[THIN] Re: CSG really necessary?
- From: "Magnus" <magnus@xxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 8 May 2003 14:35:52 -0400
Correct me if I am wrong but I thought that with Nfuse 1.7 that you did not
need to set altaddr on the mf servers any more?
Magnus
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Stansel, Paul
Sent: Thursday, May 08, 2003 2:23 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: CSG really necessary?
It really is a matter of exposure. CSG is cheap to implement aside from the
2 servers, and it allows you to secure your boxes. My users can no longer
make direct connections to my Citrix boxes over the altaddr, and I think
that's great.
-Paul
> ----------
> From: Pfeifer, Bruce A
> MSER:EX[SMTP:Bruce.A.Pfeifer@xxxxxxxxxxxxxxx]
> Reply To: thin@xxxxxxxxxxxxx
> Sent: Thursday, May 08, 2003 2:20 PM
> To: 'thin@xxxxxxxxxxxxx'
> Subject: [THIN] Re: CSG really necessary?
>
>
> I agree with you Scott, is CSG really needed.
> We currently enforce 128 bit encryption on our MFXP servers and allow only
> 1494 and 1604 connectivity through the firewall to them. (RDP is disable)
>
> We will be adding NFuse to the DMZ and at that point in time allow SSL
> port 443 connectivity between NFuse and the WTS servers but continue
> to utilizes
> 1494 and 1604. We do not plan to force dramatic changes for our customers
> as to how they connect. (end users don't like change)
>
> We have never had any issues or attacks via 1494 or 1604. Are attacks
> on these ports common, how much of a demand is there for a CSG server?
>
> Bruce Pfeifer
> Victoria BC.
>
> -----Original Message-----
> From: Scott Reichardt [mailto:sreichardt@xxxxxxx]
> Sent: Thursday, May 08, 2003 11:05 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] CSG really necessary?
>
>
> Im using MF XP 1.0. If I have NFUSE 1.7 running on a DMZ using SSL
> encryption and everyone connecting to the published apps using
> secureica RC5 128 bit encryption, is a Citrix Secure Gateway really
> necessary? I'd rather
> not have to dedicate another box for a CSG if everything is already
> getting
> encrypted.
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
