1. Secure Gateway Today Internet Internet Explorer and ICA MetaFrame
Client
MetaFrame
XP Server
Farm
Secure Gateway
Port 1494
Internet
STA
Port 80
Port 443
Port 80
CSG Today. Red lines are firewalls on all slides.
Web Interface
3rd Party Auth

2. The rest of the slides are the new Secure Gateway models
The rest of the slides are the new Secure Gateway models. This is a sampling of the different configurations possible.
All links that can be encrypted are shown that way in the diagrams.

3. Single DMZ Design Internet MetaFrame XP Server Farm Internet Explorer
and ICA
Client
Secure Gateway
Internet
MetaFrame
Secure
Access
Manager
Secure Gateway and Logon Agent on one box in DMZ. All links except the link to the Metaframe XP servers can be encrypted with SSL.
Logon Agent
Authorization
Service +
STA
HTTP(S)
ICA
3rd Party Auth

4. Single DMZ Design with Gateway Client
MetaFrame
XP Server
Farm
Internet
Explorer
and ICA
Client
Secure Gateway
Gateway
Client
Internal
Web Servers
MetaFrame
Secure
Access
Manager
Internet
Addition of Gateway Client (an Active X control) that allows access to content beyond Secure Access Manager and MetaFrame XP servers. Any other internal web content may be accessed.
Logon Agent
Authorization
Service +
STA
HTTP(S)
ICA
3rd Party Auth

5. Single DMZ Design MetaFrame XP Only
XP Server
Farm
Internet
Explorer
and ICA
Client
Secure Gateway
Internet
Secure Gateway and Web Interface on one box in DMZ only communicating with the MetaFrame XP servers.
Web Interface
STA
HTTP(S)
ICA
3rd Party Auth

6. Double DMZ Design with Gateway Client
MetaFrame
XP Server
Farm
Internet
Explorer
and ICA
Client
Secure Gateway
Proxy
Secure Gateway
Gateway
Client
Internal
Web Servers
MetaFrame
Secure
Access
Manager
Internet
Double DMZ model
Authorization
Service +
STA
Logon Agent
HTTP(S)
ICA/Secure ICA
3rd Party Auth

7. Double DMZ Design with MetaFrame XP
Internet
Explorer
and ICA
Client
MetaFrame
XP Server
Farm
Secure Gateway
Proxy
Secure Gateway
Internet
STA
Double DMZ with MetaFrame XP only.
Web Interface
HTTP(S)
ICA/Secure ICA
3rd Party Auth