RE: Securing Citrix NFuse and IIS 5

From: Chris Calaf (ccalaf@WBCM.com)
Date: 10/18/02 

From: Chris Calaf <ccalaf@WBCM.com>
To: "'auto300258@hushmail.com'" <auto300258@hushmail.com>, focus-ms@securityfocus.com
Date: Fri, 18 Oct 2002 13:50:28 -0400

Citrix has a Product call Citrix Secure Gateway that uses SSL

http://citrix.com/products/csg.asp

you may need a subscription advantage

-----Original Message-----
From: auto300258@hushmail.com [mailto:auto300258@hushmail.com]
Sent: Friday, October 18, 2002 12:22 PM
To: focus-ms@securityfocus.com
Subject: Securing Citrix NFuse and IIS 5

I'm working on a pilot deployment of Citrix with its NFuse component on
Win2000 to allows remote users to access our LAN via web browser. NFuse uses
IIS 5 installed on the same machine to deliver all of our applications to
the remote user.

Is there anything special to know about hardening IIS 5 in conjunction with
NFuse that anyone here has any experience with? What about a good white
paper on hardening IIS 5, besides what Microsoft has on their web site?

Has anyone used EEye's SecureIIS product with NFuse/IIS5? I've heard very
good things about it and hope it might be useful here.

Thanks for any information you might be able to provide.

Regards.

Get your free encrypted email at https://www.hushmail.com

Relevant Pages

  • RE: Securing Citrix NFuse and IIS 5
    ... NFUSE 1.7 doesn't really add a whole lot of vulnerability points to an IIS ... Harden the IIS server, ... Use SSL for communications between your NFUSE server and Citrix Data ...
    (Focus-Microsoft)
  • RE: Securing Citrix NFuse and IIS 5
    ... >Citrix has a Product call Citrix Secure Gateway that uses SSL ... >I'm working on a pilot deployment of Citrix with its NFuse component ... >Is there anything special to know about hardening IIS 5 in conjunction ...
    (Focus-Microsoft)
  • RE: Securing Citrix NFuse and IIS 5
    ... This code is by-passing your firewall. ... potentially to the same IIS bugs that everyone is because all authentication ... looking at the Citrix solution, and I hadn't heard of Aspelle. ...
    (Focus-Microsoft)
  • FW: Win2K security roll out package and citrix xp
    ... I found this same this same problem with Citrix XP, running NFuse v1.5. ... --Citrix NFuse web server serving the access to the Published Applications ... environment, and probably shows, yet again, why ALL patches and updates need ...
    (NT-Bugtraq)
  • RE: This time, how secure is Citrix?
    ... to your Citrix system than from any PC on the Internet. ... RSA SecureID also integrates with NFUSE. ... This time, how secure is Citrix? ...
    (Security-Basics)