures in the BI can be accessed very easily via an API. Vertec provides a structured database here, which can be applied to another system for display.

 

Point 5: Outlook App vs. Outlook add-in

The Outlook App is fully cloud-capable. The activity history of a contact can be used directly in Outlook. Another big advantage: Even without access to a file system, emails are visible in the full-featured apps thanks to the Outlook App. Further development in the area of Outlook will focus entirely on the Outlook App.

Frequently asked questions/arguments

Yes. An event script can be used to create an ICS file, which can then be imported.

 

Point 6: Low code customizing vs. Overengineering

Principle: Simplicity over functionality

Low code customizing in Vertec means using the standard functionalities as much as possible and adapting them only as much as necessary by means of own folder structures, customized lists and customer-specific reports. Customized features are implemented as close to the standard as possible and with little code or one of the free additional features is used.

The more custom functionality is implemented with lots of Python code, the more difficult it becomes to keep that code stable over the long term. It requires regular maintenance, which is time-consuming. Every unnecessary line of code has the potential to introduce new bugs in the future. Also, new features can cause problems in old code, and more code often means less flexibility. Therefore, you should only implement things that are actually needed.

Low code is more understandable and leaves less room for error. Another great advantage of low code customizing is that everything is local. Even if an OCL expression in a column is invalidated by a change to the overall system, it only affects that point. Event scripts, for example, are global, which means that they can be affected by any changes.

Alludes to: too much code:

  • A lot of scripts and/or especially event scripts.
  • Frequent use of vtcapp.disableevents(), which indicates that the self-built system cannot handle everything that happens. If the events are properly programmed, disabling them is nonsensical, as it deprives the object involved of the ability to control its own conditions.
  • Long Login Event Scripts or login event scripts at all. These slow down or even prevent startup if they do not run cleanly.
  • Code in an area that could be solved just as well or even easier with other means, such as the background calculations for liquidity planning using event scripts, where instead a (completely decoupled) BI generator or an Office report could be used.

Alludes to: bad code:

  • No validation of whether a requested value is correct or exists at all.
  • Lack of security when accessing external resources, if they exist at all.
  • Event scripts that do not take into account that changes can come from non- not full-featured apps or without user interaction. For example, interface elements or dialogs are used without querying whether an interface is available at all.
  • Variables that are not used or initialized.
  • Forgotten subscriptions for Custom Renderers and List Controllers.
  • No comments in the code, inform future “readers” about what this code does and why.
  • Many commented-out rows in the code, with no indication of what they are used for.
Frequently asked questions/arguments

It is important that code is only used if it is really needed. It's worth checking the different directories regularly and removing code that is no longer in use.

It is worth asking yourself beforehand why a feature is really needed:

  • Do we really need the feature or is there another solution?
  • Do we really need the full scope or can we envisage simplification?

Then it's worth taking a look at the additional features provided by Vertec: Are there similar features we could use?

The Vertec Forum is also a good platform to present your idea and see how other customers, or Vertec themselves, have solved such problems. Are there ideas and solutions that you have not yet come up with?

The difference to “home-made” code is that we standardize the additional features, i.e. work with existing Vertec functionalities as much as possible; we test, maintain and update them. It is highly unlikely that something will get out of hand over time, or that there is functionality that does not run smoothly everywhere.

In addition, the functionality is described in the relevant articles and can also be read and understood by all users.

Since version 6.6, Vertec provides notifications. Many reminders, which were previously solved via a login event script, can now be solved with the notifications.

For other use cases, there may be other possible solutions. Here it might be worthwhile to do some research or ask a question in the Vertec Forum. How have others solved this problem?

If you come to the conclusion that there is no other way than via login script, make sure that you pay attention to the following points:

  • The performance must be guaranteed. So avoid loading large amounts of data or performing complicated calculations, this reduces the startup speed and leads to a poor user experience.
  • Keine UI Elemente oder Abfragen verwenden und wenn, dann unbedingt sicherstellen, ob man überhaupt in einer full-featured App ist. Do not use UI elements or queries.  If you have do, make sure you are in a full-featured app.
  • Input validation: Ensure that the requested values really exist and are in the correct form
  • If possible, no write access, or, if so, then make sure that the user has the appropriate user rights.
  • Good exception handling: Ensure that the user does not notice anything, does not get error messages, and does not find invalid entries in the system once Vertec is started.

 

Point 7: Python vs. VB script

Python as a scripting language has many advantages over Vb scripts: For example, Python has a Module Concept with which business logic can be summarized. This is not possible in VB scripts and you would have duplicate code. Python is also superior to VB script when it comes to connecting third-party systems and Unicode. Furthermore, VB script cannot be sandboxed properly. For this reason, it is not available in the Vertec Cloud Suite and all on-premises customers should also consider not allowing VB scripts if they have their Vertec on the internet.

Frequently asked questions/arguments

For security reasons, VBScripts are no longer allowed in the Cloud Suite. Also, not all functions are allowed in Python, because they can be exploited as an attack vector on the instance.

We usually want to bring simplification for the customer, not unnecessary extra work. Counter-question: What does the current process look like? And is it really less complicated / simpler / faster or just “routine”?

 

Point 8: Secure vs. vulnerable

The Security of a Vertec installation should be a top priority. To get closer to the topic, Claudio Pietra showed a visual comparison to a medieval fortress, Dover Castle, at the 2021 Vertec User Conference.

The concept is simple. Multiple lines of defense are meant to make it harder for attackers to penetrate the most important areas. The outermost line of defense is strong passwords and 2FA. If an attacker crosses a hurdle, it is important not to give up the whole system. More hurdles need to be prepared.

Frequently asked questions/arguments

At Vertec, we offer various features to increase security, such as password protection, 2-factor authentication, security certificates, etc. It is important that customers also use these tools: Sensible password protection settings and 2FA should be standard for all customers.

We also have our software regularly checked for gaps by an external company.

And: Vertec is ISO 27001 certified. Read what this means for us in our blog Vertec's high commitment to IT security.

That’s true. But, firstly, it happens extremely rarely. And, secondly, the benefits of two-factor authentication far outweigh this disadvantage.

 

Point 9: Performant vs. too slow

Your Vertec is too slow? Then start the search for the causes with our Performance Analysis Tool. The tool can provide initial clues and provide solutions. Often even small adjustments can have noticeable, positive effects on Performance. Our support and also your Vertec advisor will be happy to help you with further analyses and improvements.

Frequently asked questions/arguments

Rule of thumb: It takes about 250MB of RAM per running session.

In addition, the utilization during operation should be monitored and the configuration of the server adjusted.

The Desktop App is not suitable for use via VPN. Always use the Cloud App or the Web App via VPN.

If the use of the Desktop App seems unavoidable (see point 2), you should investigate whether the feature can be provided by a cloud client, or otherwise use the Desktop App via the terminal server etc.

 

Point 10: Using additional features vs. many hours of effort

We are packaging more and more industry and country features into additional features and offering them for free as downloads. Before you invest a lot of time into customizing a new Vertec feature yourself, take a look at the additional features list. Good to know: Of course, the features imported by additional features are just as customizable as the rest of Vertec.

Frequently asked questions/arguments

Yes, there are additional features for some standard processes that Vertec does not include in the core.

Netherlands

United Kingdom