[THIN] Re: Citrix Secure Gateway on trusted network ?

  • From: "Claudio Rodrigues" <crodrigues@xxxxxxxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 8 Mar 2004 10:25:02 -0500

You can have the CSG on the DMZ.
For the certificate what matters is the FQDN (assuming you create the
certificate request using FQDN of course) so does not matter if the CSG
has a real IP or DMZed one.
Just make sure you create on the DNS an entry to CSG.yourcompany.com and
create the certificate using this FQDN.


-----Original Message-----
From: Jan Homan [mailto:jan@xxxxxxxxxx]=20
Sent: March 8, 2004 5:04 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Citrix Secure Gateway on trusted network ?



Is it possible to have Citrix Secure Gateway on
the trust network (local) or a DMZ zone which has NAT IP-adresses
(e.g 10.10.10.x).

We would map the public IP-address of the Secure Gateway either
to the local IP-adress or to the IP-addres on the DMZ zone.

We need to do this because we do not have enough public IP-addresses.

The issue I can think of is that the Certificate for CSG will not work,
because it is based on a public IP-adress en a FQD name.
Meaning how do you configure DNS (lookup) such that this work.

Any comments/suggestions are very much appreciated.

Jan
********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com=20
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

********************************************************
This weeks sponsor triCerat Inc.
triCerat makes your job easier by offering essential
applications to eliminate your printing, policy and profile,
and your application management problems.
http://www.triCerat.com 
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: