Citrix Secure Gateway - Partner

1
(No Transcript)
2

• "The majority of users in a typical enterprise
  simply want frequent, location-independent access
  to a few key applications, such as email,
  calendar and selected reports.
• - John Girard, vice president and director of
  research at Gartner Group

3
The Internet network of choice

• Global population now exceeds 200 million users
• Will reach one billion in the next 2 5 years
• By 2004, e-commerce solutions will reach 2.5
  trillion

4
The Internet network of choice
Greater Faster Lower reach
implementation cost
5
What is Citrix Secure Gateway?

• Citrix Secure Gateway is a secure Internet
  gateway between MetaFrame servers and ICA Client
  workstations that allows customers to simply and
  securely deliver applications across the
  Internet, on demand, to any device 

6
Benefits of Citrix Secure Gateway

• Provides secure remote access - anywhere
• Lowers cost of ownership
• Protects your MetaFrame investment
• Integrates employees, customers, etc.

7
Citrix Security Solutions
SecureICA SSL Relay Citrix Secure Gateway Citrix Extranet
Lower Security Highest Security
CSG is a simple and secure, ICA only solution
8
When to use SecureICA or SSL Relay

• Use SecureICA when
•   Internal LAN / WAN / Intranet
•   Secure DOS or Win 16 access is necessary
•   Have older devices/ ICA clients that cannot be
  upgraded
•   Risk of man-in-the-middle attack is
  acceptable
•  
• Use SSL Relay when
•   Small number of MetaFrame servers to support
  (lt5)
•   No need to secure access at DMZ
•   No need to hide server IP addresses, or NAT is
  used
•   Need end-to-end encryption of data between
  client and server

9
When to use CSG or Citrix Extranet

• Use Citrix Secure Gateway when
•   Large number of servers to support
•   Want to hide internal network addresses
•   Want to secure from DMZ
•   Need two-factor authentication (in conjunction
  with NFuse)
•   Need non-intrusive client install i.e. access
  from Internet cafes
•  
• Use Citrix Extranet or another VPN when
•   Need two-factor authentication
•   Need to create a secure pipeline for full
  (beyond ICA) network access
•   Need to create secure tunnels between sites
•   Want to secure from within DMZ
•   Access is normally via same workstation i.e.
  OK to install additional client
•   Want to use IPSEC

10
Key Features of Citrix Secure Gateway

• Strong Encryption
• Industry standard SSL 3.0
• Minimal Client Configuration
• Uses latest ICA client
• Single Authentication
• Integrates with NFuse
• Simplified Server Management
• Gateway to MetaFrame server farm
• Ease of Firewall Traversal
• Uses standard port 443

11
Typical architecture

• ICA Client
• Web Browser

• Secure Web Server
• Citrix NFuse

Citrix Secure Gateway

• MetaFrame Server Farm
• Citrix XML Service

12
CSG Architecture key points

• Authorization based on ticketing, leverages NFuse
  for authentication
• Compatible with a wide range of authentication
  systems
• Compatible with any Web-compatible authentication
• Replaceable Secure Ticketing Authority
• Works with replaceable authentication e.g.
  SecurID, Smart Card
• Operates in Gateway mode installed in DMZ
• Highly scalable by design
• Single CSG server can support 500 to 2000
  concurrent connections
• Highly reliable fail-over support for STA,
  external Load Balancer for main CSG Server
• Uses XML for inter-component communication
• Components are easily replaceable by Citrix or
  3rd party

13
Pricing and Packaging
14
Pricing, Packaging, Subscription Advantage

• Pricing
• Citrix Secure Gateway is delivered at no cost as
  a benefit of Subscription Advantage. Therefore,
  there is no price associated with the product.
• Packaging
• Citrix Secure Gateway is available via the Citrix
  Secure Portal only at www.citrix.com/mycitrix.
  There is no physical media.
• CSG is less than 6MB in size
• Subscription Advantage Fulfillment
• Subscription Advantage customers to be contacted
  via e-mail.
• Only customers who have purchased a MetaFrame XP
  solution, or MetaFrame for UNIX, and have a valid
  and active Subscription Advantage contract are
  entitled to receive Citrix Secure Gateway as a
  benefit.
• These customers can visit the Citrix Secure
  Portal Web site at www.citrix.com/mycitrix for
  Subscription Advantage benefit fulfillment.
• Citrix Secure Gateway will NOT be optionally sold
  to MetaFrame XP for Windows and MetaFrame for
  UNIX customers who did not buy with Subscription
  Advantage,

15
For More Information

• For More Information
• Contact a local member of the Citrix Solutions
  Network
• Connect to Citrix Web site at www.citrix.com/prod
  ucts/securegateway

16
(No Transcript)