Secure Gateway Today Internet Internet Explorer and ICA MetaFrame Client MetaFrame XP Server Farm Secure Gateway Port 1494 Internet STA Port 80 Port 443 Port 80 CSG Today. Red lines are firewalls on all slides. Web Interface 3rd Party Auth
The rest of the slides are the new Secure Gateway models The rest of the slides are the new Secure Gateway models. This is a sampling of the different configurations possible. All links that can be encrypted are shown that way in the diagrams.
Single DMZ Design Internet MetaFrame XP Server Farm Internet Explorer and ICA Client Secure Gateway Internet MetaFrame Secure Access Manager Secure Gateway and Logon Agent on one box in DMZ. All links except the link to the Metaframe XP servers can be encrypted with SSL. Logon Agent Authorization Service + STA HTTP(S) ICA 3rd Party Auth
Single DMZ Design with Gateway Client MetaFrame XP Server Farm Internet Explorer and ICA Client Secure Gateway Gateway Client Internal Web Servers MetaFrame Secure Access Manager Internet Addition of Gateway Client (an Active X control) that allows access to content beyond Secure Access Manager and MetaFrame XP servers. Any other internal web content may be accessed. Logon Agent Authorization Service + STA HTTP(S) ICA 3rd Party Auth
Single DMZ Design MetaFrame XP Only XP Server Farm Internet Explorer and ICA Client Secure Gateway Internet Secure Gateway and Web Interface on one box in DMZ only communicating with the MetaFrame XP servers. Web Interface STA HTTP(S) ICA 3rd Party Auth
Double DMZ Design with Gateway Client MetaFrame XP Server Farm Internet Explorer and ICA Client Secure Gateway Proxy Secure Gateway Gateway Client Internal Web Servers MetaFrame Secure Access Manager Internet Double DMZ model Authorization Service + STA Logon Agent HTTP(S) ICA/Secure ICA 3rd Party Auth
Double DMZ Design with MetaFrame XP Internet Explorer and ICA Client MetaFrame XP Server Farm Secure Gateway Proxy Secure Gateway Internet STA Double DMZ with MetaFrame XP only. Web Interface HTTP(S) ICA/Secure ICA 3rd Party Auth