Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Citrix Client Connectivity question

Status
Not open for further replies.

supp10967

IS-IT--Management
Jan 17, 2004
23
US
It is my understanding that with NFUSE the end-client talks port 80 or 443 to the NFUSe server ONLY and the NFUSE server actually has the ICA session with the Citrix server hosting the applications. THe application is delivered to the NFUSE server in and ICA session and XML converts it to be delivered via an HTTP viewer to the client. Is this an accurate statement? MY security guys are insisting that the client talks ICA...


SO .. if I firewalled between NFUSe and the Client.. used (HTTP with SSL)port 443 .. thats all they would need to allow??
 
NFuse is nothing more then the webbased version of the PN client, with the same behaviour.
Your security guys are right; logging into NFuse is port 80 or 443, and starting a session is 1494.

If you want to use only 443, you need the (free for SA users) Citrix Secure Gateway (CSG) product, which converts 1494 traffic into 443 traffic.
CSG works in combination with NFuse/WI.

Free citrixprinting support
 
A citrix session is ALWAYS direct between Client and Citrix server even with NFUSE as part of the solution. NFUSE only creates a web page full of icons and acts as a go between between client and citrix server until the ICA file is downloaded to the client after which it is client to Citrix only.

Cheers
Scott
 
with that in mind... if I need to publish an app or my Unix based users (using the Java or Netscape plugin...) would I have to do that outside of NFUSE. NFUSE seems to call ASP stuff which blows up on Netscapa ena doms other browsers..

 
I think I got your question.

Yes you would have to publish from Management Console, you would not have to touch NFUSE at all. Use the Java Client, don't know about netscape.

Cheers
Scott
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top