[THIN] Re: Planning questions

  • From: "Jensen, Jay" <jjensen@xxxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Tue, 26 Nov 2002 14:34:17 -0600

Hi Ron, 

We are looking at doing Secure Gateway but we want that extra layer of
security that SecureID gives us.  Are you saying Nfuse 1.71 does not allow
secureID in CSG?

Jay

-----Original Message-----
From: Ron Oglesby [mailto:roglesby@xxxxxxxxxxxx]
Sent: Tuesday, November 26, 2002 12:37 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions



I would suggest the following since you are already using NFuse.

Get the CSG (its free)=20
Install the IIS/NFuse server and a CSG server in the DMZ
Setup the MF boxes in the trusted network

You can then load balance the CSG and IIS/Nfuse boxes if you want and
this config will allow cheap secure access to the MF servers without
exposing them to the internet. For an extra layer of security (if you
use them) you can integrate the CSG/Nfuse setup with SecureID using
Project willamette or even NFuse 1.8 (in beta)

Ron

Ron Oglesby
Senior Technical Architect
=20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=20

-----Original Message-----
From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=20
Sent: Tuesday, November 26, 2002 12:28 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions


Thanks for the response.

The new servers will be running new applications that will not be
installed on the other servers for political and technical reasons that
need not be discussed.  :)

We have sort of ruined our 1.6 implementation as we have customized it
for our environment.  We stole portions of Columbia and added additional
functionality suited for our needs specifically.  So, maybe a migration
to 1.8 beta would fit for us.  I'll have to do more research.

On a related, but different, note, what are some recommendations for
securing the Citrix servers if they are connected to the Internet?
Where do you place them in the environment so they are secure, but still
functional with access to internal services, for instance Exchange?

Just looking for some best practices type of information.=20

Thanks again!
Dennis Parker

-----Original Message-----
From: Ron Oglesby=20
Sent: Tuesday, November 26, 2002 8:29 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions



Your best bet is to install the new XP servers in their own farm. The
mixed mode Citrix offers is only for a transition period and then it is
still clunky at best.

IF the new servers are hosting new applications you can use NFuse 1.6
with Columbia (or the 1.8 beta) to present Icons from both farms in one
NFuse interface.=3D20

IF the servers are hosting the same applications I would get the two new
server ready and tested, start shifting users to them (possibly still
via Columbia) then once the user load is reduced on the existing 1.8
boxes begin rebuilding them as XP servers in the new farm.

Ron

Ron Oglesby
Senior Technical Architect
=3D20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=3D20

-----Original Message-----
From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=3D20
Sent: Tuesday, November 26, 2002 10:18 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Planning questions


I currently have a 3 server NT 4.0 TSE with MF 1.8 farm with load
balancing using NFUSE 1.6 to access.  I have a need to add two
additional servers to the farm, but would like them to be W2K with XPa.


Can I bring the XPa servers into the 1.8 farm without issues or what
issues can I expect to see? =3D20

Would I be able to access the applications on XPa through the NFUSE 1.6
web site, with the XML service still on the 1.8 server? =3D20

Would the W2K installation cause issues with the NT 4.0 servers?

Thanks in advance for your assistance!
Dennis Parker

***********************************************=3D20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk

***********************************************=3D20
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
***********************************************=20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk

***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm


***********************************************=20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk

***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
*********************************************** 
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk

*********************************************** 
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm
*********************************************** 
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk

*********************************************** 
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link.

http://thethin.net/citrixlist.cfm

Other related posts: