[THIN] Re: CSG questions

  • From: "Chris Lynch" <lynch00@xxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Tue, 17 Sep 2002 14:34:23 -0700

 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Look below for your answers.

CHRIS LYNCH -  MCSE, CCNA, CCA
NETWORK ENGINEER - INFORMATION TECHNOLOGY
NRT Incorporated, 27271 Las Ramblas, Mission Viejo, CA 92691
Chris.lynch@xxxxxxxxxx  Tel 949.367.3406


- -----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Mat
Sent: Tuesday, September 17, 2002 12:52 PM
To: Thin@xxxxxxxxxxxxx
Subject: [THIN] CSG questions


Hi

Im just starting my first CSG deployment and i appear to be getting
myself confused. I was wondering if someone wouldnt mind taking the
time to answer my questions.

Scenario

Pix Firewall with DMZ configured ( only 1 firewall i know)

In the DMZ i have a CSG server and an Nfuse Server ( each has its own
Geotrust Cert ). Each server has a valid external IP address and DNS
record.

On the Internal Lan i have an STA server.
On the Internal Lan i have a Server farm with a dedicated Access Data
Store.

Quick questions.

1. Do i need to enable altaddr on the Citrix servers ?
No.  Not unless you want to NAT them as well to the CSG and Nfuse
server.  I would recommend that anyways.

2. Do i need to use Altaddr at all ?
No.

3. What is the best way to set up DNS so that the Internal STA / DMZ
CSG and DMZ Nfuse servers can all talk via FQDN's ?
I would point all of your servers to an Internal DNS server.  From
there, I would add the FQDN of the STA (internal Ip address only),
the Internal IP address of your Nfuse server, and that is it.  Your
clients will get the CSG's FQDN in the ICA file that gets created in
the Nfuse page when they click on the app link.  You will need to
make sure that your DNS records for the Nfuse server and CSG are
correct and that they do match the SSL Cert.  That is it.

regards





**********************************************
This weeks sponsor Jetro Platforms 
Jetro Platforms Ltd. is an enterprise software developer, 
bringing a new era in server-based computing, secured internet 
access, and disaster recovery.  We make IT Easy! 
http://www.jp-inc.com/
***********************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

-----BEGIN PGP SIGNATURE-----
Version: PGP 7.1

iQA/AwUBPYefH/l56xfvzmMfEQIsWQCg+i+PY+VkhIRBW2XCAVBUJiXZs8sAn2ms
BGXRB+N4FbI1OeD4p9G3SVMk
=L1jH
-----END PGP SIGNATURE-----



-- Binary/unsupported file stripped by Ecartis --
-- Type: application/ms-tnef
-- File: winmail.dat


**********************************************
This weeks sponsor Jetro Platforms 
Jetro Platforms Ltd. is an enterprise software developer, 
bringing a new era in server-based computing, secured internet 
access, and disaster recovery.  We make IT Easy! 
http://www.jp-inc.com/
***********************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: