[THIN] Re: CSG implementation
- From: "Roger Riggins" <Roger@xxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Tue, 3 Jun 2003 08:25:32 -0500
Anything is easier if you plop it on the outside naked. Keep this in
mind: "outside the firewall" and "best config security wise" usually
aren't found in the same sentence. :)
You'd want it in the DMZ at a minimum. You could go on the other side of
the firewall if you were using two firewalls and CSG was between them.=20
Roger=20
-----Original Message-----
From: Claus, Brian [mailto:BClaus@xxxxxxxxxxxxx]=20
Sent: Tuesday, June 03, 2003 8:17 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: CSG implementation
In reading from the Brian Madden book (FR2) I get the following, is this
correct?
1 nFuse server in DMZ or outside of the firewall with a verisign cert on
it
1 STA inside the firewall
From the book, it looks like having it outside the firewall is the best
config security wise and easier to set up the open ports in the firewall
compared to the DMZ model.
Thoughts?
=3D20
_____ =3D20
=3D20
Brian Claus, A+, Network+, MCP
Network Administrator
WESCO Distribution, Inc.
225 West Station Square Drive, Suite 700
Pittsburgh, PA 15219-1122
Phone: 412-454-2412
Fax: 412-454-2540
bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>=3D20
_____ =3D20
-----Original Message-----
From: Roger Riggins [mailto:Roger@xxxxxxxxxxxx]
Sent: Monday, June 02, 2003 6:03 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: CSG implementation
CSG should be in the DMZ. It can be on the same box as NFuse with a
tweak or two. STA should go inside, and can share resources with another
box. If you are purchasing your certs, you don't need a CA.=3D3D20
Roger
-----Original Message-----
From: SPerez@xxxxxxxxxxxxxxx [mailto:SPerez@xxxxxxxxxxxxxxx]=3D3D20
Sent: Monday, June 02, 2003 11:29 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] CSG implementation
Group,
Environment is Windows 2K Servers running MF XP FR2 w/w2k sp3.
I currently use NFuse 1.61 with project columbia for one NFuse site
hosting
internal and external users.
I would like to implement CSG 2.0.
Do I need to have a CA running?
Also is it best to have CSG on a separate server then NFuse site?
Does CSG need to reside on the inside or can it reside in the DMZ?
Thank You,
Steve
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense=3D3D20
designed to increase the user capacity of your servers.=3D3D20
http://www.appsense.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or=3D3D20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense=3D20
designed to increase the user capacity of your servers.=3D20
http://www.appsense.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense=20
designed to increase the user capacity of your servers.=20
http://www.appsense.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
