Re: Metaframe firewall location

[Michael Mills <mmills () RKON COM>]

Actually neither is the "Best Practices" method.



Your purchase of Citrix Metaframe entitles you to install Citrix Secure
Gateway (or now known as Citrix Web Interface).



The layout should look like the following diagram







You can find more info @



http://support.citrix.com/kb/entry.jspa?entryID=134
<http://support.citrix.com/kb/entry.jspa?entryID=134&categoryID=186>
&categoryID=186



if you have any questions at all feel free to email





Michael Mills

mmills () rkon com

  _____

From: The EDUCAUSE Security Discussion Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kowal, Michael
Sent: Friday, September 03, 2004 6:28 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Metaframe firewall location



Which is a more secure scenario?



Installing a Metaframe server (joined to a windows domain) using SSL
accessible to the public on the DMZ interface of a firewall, while allowing
access from the metaframe server to the windows domain machines on your
internal network through the firewall?



Or



Leaving the Metaframe machine with an SSL connection open to the public
inside your administrative network?

********** Participation and subscription information for this EDUCAUSE
Discussion Group discussion list can be found at
http://www.educause.edu/cg/.
This email and any files transmitted with it are confidential and intended solely for the use of the individual or 
entity to whom they are addressed. If you have received this email in error please notify the system manager. This 
message contains confidential information and is intended only for the individual named. If you are not the named 
addressee you should not disseminate, distribute or copy this e-mail.

**********
Participation and subscription information for this EDUCAUSE Discussion Group discussion list can be found at 
http://www.educause.edu/cg/.