It's not required. You DO want STA behind the firewall, but CSG and NFuse can go in the DMZ. You can get this accomplished with one firewall...such as a PIX 515 or higher. Roger -----Original Message----- From: Leuci, Chris [mailto:cleuci@xxxxxxxxxxxxx]=20 Sent: Wednesday, April 23, 2003 2:53 PM To: Thin (E-mail) Subject: [THIN] New to CSG Sorry for the newbie question, but I'd like to try and tackle this CSG in my organazation. I already have my Published apps on my farm accessble from an Nfuse server, but have some questions on how to set up the firewall, etc. We only have one firewall protecting us from the internet. From what I understand I need a second one on my internal network to put the STA behind. Is this correct?? ******************************************************** This Week's Sponsor - ThinPrint Simply the best print solution for Microsoft Terminal Services=20 and Citrix Metaframe. http://www.thinprint.com/ ********************************************************** For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm ******************************************************** This Week's Sponsor - ThinPrint Simply the best print solution for Microsoft Terminal Services and Citrix Metaframe. http://www.thinprint.com/ ********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm