[THIN] Re: CSG really necessary?
- From: "Stansel, Paul" <Paul.Stansel@xxxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Thu, 8 May 2003 14:38:42 -0400
If you are using NAT on your firewall, I thought you did simply so the
servers themselves knew what to return. But I will admit, I put CSG AND
Nfuse in at the same time.
-Paul
> ----------
> From: Magnus[SMTP:magnus@xxxxxxxx]
> Reply To: thin@xxxxxxxxxxxxx
> Sent: Thursday, May 08, 2003 2:35 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: CSG really necessary?
>
>
> Correct me if I am wrong but I thought that with Nfuse 1.7 that you did
> not
> need to set altaddr on the mf servers any more?
>
> Magnus
>
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
> Behalf
> Of Stansel, Paul
> Sent: Thursday, May 08, 2003 2:23 PM
> To: 'thin@xxxxxxxxxxxxx'
> Subject: [THIN] Re: CSG really necessary?
>
>
>
> It really is a matter of exposure. CSG is cheap to implement aside from
> the
> 2 servers, and it allows you to secure your boxes. My users can no longer
> make direct connections to my Citrix boxes over the altaddr, and I think
> that's great.
>
> -Paul
>
> > ----------
> > From: Pfeifer, Bruce A
> > MSER:EX[SMTP:Bruce.A.Pfeifer@xxxxxxxxxxxxxxx]
> > Reply To: thin@xxxxxxxxxxxxx
> > Sent: Thursday, May 08, 2003 2:20 PM
> > To: 'thin@xxxxxxxxxxxxx'
> > Subject: [THIN] Re: CSG really necessary?
> >
> >
> > I agree with you Scott, is CSG really needed.
> > We currently enforce 128 bit encryption on our MFXP servers and allow
> only
> > 1494 and 1604 connectivity through the firewall to them. (RDP is
> disable)
> >
> > We will be adding NFuse to the DMZ and at that point in time allow SSL
> > port 443 connectivity between NFuse and the WTS servers but continue
> > to utilizes
> > 1494 and 1604. We do not plan to force dramatic changes for our
> customers
> > as to how they connect. (end users don't like change)
> >
> > We have never had any issues or attacks via 1494 or 1604. Are attacks
> > on these ports common, how much of a demand is there for a CSG server?
> >
> > Bruce Pfeifer
> > Victoria BC.
> >
> > -----Original Message-----
> > From: Scott Reichardt [mailto:sreichardt@xxxxxxx]
> > Sent: Thursday, May 08, 2003 11:05 AM
> > To: thin@xxxxxxxxxxxxx
> > Subject: [THIN] CSG really necessary?
> >
> >
> > Im using MF XP 1.0. If I have NFUSE 1.7 running on a DMZ using SSL
> > encryption and everyone connecting to the published apps using
> > secureica RC5 128 bit encryption, is a Citrix Secure Gateway really
> > necessary? I'd rather
> > not have to dedicate another box for a CSG if everything is already
> > getting
> > encrypted.
> > ********************************************************
> > This Week's Sponsor - Emergent Online
> > EOL's Universal Printer new Features include:
> > Network Printing, Pagestreaming, 2400 DPI.
> > No Client Software Required!
> > http://www.go-eol.com/
> > **********************************************************
> >
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> > ********************************************************
> > This Week's Sponsor - Emergent Online
> > EOL's Universal Printer new Features include:
> > Network Printing, Pagestreaming, 2400 DPI.
> > No Client Software Required!
> > http://www.go-eol.com/
> > **********************************************************
> >
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thethin.net/citrixlist.cfm
> >
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
> ********************************************************
> This Week's Sponsor - Emergent Online
> EOL's Universal Printer new Features include:
> Network Printing, Pagestreaming, 2400 DPI.
> No Client Software Required!
> http://www.go-eol.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
********************************************************
This Week's Sponsor - Emergent Online
EOL's Universal Printer new Features include:
Network Printing, Pagestreaming, 2400 DPI.
No Client Software Required!
http://www.go-eol.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
