Citrix NFuse 1.5: Part 3 - Security
Todd is the author of Windows NT/2000 Thin Client Solutions: Implementing Terminal Services and Citrix MetaFrame.
NFuse Component Review
Back in the first article, “Citrix NFuse 1.5: Part 1 – Basic Setup and Configuration,” I outlined the three main components and provided the diagram shown in Figure 1. As the diagram clearly shows, three avenues of communication are used during a typical NFuse session.
HTTP traffic between the user's Web browser and the Web server
Citrix XML data traffic between the Web server and one or more MetaFrame servers
Citrix ICA traffic between the user's ICA client and one or more MetaFrame servers
NFuse component diagram.
When looking at the security of an NFuse installation, each of these areas must be evaluated for a potential security risk, and, where appropriate, the necessary configuration changes need to be made. I will look more closely at each of these three communication channels and outline the security options available.