[THIN] Re: Safeword for Citrix from vs. RSA SecureID Token
- From: "Jeff Durbin" <techlists@xxxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Fri, 16 Jan 2004 21:36:35 +1300
Just understand that the Nfuse portion is a requirement; i.e., you can't
authenticate directly to a server using the Safeword token because the
authentication happens via IIS. No big deal if you're always going to use
Nfuse, but it doesn't secure your servers internally unless you force your
internal users to use Nfuse and prevent direct ICA to them by putting them
on a separate network seperated by a firewall that can enforce that ICA is
only allowed from the CSG machine.
In that respect, it's really not the same as as SecurID, because the
SecurID agents can run directly on the MetaFrame servers, ensuring
two-factor authentication from any and ALL users, including the console.
I never have actually implemented the safeword tokens. The Systems
Integrator that I worked for looked at them when they came out, and we
realized that they weren't a direct replacement for SecurID. I suppose that
if you're using them to authenticate external users only, they would be
fine, although I'm as paranoid about people being attacked from the inside
as from the outside. They are definitely cheaper though. It's just too bad
RSA doesn't get more reasonable about the pricing on SecurID. Every single
customer I've ever showed it to was willing to implement it until I told
them the price. :(
-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Daniel Schoppmann
Sent: 16 January 2004 11:39 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Safeword for Citrix from vs. RSA SecureID Token
Hi list
We are planing to replace RSA SecurID Token with the Safeword for Citrix
Token from secure computing. Only using them for authentification for citrix
via WI and CSG the Safeword solution seems to be much more cheaper. Any good
or bad experiences with "Safeword for citrix" ?
Ciao, Daniel
dschoppmann@xxxxxx
Meeräckerstr. 24
68163 Mannheim
home: 0621/8191407
mobil:0172/6395617
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers. http://www.rtosoft.com/Enter.asp?ID=147
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
********************************************************
This Week's Sponsor - RTO Software / TScale
What's keeping you from getting more from your terminal servers? Did you
know, in most cases, CPU Utilization IS NOT the single biggest constraint to
scaling up?! Get this free white paper to understand the real constraints &
how to overcome them. SAVE MONEY by scaling-up rather than buying more
servers. http://www.rtosoft.com/Enter.asp?ID=147
*********************************************************
Useful Thin Client Computing Links are available at:
http://thethin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
