Lab Question

---

 

You are about to deploy Citrix MetaFrame using Citrix's NFuse via the internet. All of your clients are Win32 and will access your applications using an external Web server. You wish to do this as securely as possible. You must come up with a basic design and description of how you will secure all the data paths.

Describe your design.

Answers

 

You should use the following security measure to secure the NFuse site:

1. Obtain a server certificate for your Web server and configure the Web server to use SSL encryption to protect usernames and passwords within the NFuse pages.

2. Obtain a server certificate for the back-end MetaFrame server. Then configure an SSL relay between the Web server and the MetaFrame server. This will protect the XML communication between these two servers.

3. Configure the NFuse Web pages to use authentication ticketing. This will reduce the amount of risk involved if a hacker intercepts the ICA file as it is downloaded to the end user.

4. Enable encryption on all published applications. This will protect the ICA data stream and will allow for each application launched via the NFuse page to run encrypted.

---