Citrix Secure Gateway v1.1

1
Citrix Secure Gatewayv1.1

• Customer Presentation
• Aug 2002

2
What is Citrix Secure Gateway?

• Citrix Secure Gateway is a secure Internet
  gateway between MetaFrame servers and ICA Client
  workstations that allows customers to simply and
  securely deliver applications across the
  Internet, on demand, to any device 

3
Typical Layout
Authentication
Access Mgmt.
Secure Connectivity
Firewall
Firewall
Citrix Secure Gateway
Citrix MetaFrame XP and/or MetaFrame for Unix
ClientWorkstations
CitrixNFuseClassic
Internet
DMZ
Internal Network
4
Benefits of Citrix Secure Gateway

• Provides simple, secure, remote access anywhere
  there is a PC with a browser and Internet
  connection.
• Lowers cost of ownership by removing need to
  maintain direct dial in facilities.
• Protects and extends your MetaFrame investment
  beyond the enterprise.
• Integrates employees, customers, partners.

5
Solutions incorporating CSG

• A full solution including CSG, NFuse Classic,
  and MetaFrame enables many different business
  scenarios
• Business Continuity
• Remote Employee Access
• Partner Access
• Remote shop-front systems
• Consumer information access

6
Key Features of Citrix Secure Gateway

• Strong Encryption
• Industry standard SSL v3.0 or TLS v1.0
• Uses standard SSL port 443 for ease of firewall
  traversal
• Minimal Client Configuration
• Supports all ICA clients with SSL/TLS (Tier 1)
• No additional client software required (e.g. VPN)
• Zero installed Java applet solution supported
• Single Authentication
• Integrates with NFuse Classic and NFuse Elite
• Possible integration with 3rd party auth e.g. RSA
  SecurID, SafeWord PremierAccess

7
Citrix Security Solutions
SecureICA SSL Relay Citrix Secure Gateway VPN Solutions
CSG is a simple and secure, ICA only solution
8
When to use SecureICA or SSL Relay

• Use SecureICA when
• Internal LAN / WAN / Intranet
• Secure DOS or Win 16 access is necessary
• Have older devices/ ICA clients that cannot be
  upgraded
• Risk of man-in-the-middle attack is acceptable
•  Use SSL Relay when
• Small number of MetaFrame servers to support (lt5)
• No need to secure access at DMZ
• No need to hide server IP addresses, or NAT is
  used
• Need end-to-end encryption of data between client
  and server

9
When to use CSG or VPN

• Use Citrix Secure Gateway when
• Large number of servers to support
• Want to hide internal network addresses
• Want to secure from DMZ
• Need two-factor authentication (in conjunction
  with NFuse)
• Need non-intrusive client install i.e. access
  from Internet cafes
• Use a Virtual Private Network (VPN) when
• Need two-factor authentication
• Need to create a secure pipeline for full (beyond
  ICA) network access
• Need to create secure tunnels between sites
• Want to secure from within DMZ
• Access is normally via same workstation i.e. OK
  to install additional client
• Want/need to use IPSEC

10
CSG v1.1 availability

• CSG v1.1 Windows (English) available on MetaFrame
  FR2 Components CD
• CSG v1.1 Windows (English) is fully
  internationalized for operation on non-English
  Windows 2000.
• CSG v1.1 Windows (Japanese) available on
  MetaFrame FR2 (J) Components CD
• Download available from Citrix Secure Portal for
  Subscription Advantage Customers
• CSG v1.1 Solaris available from secure Portal for
  Subscription Advantage customers.

11
(No Transcript)