Citrix local drive access?

[pinkpanther56]

We are using Citrix PS 4.5 with web interface.

I'd like to know what the risks are to our network if we allow home users to see their local drives while connected to the network. Basically I can't guarantee the AV and patch status of their home PC's.

We are using Citris Secure Gateway that runs anti virus (will that scan traffic from home users?) and of course our file servers are all running AV but I still have concerns.

What do you all think?

Thanks.

 

[scanjam]

provided the servers have regularly updated protection you should be fine. We have always had "relaxed" policies around client drive mappings and never had an issue regardless of the state of the client machine...

AV on the SG box wont make a difference o the sessions, (really only to the box itself)

For the over cautious you could implement an access gateway device, that will set policies to scan local client machines and detect for the presense of a working and known AV solution on the clients PC, and then ensure its up to date BEFORE letting them connect to the corporate network..

but you have to find a happy medium between restrictive policies and relaxing rights for teh remote access solution to work (with out increasing the Help desk calls unnecessarily)


good luck!!!

 

[Hof]

Hi
You could be vulnerable to these new worms that spread through USB sticks. We had an outbreak on a few fileservers caused by client drive mapping after a user had an infected USB stick in his client computer and that spread through the ICA stream in to the LAN. Even though updated the AV the Citrix servers did not detect this.
BR
/Hof

 

[pinkpanther56]

Ok so there are worms that can spread through citrix client drive mapping?

 

[Hof]

Yes this one for example

http://www.sophos.com/security/analyses/viruses-and-spyware/w32vbeas.html