[THIN] Re: Zone Preference and Failover

  • From: "Andrew Wood" <andrew.wood@xxxxxxxxxxxxxxxx>
  • To: <thin@xxxxxxxxxxxxx>
  • Date: Mon, 3 Oct 2005 18:28:32 +0100

Oo lordy it's the mps4 exam all over again ?!! Glad they didn't ask this one
:)

Looking at your policies - yes

If you've these 2 security groups, and you've configured these policies then
zonea users will connect to zonea and never zoneb and vice versa

But you said you had users who needed to access across zones for some
applications

So, I suggested an additional group policy, that applied to the servers
hosting these applications that overrode the default settings. 

But now I write it again I thought - that'd be clever if it worked  - then I
remembered that you can't use servers as selection criteria for zone
policies.

D'oh!

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Evan Mann
Sent: 03 October 2005 17:53
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Zone Preference and Failover

I assign users to the servers in the different zones based on an AD Security
Group.

Let say....

Policy Priority 1 (highest) with apply to set to ZoneA SG, with ZoneA
primary, and ZoneB Never connect Policy Priority 2 (lowest) with apply to
set to ZoneB SG, with ZoneB primary, and ZoneA Never connect 

The users who need to have access to both servers are in ZoneA SG and ZoneB
SG.

If a published app they are trying to hit is abailable on servers in ZoneA
and ZoneB (such as Outlook), this setup of policies should make it so they
only access Outlook from the servers in ZoneA?

If a published app is only only available on servers in ZoneB, the lower
policy should provide them access to it?

There won't be a conflict between the policies with the way they'd be set
above?




-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Andrew Wood
Sent: Monday, October 03, 2005 12:51 PM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Zone Preference and Failover

Why not apply a zone policy with an 'apply to' that also includes the
servers that these apps are on?

If you put that policy at a higher priority than the standard policies it
should kick in with its settings first.


-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf
Of Evan Mann
Sent: 29 September 2005 15:16
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Zone Preference and Failover

Does Zone Preference and Failover only go to a backup group if the servers
in the primary zone are physically unreachable? Or will it failover under
high load situations?

I have a situation where I need to use zone preference to isolate different
groups of users to different zones, but I have some users who need to cross
both zones.  I don't want those users crossing the zones for applications
like MS Office, only specific applications made available on each zones
servers.

Right now, a user who is primary group zone 1 and backup group for zone 2,
can launch the app that is only made available on a server in zone 2, but
I'm not sure if some situation cause them to start launching applications
like Outlook in zone 2 (as that app is available on servers in both zones).





********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm
********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
**********************************************************
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use
the below link:
http://thin.net/citrixlist.cfm

********************************************************
This Weeks Sponsor: triCerat Inc.
You need Day Zero Protection!
Get Proactive with triCerat's Simplify Suite.
Solve printing, security and profile problems before they occur.
http://www.tricerat.com/?thethintl2
********************************************************** 
Useful Thin Client Computing Links are available at:
http://thin.net/links.cfm
ThinWiki community - Excellent SBC Search Capabilities!
http://www.thinwiki.com
***********************************************************
For Archives, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
http://thin.net/citrixlist.cfm

Other related posts: