[THIN] Re: CSG/WI and RSA SecurID on same box
- From: "Chris Lynch" <lynch00@xxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Tue, 4 Jan 2005 08:29:18 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Well, any piece of software can have a security exploit. In all of
our deployments (those that do not require redundancy), we install
the WI, SG and RSA Agent on the same server. But, we will have two
DMZ IP addresses and two public IP addresses (one for the WI site and
the other for the SG), along with two SSL certs.
I can tell you that we haven't run into very many problems with this
scenario. The only issue that I'm aware of is a recent one with the
Dell PowerEdge 720. The system BIOS had to be updated, and the
onboard NIC drivers needed to be updated.
Other than that, we haven't seen any issues with this type of setup.
Chris
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of m
> Sent: Tuesday, January 04, 2005 8:23 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: CSG/WI and RSA SecurID on same box
>
>
> Well im not keen on running Web Interface and CSG on the same
> box myself and prefer to keep them on seperate servers for
> security. I do know that when there is a cost/size element involved
> that the single CSG/WI server is a perfectly valid solution
> that a lot of people are running.
> Im not sure how much more of a security risk adding the basic
> RSA agent software would be. There was a vulnerable version
> of the RSA agent last year but really its down to how well
> the server is secured in the first place.
> Unless you know of an exploit ?
>
> regards
>
>
> ----- Original Message -----
> From: "Philip Walley" <pwalley@xxxxxxxxx>
> To: <thin@xxxxxxxxxxxxx>
> Sent: Tuesday, January 04, 2005 3:48 PM
> Subject: [THIN] Re: CSG/WI and RSA SecurID on same box
>
>
> > Wouldn't it be counter productive to do that? Seems like
> that would be
> > a security risk to run it all on the same box.
> >
> >
> > On Tue, 4 Jan 2005 15:16:22 -0000, m
> <mathras@xxxxxxxxxxxxxxxx> wrote:
> > >
> > > Seasons greetings I hope you all have a successful 2005.
> > >
> > > Just a quick question.
> > >
> > > Is anyone running CSG/Web Interface 3.0 and RSA Securid
> on the same box
> ?
> > > Is it possible ?
> > >
> > > Regards
> > >
> > >
> > ********************************************************
> > This Weeks Sponsor SeamlessPlanet.com Domain Names
> > Register your .com domain name for as low as $7.85
> > One of the lowest prices on the web! Part of The Kenzig Group.
> > http://www.seamlessplanet.com
> > **********************************************************
> > Useful Thin Client Computing Links are available at:
> > http://thin.net/links.cfm
> > ThinWiki community - Awesome SBC Search Capabilities!
> > http://www.thinwiki.com
> > ***********************************************************
> > For Archives, to Unsubscribe, Subscribe or
> > set Digest or Vacation mode use the below link:
> > http://thin.net/citrixlist.cfm
> >
>
>
> ********************************************************
> This Weeks Sponsor SeamlessPlanet.com Domain Names
> Register your .com domain name for as low as $7.85
> One of the lowest prices on the web! Part of The Kenzig Group.
> http://www.seamlessplanet.com
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ThinWiki community - Awesome SBC Search Capabilities!
> http://www.thinwiki.com
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or
> set Digest or Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3
Comment: Public PGP Key for Chris Lynch
iQA/AwUBQdrEXW9fg+xq5T3MEQKNQgCeKNEx7ekKAbWeJQ0uu1v39HKFHIUAoPPw
1yrfWzK+9WgewUAYfqMSn8fM
=jVAM
-----END PGP SIGNATURE-----
********************************************************
This Weeks Sponsor SeamlessPlanet.com Domain Names
Register your .com domain name for as low as $7.85
One of the lowest prices on the web! Part of The Kenzig Group.
http://www.seamlessplanet.com
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Awesome SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
