What about between the CAG and WI. Our CAG is in our DMZ and WI on the network. Thank you, Jim Medeiros Citrix Administrator GMAC Insurance (336) 770-2858 ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Greenberg Sent: Tuesday, January 08, 2008 12:09 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: CAG to WI The session between the user and the CAG is SSL encrypted regardless of what passes through it. The session between the WI and the PS farm is not encrypted by default but can be by adding certificates to these servers and requiring a secure connection. Usually the WI and PS are on the LAN and this not a concern. Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85266 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx ________________________________ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Chad Schneider (IT) Sent: Tuesday, January 08, 2008 9:24 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] CAG to WI If I have users connect to a CAG, then use WI to connect to published applications, are those applications then protected in an SSL tunnel? I am concerned that they are simply unprotected ICA traffic on the internet. Chad Schneider Systems Engineer ThedaCare IT 920-735-7615 -------------------------------------------------------------------------------------------------------------------------------------------------- Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. Thank you. --------------------------------------------------------------------------------------------------------------------------------------------------