Lab Question

---

 

You are the MetaFrame administrator for ABC Manufacturing, Inc. ABC has two Citrix server farms, a Citrix MetaFrame for Windows 1.8 farm and a Citrix MetaFrame XP for Windows 1.0 farm, both residing within the same domain. They would like both of these farms to be accessible via the Internet with maximum security from the ICA Client device to the Web server and Citrix server. In addition, they wish to force all domain-specific information for their users. Design a plan to present to the board how this can be accomplished.

Answers

 

The following steps will need to be performed to maximize secure communications between the ICA Client device and the Web server and Citrix server and create an NFuse Web site capable of supporting these technologies.

1. Ticketing will allow all secure authentication without passing them through the customized ICA files. The Citrix MetaFrame XP for Windows servers support this by default. The Citrix MetaFrame for Windows 1.8 servers will need Feature Release 1 licensed and activated in order for ticketing to work.

2. 128-bit encryption as a minimum requirement on all published applications will ensure that the ICA session is as secure as possible.

3. Enable HTTPS communication on the Web server. HTTPS requires only a digital certificate to be installed on the Web server. Virtually all Web servers and Web browsers support this technology seamlessly.

4. Install a firewall to allow only inbound Web traffic and ICA session communication. The following TCP ports will need to be opened for inbound communication: 80 for HTTP traffic, 443 for HTTPS traffic, and 1494 for ICA session traffic.

5. Enable NAT on the firewall. NAT enables the MetaFrame server internally to have an internal, nonpublic, nonroutable IP address (not accessible through the Internet) and an alternate address that is reachable for remote communications.

6. Using the Web Site Wizard, create a custom NFuse Web site that will allow for ASP scripting, ticketing, and explicit login domain information. Once complete, the template ICA file will need to be modified to force remote users to specify the alternate address of the Citrix server.

7. Following the instructions on the NFuse ASP Examples Web page that installs with the NFuse Web Server Extensions, integrate into the custom-built NFuse Web site support for multiple farm display.

---