"The majority of users in a typical enterprise simply want frequent, location-independent access to a few key applications, such as , calendar and selected reports.“ - John Girard, vice president and director of research at Gartner Group

The Internet — network of choice n Global population now exceeds 200 million users n Will reach one billion in the next 2 – 5 years n By 2004, e-commerce solutions will reach $2.5 trillion

The Internet — network of choice Greater Faster Lower reach implementation cost Partners Competitive data and joint initiatives Suppliers Inventory updates and production status Employees Most up-to-date news, information and apps Customers Enhanced interactive e-commerce

What is Citrix Secure Gateway? Citrix Secure Gateway is a secure Internet gateway between MetaFrame® servers and ICA Client workstations that allows customers to simply and securely deliver applications across the Internet, on demand, to any device

Benefits of Citrix Secure Gateway n Provides secure remote access - anywhere n Lowers cost of ownership n Protects your MetaFrame investment n Integrates employees, customers, etc.

Citrix Security Solutions SSL Solutions CSG is a simple and secure, ICA only solution SecureICA™ SSL Relay Citrix Secure Gateway Citrix Extranet™ Lower Security Highest Security

When to use SecureICA or SSL Relay Use SecureICA when:  Internal LAN / WAN / Intranet  Secure DOS or Win 16 access is necessary  Have older devices/ ICA clients that cannot be upgraded  Risk of “man-in-the-middle” attack is acceptable Use SSL Relay when:  Small number of MetaFrame servers to support (<5)  No need to secure access at DMZ  No need to hide server IP addresses, or NAT is used  Need end-to-end encryption of data between client and server

When to use CSG or Citrix Extranet Use Citrix Secure Gateway when:  Large number of servers to support  Want to hide internal network addresses  Want to secure from DMZ  Need two-factor authentication (in conjunction with NFuse)  Need non-intrusive client install i.e. access from Internet cafes Use Citrix Extranet or another VPN when:  Need two-factor authentication  Need to create a secure pipeline for full (beyond ICA) network access  Need to create secure tunnels between sites  Want to secure from within DMZ  Access is normally via same workstation i.e. OK to install additional client  Want to use IPSEC

Key Features of Citrix Secure Gateway Strong Encryption n Industry standard SSL 3.0 Minimal Client Configuration n Uses latest ICA client Single Authentication n Integrates with NFuse Simplified Server Management n Gateway to MetaFrame server farm Ease of Firewall Traversal n Uses standard port 443

Typical architecture MetaFrame Server Farm Citrix XML Service Secure Web Server Citrix NFuse Citrix Secure Gateway ICA Client Web Browser

CSG Architecture – key points Authorization based on ticketing, leverages NFuse for authentication n Compatible with a wide range of authentication systems n Compatible with any Web-compatible authentication n Replaceable Secure Ticketing Authority n Works with replaceable authentication – e.g. SecurID, Smart Card Operates in Gateway mode – installed in DMZ n Highly scalable – by design n Single CSG server can support 500 to 2000 concurrent connections n Highly reliable – fail-over support for STA, external Load Balancer for main CSG Server Uses XML for inter-component communication n Components are easily replaceable by Citrix or 3 rd party

Pricing and Packaging

Pricing, Packaging, Subscription Advantage Pricing n Citrix Secure Gateway is delivered at no cost as a benefit of Subscription Advantage. Therefore, there is no price associated with the product. Packaging n Citrix Secure Gateway is available via the Citrix Secure Portal only at There is no physical media. n CSG is less than 6MB in size Subscription Advantage Fulfillment n Subscription Advantage customers to be contacted via . n Only customers who have purchased a MetaFrame XP solution, or MetaFrame for UNIX, and have a valid and active Subscription Advantage contract are entitled to receive Citrix Secure Gateway as a benefit. n These customers can visit the Citrix Secure Portal Web site at for Subscription Advantage benefit fulfillment. n Citrix Secure Gateway will NOT be optionally sold to MetaFrame XP for Windows and MetaFrame for UNIX customers who did not buy with Subscription Advantage,

For More Information… For More Information n Contact a local member of the Citrix Solutions Network™ n Connect to Citrix Web site at: