-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Look below for your answers. CHRIS LYNCH - MCSE, CCNA, CCA NETWORK ENGINEER - INFORMATION TECHNOLOGY NRT Incorporated, 27271 Las Ramblas, Mission Viejo, CA 92691 Chris.lynch@xxxxxxxxxx Tel 949.367.3406 - -----Original Message----- From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Mat Sent: Tuesday, September 17, 2002 12:52 PM To: Thin@xxxxxxxxxxxxx Subject: [THIN] CSG questions Hi Im just starting my first CSG deployment and i appear to be getting myself confused. I was wondering if someone wouldnt mind taking the time to answer my questions. Scenario Pix Firewall with DMZ configured ( only 1 firewall i know) In the DMZ i have a CSG server and an Nfuse Server ( each has its own Geotrust Cert ). Each server has a valid external IP address and DNS record. On the Internal Lan i have an STA server. On the Internal Lan i have a Server farm with a dedicated Access Data Store. Quick questions. 1. Do i need to enable altaddr on the Citrix servers ? No. Not unless you want to NAT them as well to the CSG and Nfuse server. I would recommend that anyways. 2. Do i need to use Altaddr at all ? No. 3. What is the best way to set up DNS so that the Internal STA / DMZ CSG and DMZ Nfuse servers can all talk via FQDN's ? I would point all of your servers to an Internal DNS server. From there, I would add the FQDN of the STA (internal Ip address only), the Internal IP address of your Nfuse server, and that is it. Your clients will get the CSG's FQDN in the ICA file that gets created in the Nfuse page when they click on the app link. You will need to make sure that your DNS records for the Nfuse server and CSG are correct and that they do match the SSL Cert. That is it. regards ********************************************** This weeks sponsor Jetro Platforms Jetro Platforms Ltd. is an enterprise software developer, bringing a new era in server-based computing, secured internet access, and disaster recovery. We make IT Easy! http://www.jp-inc.com/ *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm -----BEGIN PGP SIGNATURE----- Version: PGP 7.1 iQA/AwUBPYefH/l56xfvzmMfEQIsWQCg+i+PY+VkhIRBW2XCAVBUJiXZs8sAn2ms BGXRB+N4FbI1OeD4p9G3SVMk =L1jH -----END PGP SIGNATURE----- -- Binary/unsupported file stripped by Ecartis -- -- Type: application/ms-tnef -- File: winmail.dat ********************************************** This weeks sponsor Jetro Platforms Jetro Platforms Ltd. is an enterprise software developer, bringing a new era in server-based computing, secured internet access, and disaster recovery. We make IT Easy! http://www.jp-inc.com/ *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm