Basically I see it like this: Would you put a PC/Workstation that has access to your Domain and Network in a freely public location like a Train Station or Bus Stop? That's how I feel about having MetaFrame exposed to the internet directly via 1494. If someone hits your MetaFrame Box on 1494 from the Internet they will be sitting at your MS Gina and I just don't want that out there. We actually go a step further and force Token Authentication before we even present the Web Interface to the users. ThinFan >From: "Andrew Rogers" <Andrew.Rogers@xxxxxxxxxxxxxxxxxx> >Reply-To: thin@xxxxxxxxxxxxx >To: <thin@xxxxxxxxxxxxx> >Subject: [THIN] Port/box Security >Date: Thu, 20 May 2004 14:33:56 +0100 > >For those that dont have some sort of intermediary between the internet >and= > their citrix boxes, do you allow direct access from the internet? >Can anyone give any reasoned arguments as to why the servers shouldnt be >di= >rect on the internet? (only the ica port redirected from the firewall to >th= >e server) > >Is there anything else to avoid this, other than CSG/VPNs? > >Andrew >--o-- > >******************************************************** >This Week's Sponsor - Tarantella Secure Global Desktop >Tarantella Secure Global Desktop Terminal Server Edition >Free Terminal Service Edition software with 2 years maintenance. >http://www.tarantella.com/ttba >********************************************************** >Useful Thin Client Computing Links are available at: >http://thin.net/links.cfm >*********************************************************** >For Archives, to Unsubscribe, Subscribe or >set Digest or Vacation mode use the below link: >http://thin.net/citrixlist.cfm _________________________________________________________________ Is your PC infected? Get a FREE online computer virus scan from McAfee® Security. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963 ******************************************************** This Week's Sponsor - Tarantella Secure Global Desktop Tarantella Secure Global Desktop Terminal Server Edition Free Terminal Service Edition software with 2 years maintenance. http://www.tarantella.com/ttba ********************************************************** Useful Thin Client Computing Links are available at: http://thin.net/links.cfm *********************************************************** For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thin.net/citrixlist.cfm