[THIN] Re: CMC Policy Based upon CSG IP address

You could set your policy based on client name of WI_*. For your internal Web 
Interface servers you could implement the
modification listed at:

http://www.citrix4ge.de/wim/wimcl.htm

This will change the client name to the real Win32 client name while preserving 
the ability to use Workspace Control.
That way WI_ clients only connect from external versus using the internal WI 
servers.

I believe the SmartAccess features of SAM / Access Gateway will make this 
easier.

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
Chris De Jongh
Sent: Friday, April 29, 2005 5:13 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: CMC Policy Based upon CSG IP address

OK guys. 
I know you can assign policies on IP addresses, but my question is the
following.
Users are getting access via a CSG server from the internet. Once the
users are connected to the server the client ip address is the one
from their ISP.
What I want to achief is to create assign a policy that is checking
the IP address of the CSG server instead of the client ip addresses.
As I understand well, the ip address policy is checking the "client"
ip address instead of the CSG server ip address. Or am I wrong?

Tnx for the feedback.

Kind regards,


Chris

2005/4/28, Jeff Pitsch <jepitsch@xxxxxxxxx>:
> MPS3 has IP based polcies also.  No need to wait for PS4, well, except
> for the extended policies available.
> 
> Jeff Pitsch
> 
> On 4/28/05, Ulrich Mack <ulrich.mack@xxxxxxxxx> wrote:
> > Hi,
> >
> > Whoops, nearly said MPS4 but I guess that's wrong now :-(
> >
> > Presentation Server 4 has IP based policies which will do anything you want.
> >
> > The best I could offer you at present is client-IP based scripting.
> > Not too hard but may not give you what you want.
> >
> > regards,
> >
> > Rick
> >
> > Ulrich Mack
> > Volante Systems
> >
> > On 4/28/05, Mark CALLEJA <Mark.CALLEJA@xxxxxxxxxxxxx> wrote:
> > > Chris
> > >
> > > I don't know of a way...if you find out let me know.
> > >
> > > Regards
> > > Mk
> > >
> > > Mark Calleja
> > > Coordinator Network Systems
> > > Network Systems
> > > Dept Housing and Works
> > > (08) 9222 4941
> > > mark.calleja@xxxxxxxxxxxxx
> > >
> > > "There are only 10 types of people in the world: Those who understand 
> > > binary, and those who don't"
> > >
> > > >>> dz58gm@xxxxxxxxx 28/04/2005 15:32:20 pm >>>
> > > Mark,
> > >
> > > indeed. If you change the ClientName=[NFuse_ClientName] property,
> > > workspace control will not work anymore. Is there any way you can
> > > manipulate the createion of the NFuse_ClientName value? Now it is been
> > > genereate randomly with the "WI_" prefix. Is there any way we can
> > > modify the "WI_" prefix to for example "SG_"?
> > >
> > > Tnx for the feedback.
> > >
> > > Kind regards,
> > >
> > > Chris
> > >
> > > 2005/4/27, Mark CALLEJA <Mark.CALLEJA@xxxxxxxxxxxxx>:
> > > > Chris
> > > >
> > > > There may be two ways to accoumplish what you are asking.  Firstly, if 
> > > > you want all your internal users to be
able to use local drive mapping internally and not externally setup your 
"normal" or base policy to be assigned to the
internal addresses and all authenticated users (or specific domain group).  
This policy will only apply to users IP
addresses that allowed.  This solution works really well if you have an 
internal IP address schema which is not used on
most people's dsl routers (ie 192.168.x.x).
> > > >
> > > > Alternatively you can use the client name option.  If you have both 
> > > > internal Web Interfaces (Nfuse) web servers
and external you can modify the way the client name is presenting in the CMC.  
Delete the variable out of the
template.ica ClientName=[NFuse_ClientName] (only the var [NFuse_ClientName]).  
I would only do this on your external WI
as there are some implecations for Workspace Control (CTX103674).  You then set 
the client name option on the policy.
> > > >
> > > > HTH
> > > > Mk
> > > >
> > > > Mark Calleja
> > > > Coordinator Network Systems
> > > > Network Systems
> > > > Dept Housing and Works
> > > > (08) 9222 4941
> > > > mark.calleja@xxxxxxxxxxxxx
> > > >
> > > > "There are only 10 types of people in the world: Those who understand 
> > > > binary, and those who don't"
> > > >
> > > > >>> dz58gm@xxxxxxxxx 27/04/2005 15:24:39 pm >>>
> > > > hello,
> > > >
