security and encyption levels

[gdjodi]

Hey guys, kind of a loaded question but here goes.... we are running an environemtn that consists of gateway server, Web Interface and a farm of 2003/PS3 servers. I have been asked to document security including encryptions level, certificates etc.. I am looking to discover encryption and security levels from the user browser to the web interface and secutity to to PS servers can anyone direct me to a document or whitepaper on this issue?

 

[newbie000]

as you are using windows, your SSL is 128 bits from browser to gateway. Don't know what you mean by "security level". All info on your certificate can be found in your certificate and issued authority. From WI to internal PS, if youa re using NAT, PAT and internal encryption, then you can point this out. There are some white papers at Citrix site where you can fo to search line and find.

 

[gdjodi]

Thanks Newbie000....We are using SSL from client browser to web interface. What about the enryption between Web Interface and Secure gateway if that even applies ...then Security to the presentation servers? At the presentation level we are using the standard "basic encryption

 

[newbie000]

If you have installed CSG and WI on the same server, there won't be encryption unless someone makes it complex. From CSG to presentation servers, that depends how you setup. That depends fact belows:
- Presenatation servers are behind second firewall in secured zone
- you use PAT/NAT on this second firewall
- you use another SSL/TLS encryption for internal network

looks like you don't use internal encryption. If your company bought ONLY ONE certificate, then you don't have internal encryption.
I tried to explain in bad english ! cheers