Hi Ron, We are looking at doing Secure Gateway but we want that extra layer of security that SecureID gives us. Are you saying Nfuse 1.71 does not allow secureID in CSG? Jay -----Original Message----- From: Ron Oglesby [mailto:roglesby@xxxxxxxxxxxx] Sent: Tuesday, November 26, 2002 12:37 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Planning questions I would suggest the following since you are already using NFuse. Get the CSG (its free)=20 Install the IIS/NFuse server and a CSG server in the DMZ Setup the MF boxes in the trusted network You can then load balance the CSG and IIS/Nfuse boxes if you want and this config will allow cheap secure access to the MF servers without exposing them to the internet. For an extra layer of security (if you use them) you can integrate the CSG/Nfuse setup with SecureID using Project willamette or even NFuse 1.8 (in beta) Ron Ron Oglesby Senior Technical Architect =20 RapidApp Office 312.372.7188 Mobile 312.961.2380 email roglesby@xxxxxxxxxxxx =20 -----Original Message----- From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=20 Sent: Tuesday, November 26, 2002 12:28 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Planning questions Thanks for the response. The new servers will be running new applications that will not be installed on the other servers for political and technical reasons that need not be discussed. :) We have sort of ruined our 1.6 implementation as we have customized it for our environment. We stole portions of Columbia and added additional functionality suited for our needs specifically. So, maybe a migration to 1.8 beta would fit for us. I'll have to do more research. On a related, but different, note, what are some recommendations for securing the Citrix servers if they are connected to the Internet? Where do you place them in the environment so they are secure, but still functional with access to internal services, for instance Exchange? Just looking for some best practices type of information.=20 Thanks again! Dennis Parker -----Original Message----- From: Ron Oglesby=20 Sent: Tuesday, November 26, 2002 8:29 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Re: Planning questions Your best bet is to install the new XP servers in their own farm. The mixed mode Citrix offers is only for a transition period and then it is still clunky at best. IF the new servers are hosting new applications you can use NFuse 1.6 with Columbia (or the 1.8 beta) to present Icons from both farms in one NFuse interface.=3D20 IF the servers are hosting the same applications I would get the two new server ready and tested, start shifting users to them (possibly still via Columbia) then once the user load is reduced on the existing 1.8 boxes begin rebuilding them as XP servers in the new farm. Ron Ron Oglesby Senior Technical Architect =3D20 RapidApp Office 312.372.7188 Mobile 312.961.2380 email roglesby@xxxxxxxxxxxx =3D20 -----Original Message----- From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=3D20 Sent: Tuesday, November 26, 2002 10:18 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] Planning questions I currently have a 3 server NT 4.0 TSE with MF 1.8 farm with load balancing using NFUSE 1.6 to access. I have a need to add two additional servers to the farm, but would like them to be W2K with XPa. Can I bring the XPa servers into the 1.8 farm without issues or what issues can I expect to see? =3D20 Would I be able to access the applications on XPa through the NFUSE 1.6 web site, with the XML service still on the 1.8 server? =3D20 Would the W2K installation cause issues with the NT 4.0 servers? Thanks in advance for your assistance! Dennis Parker ***********************************************=3D20 This Weeks Sponsor OneApp Total Control Control, Secure and Audit your Thin Client Systems http://www.oneapp.co.uk ***********************************************=3D20 For Archives, to Unsubscribe, Subscribe or=3D20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ***********************************************=20 This Weeks Sponsor OneApp Total Control Control, Secure and Audit your Thin Client Systems http://www.oneapp.co.uk ***********************************************=20 For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm ***********************************************=20 This Weeks Sponsor OneApp Total Control Control, Secure and Audit your Thin Client Systems http://www.oneapp.co.uk ***********************************************=20 For Archives, to Unsubscribe, Subscribe or=20 set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor OneApp Total Control Control, Secure and Audit your Thin Client Systems http://www.oneapp.co.uk *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm *********************************************** This Weeks Sponsor OneApp Total Control Control, Secure and Audit your Thin Client Systems http://www.oneapp.co.uk *********************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link. http://thethin.net/citrixlist.cfm