> > > > Can you define a CMC policy that checks the ip address of the CSG
> > > > server to set certain policies?
> > > > e.g. if someone is using CSG to access the Citrix environment from
> > > > the public internet, I want to disable clipboard mapping and client
> > > > drive mappings.
> > > > Is that possible?
> > > >
> > > > Tnx
> > > >
> > > > Chris
> > > > ********************************************************
> > > > This Weeks Sponsor: ThinPrint GmbH
> > > > Now available: The new version .print Engine 6.2 with SSL encryption
> > > > and certificate management.
> > > > http://www.thinprint.com
> > > > **********************************************************
> > > > Useful Thin Client Computing Links are available at:
> > > > http://thin.net/links.cfm
> > > > ThinWiki community - Excellent SBC Search Capabilities!
> > > > http://www.thinwiki.com
> > > > ***********************************************************
> > > > For Archives, to Unsubscribe, Subscribe or
> > > > set Digest or Vacation mode use the below link:
> > > > http://thin.net/citrixlist.cfm
> > > >
> > > > ********************************************************
> > > > This Weeks Sponsor: ThinPrint GmbH
> > > > Now available: The new version .print Engine 6.2 with SSL encryption
> > > > and certificate management.
> > > > http://www.thinprint.com
> > > > **********************************************************
> > > > Useful Thin Client Computing Links are available at:
> > > > http://thin.net/links.cfm
> > > > ThinWiki community - Excellent SBC Search Capabilities!
> > > > http://www.thinwiki.com
> > > > ***********************************************************
> > > > For Archives, to Unsubscribe, Subscribe or
> > > > set Digest or Vacation mode use the below link:
> > > > http://thin.net/citrixlist.cfm
> > > >
> > > ********************************************************
> > > This Weeks Sponsor: ThinPrint GmbH
> > > Now available: The new version .print Engine 6.2 with SSL encryption
> > > and certificate management.
> > > http://www.thinprint.com
> > > **********************************************************
> > > Useful Thin Client Computing Links are available at:
> > > http://thin.net/links.cfm
> > > ThinWiki community - Excellent SBC Search Capabilities!
> > > http://www.thinwiki.com
> > > ***********************************************************
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link:
> > > http://thin.net/citrixlist.cfm
> > > ********************************************************
> > > This Weeks Sponsor: ThinPrint GmbH
> > > Now available: The new version .print Engine 6.2 with SSL encryption
> > > and certificate management.
> > > http://www.thinprint.com
> > > **********************************************************
> > > Useful Thin Client Computing Links are available at:
> > > http://thin.net/links.cfm
> > > ThinWiki community - Excellent SBC Search Capabilities!
> > > http://www.thinwiki.com
> > > ***********************************************************
> > > For Archives, to Unsubscribe, Subscribe or
> > > set Digest or Vacation mode use the below link:
> > > http://thin.net/citrixlist.cfm
> > >
> > ********************************************************
> > This Weeks Sponsor: ThinPrint GmbH
> > Now available: The new version .print Engine 6.2 with SSL encryption
> > and certificate management.
> > http://www.thinprint.com
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Excellent SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thin.net/citrixlist.cfm
> >
> ********************************************************
> This Weeks Sponsor: ThinPrint GmbH
> Now available: The new version .print Engine 6.2 with SSL encryption
> and certificate management.
> http://www.thinprint.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Excellent SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
********************************************************
This Weeks Sponsor: ThinPrint GmbH
Now available: The new version .print Engine 6.2 with SSL encryption 
and certificate management.
http://www.thinprint.com
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor: ThinPrint GmbH
Now available: The new version .print Engine 6.2 with SSL encryption 
and certificate management.
http://www.thinprint.com
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: