-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Agreed. Why would you NOT run WI and SG to provide user access to your farm (for both Internal and External users)? Having the Windows GINA displayed via the ICA protocol isn't very security conscious. Chris > -----Original Message----- > From: thin-bounce@xxxxxxxxxxxxx > [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Paul DeHaan > Sent: Thursday, May 20, 2004 7:39 AM > To: thin@xxxxxxxxxxxxx > Subject: [THIN] Re: Port/box Security > > Look at all the latest remotely exploitable security issues > and worms. = That should be enough to convince you to at > least have a perimeter around = your production environment. > Search the web there are countless articles = talking about this. > > >>> Andrew.Rogers@xxxxxxxxxxxxxxxxxx 05/20/04 09:33AM >>> > For those that dont have some sort of intermediary between > the internet = and=3D their citrix boxes, do you allow > direct access from the internet? > Can anyone give any reasoned arguments as to why the servers > shouldnt be = di=3D rect on the internet? (only the ica port > redirected from the firewall to = th=3D e server) > > Is there anything else to avoid this, other than CSG/VPNs? > > Andrew > --o-- > > ******************************************************** > This Week's Sponsor - Tarantella Secure Global Desktop > Tarantella Secure Global Desktop Terminal Server Edition Free > Terminal Service Edition software with 2 years maintenance. > http://www.tarantella.com/ttba=20 > ********************************************************** > Useful Thin Client Computing Links are available at: > http://thin.net/links.cfm=20 > *********************************************************** > For Archives, to Unsubscribe, Subscribe or=20 set Digest or > Vacation mode use the below link: > http://thin.net/citrixlist.cfm > > ******************************************************** > This Week's Sponsor - Tarantella Secure Global Desktop > Tarantella Secure Global Desktop Terminal Server Edition Free > Terminal Service Edition software with 2 years maintenance. > http://www.tarantella.com/ttba > ********************************************************** > Useful Thin Client Computing Links are available at: > http://thin.net/links.cfm > *********************************************************** > For Archives, to Unsubscribe, Subscribe or set Digest or > Vacation mode use the below link: > http://thin.net/citrixlist.cfm -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.3 Comment: Public PGP Key for Chris Lynch iQA/AwUBQKzKuW9fg+xq5T3MEQKsmgCgwi8W6Z0gUMupYIAT1YaGMOmuFgwAoKXK bdw7n/CctZ/HNuLSTbYVm+2T =SMaH -----END PGP SIGNATURE----- ******************************************************** This Week's Sponsor - Tarantella Secure Global Desktop Tarantella Secure Global Desktop Terminal Server Edition Free Terminal Service Edition software with 2 years maintenance. http://www.tarantella.com/ttba ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm