[THIN] Re: CSG implementation
- From: "Stansel, Paul" <Paul.Stansel@xxxxxxxxxxxxx>
- To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
- Date: Tue, 3 Jun 2003 09:21:27 -0400
I prefer it in the DMZ. Then you can specify the ports that are allowed to
pass through to it (80 and 443 only) which really cuts down the
vulnerability.
-Paul
> ----------
> From: Claus, Brian[SMTP:BClaus@xxxxxxxxxxxxx]
> Reply To: thin@xxxxxxxxxxxxx
> Sent: Tuesday, June 03, 2003 9:17 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: CSG implementation
>
> In reading from the Brian Madden book (FR2) I get the following, is this
> correct?
>
> 1 nFuse server in DMZ or outside of the firewall with a verisign cert on
> it
> 1 STA inside the firewall
>
> From the book, it looks like having it outside the firewall is the best
> config security wise and easier to set up the open ports in the firewall
> compared to the DMZ model.
>
> Thoughts?
> =20
>
> _____ =20
>
> =20
> Brian Claus, A+, Network+, MCP
> Network Administrator
> WESCO Distribution, Inc.
> 225 West Station Square Drive, Suite 700
> Pittsburgh, PA 15219-1122
> Phone: 412-454-2412
> Fax: 412-454-2540
> bclaus@xxxxxxxxxxxxx <mailto:bclaus@xxxxxxxxxxxxx>=20
> _____ =20
>
>
>
> -----Original Message-----
> From: Roger Riggins [mailto:Roger@xxxxxxxxxxxx]
> Sent: Monday, June 02, 2003 6:03 PM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: CSG implementation
>
>
> CSG should be in the DMZ. It can be on the same box as NFuse with a
> tweak or two. STA should go inside, and can share resources with another
> box. If you are purchasing your certs, you don't need a CA.=3D20
>
> Roger
>
> -----Original Message-----
> From: SPerez@xxxxxxxxxxxxxxx [mailto:SPerez@xxxxxxxxxxxxxxx]=3D20
> Sent: Monday, June 02, 2003 11:29 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] CSG implementation
>
> Group,
>
> Environment is Windows 2K Servers running MF XP FR2 w/w2k sp3.
>
> I currently use NFuse 1.61 with project columbia for one NFuse site
> hosting
> internal and external users.
>
> I would like to implement CSG 2.0.
>
> Do I need to have a CA running?
> Also is it best to have CSG on a separate server then NFuse site?
> Does CSG need to reside on the inside or can it reside in the DMZ?
>
> Thank You,
> Steve
>
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense=3D20
> designed to increase the user capacity of your servers.=3D20
> http://www.appsense.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=3D20
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense=20
> designed to increase the user capacity of your servers.=20
> http://www.appsense.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or=20
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
> ********************************************************
> This Week's Sponsor - Appsense Technologies
> New! AppSense Optimizer is a new product from AppSense
> designed to increase the user capacity of your servers.
> http://www.appsense.com/
> **********************************************************
>
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thethin.net/citrixlist.cfm
>
********************************************************
This Week's Sponsor - Appsense Technologies
New! AppSense Optimizer is a new product from AppSense
designed to increase the user capacity of your servers.
http://www.appsense.com/
**********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thethin.net/citrixlist.cfm
Other related posts:
