[THIN] Re: Filter Nfuse application list
- From: "Ron Oglesby" <roglesby@xxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Mon, 18 Nov 2002 08:11:06 -0600
Well a static ICA file wont work if you are using the CSG, it has to be
NFuse.=20
So with that in mind I would probably create two websites. The reason is
this:
IF you want to base this on out-side versus inside and you want to stop
the icons from even appearing that means it has to be done at the
webpage. This means you would have to create a a piece of code (easily
found on the internet) to detect the client IP addess. Then in the
applistimpl.vbs put an IF statement in there to filter the apps based on
the return from the client's IP. IF this has to be full proof then the
problem here is that an IP can be spoofed...
OR you can just edit the applist.vbs on the server (for external users)
and set it up with an IF statement that checks the NFuseappFreidnlyname.
Like IF blahhh =3D "Notepad".
Not wuite sure where to put it, but it could be done relatively easily.
Ron Oglesby
Senior Technical Architect
=20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=20
-----Original Message-----
From: Jim Hathaway [mailto:JimH@xxxxxxxxxxxxxxx]=20
Sent: Friday, November 15, 2002 5:40 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Filter Nfuse application list
Of course the answer to this natively within current rev's of Nfuse is
no, but it's worthwhile to see if anyone out there has modified an Nfuse
config to do this so here it goes. . .=20
=20
I've got a client that is interested in 'filtering' the applications
that are available to end users 'regardless of their credentials'
through Nfuse w/ CSG. IE, when said end users log into an internal Nfuse
site on the LAN they can access any of 15 published applications, when
they login from home to a publicly available Nfuse site, they can access
only 1 application and nothing more.=20
=20
I know that Nfuse by default uses XML to get the available app list from
the metaframe servers and posts them as ICA link within frameset.asp.
Has anyone looked into modifying the asp code to either 'dump' any
non-desired applications from the resulting application list, or to
change the ICA file that gets dynamically created for the users so that
it will only connect to a certain app?
=20
Citrix Nfuse support told me that both in current and in planned revs
this option was 'not an option'. I can't believe that this hasn't been a
desired option for others out there. Has anyone played with and modified
the code in Nfuse enough to do this? Is there perhaps a third party
application or device that can help control this? (I'm aware of the fact
that devices like packeteer can restrict published application bandwidth
on a per app basis)=20
=20
I've got some other options I'm reviewing for this as well, (separate
single server MF farm with only 1 app published to it, and pointing the
external Nfuse to that) but would love to know if anyone's done this
kind of setup / modification with current rev's of Nfuse and could give
me some pointers. If you're out there, let me know
=20
Thanks,=20
=20
J
=20
=20
=20
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************
This Weeks Sponsor: Wyse Technologies
Get a free whitepaper on how to secure
your corporate data from Wyse. Click Below.
http://thethin.net/wyse.cfm
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts:
