secure gateway today

Citrix Confidential

Secure Gateway Today

Internet

Secure Gateway

Web Interface

STA

3rd Party Auth

MetaFrameXP Server

Farm

InternetExplorerand ICAClient

Port 443

Port 1494

Port 80

Port 80

Citrix Confidential

• The rest of the slides are the new Secure Gateway models. This is a sampling of the different configurations possible.

• All links that can be encrypted are shown that way in the diagrams.

Citrix Confidential

Single DMZ Design

Internet

Secure Gateway

Logon Agent AuthorizationService +

STA

3rd Party Auth

MetaFrameSecure Access

Manager

MetaFrameXP Server

Farm

HTTP(S)

ICA

InternetExplorerand ICAClient

Citrix Confidential

Single DMZ Design with Gateway Client

Internet

Secure Gateway

Logon Agent

AuthorizationService +

STA

3rd Party Auth

MetaFrameSecure Access

Manager

MetaFrameXP Server

Farm

HTTP(S)

ICA

InternalWeb

Servers

InternetExplorerand ICAClient

GatewayClient

Citrix Confidential

Single DMZ Design MetaFrame XP Only

Internet

Secure Gateway

Web Interface STA

3rd Party Auth

MetaFrameXP Server

Farm

HTTP(S)

ICA

InternetExplorerand ICAClient

Citrix Confidential

Double DMZ Design with Gateway Client

Internet

Secure Gateway

Logon Agent

AuthorizationService +

STA

3rd Party Auth

MetaFrameSecure Access

Manager

MetaFrameXP Server

Farm

HTTP(S)

ICA/Secure ICA

InternalWeb

Servers

InternetExplorerand ICAClient

GatewayClient

Secure GatewayProxy

Citrix Confidential

Double DMZ Design with MetaFrame XP

Internet

Secure Gateway

Web Interface

STA

3rd Party Auth

MetaFrameXP Server

Farm

HTTP(S)

ICA/Secure ICA

InternetExplorerand ICAClient Secure Gateway

Proxy