[THIN] Re: Port/box Security
- From: "Chris Lynch" <lynch00@xxxxxxx>
- To: <thin@xxxxxxxxxxxxx>
- Date: Thu, 20 May 2004 08:11:54 -0700
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Agreed. Why would you NOT run WI and SG to provide user access to
your farm (for both Internal and External users)? Having the Windows
GINA displayed via the ICA protocol isn't very security conscious.
Chris
> -----Original Message-----
> From: thin-bounce@xxxxxxxxxxxxx
> [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Paul DeHaan
> Sent: Thursday, May 20, 2004 7:39 AM
> To: thin@xxxxxxxxxxxxx
> Subject: [THIN] Re: Port/box Security
>
> Look at all the latest remotely exploitable security issues
> and worms. = That should be enough to convince you to at
> least have a perimeter around = your production environment.
> Search the web there are countless articles = talking about this.
>
> >>> Andrew.Rogers@xxxxxxxxxxxxxxxxxx 05/20/04 09:33AM >>>
> For those that dont have some sort of intermediary between
> the internet = and=3D their citrix boxes, do you allow
> direct access from the internet?
> Can anyone give any reasoned arguments as to why the servers
> shouldnt be = di=3D rect on the internet? (only the ica port
> redirected from the firewall to = th=3D e server)
>
> Is there anything else to avoid this, other than CSG/VPNs?
>
> Andrew
> --o--
>
> ********************************************************
> This Week's Sponsor - Tarantella Secure Global Desktop
> Tarantella Secure Global Desktop Terminal Server Edition Free
> Terminal Service Edition software with 2 years maintenance.
> http://www.tarantella.com/ttba=20
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm=20
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or=20 set Digest or
> Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
>
> ********************************************************
> This Week's Sponsor - Tarantella Secure Global Desktop
> Tarantella Secure Global Desktop Terminal Server Edition Free
> Terminal Service Edition software with 2 years maintenance.
> http://www.tarantella.com/ttba
> **********************************************************
> Useful Thin Client Computing Links are available at:
> http://thin.net/links.cfm
> ***********************************************************
> For Archives, to Unsubscribe, Subscribe or set Digest or
> Vacation mode use the below link:
> http://thin.net/citrixlist.cfm
-----BEGIN PGP SIGNATURE-----
Version: PGP 8.0.3
Comment: Public PGP Key for Chris Lynch
iQA/AwUBQKzKuW9fg+xq5T3MEQKsmgCgwi8W6Z0gUMupYIAT1YaGMOmuFgwAoKXK
bdw7n/CctZ/HNuLSTbYVm+2T
=SMaH
-----END PGP SIGNATURE-----
********************************************************
This Week's Sponsor - Tarantella Secure Global Desktop
Tarantella Secure Global Desktop Terminal Server Edition
Free Terminal Service Edition software with 2 years maintenance.
http://www.tarantella.com/ttba
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
***********************************************************
For Archives, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm
Other related posts:
