[THIN] FW: CSG / NFUSE working with proxy servers

  • From: "Jim Kenzig http://thethin.net" <jimkenz@xxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Fri, 27 Sep 2002 23:23:38 -0400

MessageAnyone else have any ideas on this one?  Contact
mailto:gentryj@xxxxxxxxxxxx
Thanks,
Jim

-----Original Message-----
From: Gentry, Jim [mailto:gentryj@xxxxxxxxxxxx]
Sent: Friday, September 27, 2002 4:03 PM
To: jimkenz@xxxxxxxxxxxxxx
Subject: RE: CSG / NFUSE working with proxy servers


Jim,

My scenario is I have NFuse / CSG in my DMZ. I have clients that reside
behind a proxy server that doesn't support socks (
http://www.bluecoat.com/support/offerings/offering_gold.html ). They require
all internet traffic to go through their proxy.

Since this is the case, when the remote client logs into the NFuse server
and launches the ICA file, you fail to establish SSL / 443 communication
outbound through their firewall.

I actually just got off the phone with Peter Ghostine and he says that if a
remote site doesn't have socks proxy availability then you can't use CSG.
This means that the clients firewall has no choice but to open outbound TCP
traffic on port 443 / SSL. This is a problem since a lot of my clients are
Air force and the entire Air Force works behind an appliance proxy server
that does not support SOCKS.

If they could enable SOCKS, then I could configure the NFuse server to us
the client browser socks setting.

This information is very hard to find. If you find any different resolutions
please keep me informed. This will become a bigger issue on the threads on
TheThin down the road.

Thanks again,

-jg


  -----Original Message-----
  From: Jim Kenzig [mailto:jimkenz@xxxxxxxxxxxxxx]
  Sent: Friday, September 27, 2002 3:13 PM
  To: Gentry, Jim
  Subject: RE: CSG / NFUSE working with proxy servers


  What is the actual problem? Have you opened port 443? Search the archives
for CSG also there is a lot of stuff there.
  http://thethin.net/archive1.cfm
  JK


**********************************************
This weeks sponsor Kevsoft Corporation 
TScale by Kevsoft Corporation 
Support 30% to 40% more users on your server farm
without buying new hardware!  
http://www.kevsoft.com/
***********************************************

For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts:

  • » [THIN] FW: CSG / NFUSE working with proxy servers