The video shows the Lenovo tablet and a user starting up an electronic health record application. From a user perspective the interaction appears (by design) very similar to what would happen without the SeaCat architecture (clicks on an application icon, performs single-sign-on, application is started). However, with SeaCat the health record application is contained in a separate end-to-end context. On the tablet containment is realized through a combination of light weight containers and an endpoint-based software-defined-network element. Within the network proper containment is realized through software-defined-networking in both the WiFi access and core enterprise network. Specifically the video shows the following: [00:00] Initial view of the tablet with virtual keyboard in the left bottom corner and a browser view in the right bottom corner. [00:02] The browser window is shown close up, showing a lightweight container monitor. At this point only the default container in which all unprivileged application are running is active (green bar). [00:10] Users clicks on application icon to start the electronic health record application. [00:18] A single-sign-on page pops up and the user performs (normal) SSO authentication. [00:36] Rather than being immediately directed to the electronic health record application, the user is notified that SeaCat will proceed to create the end-to-end context and start the application on the tablet. [00:47] The SeaCat enterprise component interacts with the SeaCat trusted daemon on the tablet, which starts up the application in a new container and performs the necessary plumbing to tie the container to the newly created network context. [00:54] The electronic health record application in this demonstration is an instance of the OpenMRS application. [01:10] At this point the container monitor shows that both the default container as well as the container for the medical application are active. [01:14] The user logs into the electronic health record application. [01:42] The user exists from the application. [01:49] The container associated with the electronic health record application is deactivated and the end-to-end network context is torn down.