[THIN] Re: Planning questions
- From: "Ron Oglesby" <roglesby@xxxxxxxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Tue, 26 Nov 2002 14:48:59 -0600
It does, but the easiest way to make it happen is to use preoject
Willamette
The trick here is this. The secureID setup will allow you to secure any
webpage. But will ask for the passcode prior to getting to the NFuse
webpage Project Willamette basically changes the default RSA page to
take the username password and passcode all in one page. It passes the
passcode to RSA then the username and password into the NFuse login
page.
Without project Willamette you have to login pages, one for RSA one for
NFuse.
With Nfuse 1.8 there is an option for RSA integration right in the
config.=20
Ron
Ron Oglesby
Senior Technical Architect
=20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=20
-----Original Message-----
From: Jensen, Jay [mailto:jjensen@xxxxxxxxx]=20
Sent: Tuesday, November 26, 2002 2:34 PM
To: 'thin@xxxxxxxxxxxxx'
Subject: [THIN] Re: Planning questions
Hi Ron,=20
We are looking at doing Secure Gateway but we want that extra layer of
security that SecureID gives us. Are you saying Nfuse 1.71 does not
allow
secureID in CSG?
Jay
-----Original Message-----
From: Ron Oglesby [mailto:roglesby@xxxxxxxxxxxx]
Sent: Tuesday, November 26, 2002 12:37 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions
I would suggest the following since you are already using NFuse.
Get the CSG (its free)=3D20
Install the IIS/NFuse server and a CSG server in the DMZ
Setup the MF boxes in the trusted network
You can then load balance the CSG and IIS/Nfuse boxes if you want and
this config will allow cheap secure access to the MF servers without
exposing them to the internet. For an extra layer of security (if you
use them) you can integrate the CSG/Nfuse setup with SecureID using
Project willamette or even NFuse 1.8 (in beta)
Ron
Ron Oglesby
Senior Technical Architect
=3D20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=3D20
-----Original Message-----
From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=3D20
Sent: Tuesday, November 26, 2002 12:28 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions
Thanks for the response.
The new servers will be running new applications that will not be
installed on the other servers for political and technical reasons that
need not be discussed. :)
We have sort of ruined our 1.6 implementation as we have customized it
for our environment. We stole portions of Columbia and added additional
functionality suited for our needs specifically. So, maybe a migration
to 1.8 beta would fit for us. I'll have to do more research.
On a related, but different, note, what are some recommendations for
securing the Citrix servers if they are connected to the Internet?
Where do you place them in the environment so they are secure, but still
functional with access to internal services, for instance Exchange?
Just looking for some best practices type of information.=3D20
Thanks again!
Dennis Parker
-----Original Message-----
From: Ron Oglesby=3D20
Sent: Tuesday, November 26, 2002 8:29 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Planning questions
Your best bet is to install the new XP servers in their own farm. The
mixed mode Citrix offers is only for a transition period and then it is
still clunky at best.
IF the new servers are hosting new applications you can use NFuse 1.6
with Columbia (or the 1.8 beta) to present Icons from both farms in one
NFuse interface.=3D3D20
IF the servers are hosting the same applications I would get the two new
server ready and tested, start shifting users to them (possibly still
via Columbia) then once the user load is reduced on the existing 1.8
boxes begin rebuilding them as XP servers in the new farm.
Ron
Ron Oglesby
Senior Technical Architect
=3D3D20
RapidApp
Office 312.372.7188
Mobile 312.961.2380
email roglesby@xxxxxxxxxxxx
=3D3D20
-----Original Message-----
From: Parker, Dennis [mailto:Dennis.Parker@xxxxxxxxxx]=3D3D20
Sent: Tuesday, November 26, 2002 10:18 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Planning questions
I currently have a 3 server NT 4.0 TSE with MF 1.8 farm with load
balancing using NFUSE 1.6 to access. I have a need to add two
additional servers to the farm, but would like them to be W2K with XPa.
Can I bring the XPa servers into the 1.8 farm without issues or what
issues can I expect to see? =3D3D20
Would I be able to access the applications on XPa through the NFUSE 1.6
web site, with the XML service still on the 1.8 server? =3D3D20
Would the W2K installation cause issues with the NT 4.0 servers?
Thanks in advance for your assistance!
Dennis Parker
***********************************************=3D3D20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************=3D3D20
For Archives, to Unsubscribe, Subscribe or=3D3D20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************=3D20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************=3D20
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************=3D20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************=3D20
For Archives, to Unsubscribe, Subscribe or=3D20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************=20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************=20
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************=20
For Archives, to Unsubscribe, Subscribe or=20
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
***********************************************
This Weeks Sponsor
OneApp Total Control
Control, Secure and Audit your Thin Client Systems
http://www.oneapp.co.uk
***********************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link.
http://thethin.net/citrixlist.cfm
Other related posts:
