《CitrixCPS教程安全访问》由会员分享，可在线阅读，更多相关《CitrixCPS教程安全访问（39页珍藏版）》请在金锄头文库上搜索。
1、Citrix Presentation Server 4.0: AdministrationModule 12: Securing Access to Published ResourcesCitrix Course CTX-1256BIOverviewTopics covered in this module include:nSecuring Access with ICA EncryptionnSecuring Access with the Citrix SSL RelaynPreparing a Secure Gateway DeploymentnInstalling Secure
2、GatewaynConfiguring Secure Gateway for the Web InterfacenManaging the Secure GatewayCitrix Course CTX-1256BISecuring Citrix Presentation ServerMethods of security include:nICA encryptionnCitrix SSL RelaynCitrix Secure Gateway Citrix Course CTX-1256BISecuring Access with ICA EncryptionOptions for ICA
3、 encryption include:nConfiguring policiesnConfiguring published applications nUsing the Citrix Connection Configuration toolCitrix Course CTX-1256BIConfiguring ICA Encryption Policy ProcessCitrix Course CTX-1256BIConfiguring Application Security ProcessCitrix Course CTX-1256BICitrix Connection Confi
4、guration Security ProcessCitrix Course CTX-1256BIClient DeviceWeb Interface Server Server running Citrix Presentation ServerCitrix XML ServiceHTTP(S)XML in SSLSecuring Access with the Citrix SSL RelaySSL RelayCitrix XML ServiceSSL RelayICA in SSLICA in SSLClient DeviceServer running Citrix Presentat
5、ion ServerCitrix Course CTX-1256BIConfiguring Citrix SSL RelayCitrix Course CTX-1256BIConnection TabCitrix Course CTX-1256BICiphersuites TabCitrix Course CTX-1256BIInstalling and Configuring Secure GatewayTo prepare for a Secure Gateway deployment:nComplete the pre-installation checklistnInstall dig
6、ital certificatesnInstall Secure GatewaynConfigure Secure GatewayCitrix Course CTX-1256BIPreparing a Secure Gateway DeploymentPerform these tasks in the following order: nPrint Pre-Installation Checklist nInstall digital certificatesnInstall the Secure Gateway components nConfigure the Secure Gatewa
7、y Service nConfigure the Web Interface nTest the deploymentCitrix Course CTX-1256BICompleting the Pre-Installation ChecklistCitrix Course CTX-1256BIInstalling Digital CertificatesTypes of common digital certificates include:nRoot certificatenServer certificatenIntermediate certificateCitrix Course C
8、TX-1256BIFirewall Firewall InternetDMZSecure NetworkClien t Devic eSecure Gateway ServerAllocating Certificates in a Single HopServer FarmSTARootServ erWeb Interface ServerServ erRootServ erRootCitrix Course CTX-1256BIInstalling the Secure GatewayThe components CD-ROM for Presentation Server 4.0 isu
9、sed to install Secure GatewayCitrix Course CTX-1256BIConfiguring Secure Gateway for the Web InterfaceCitrix Course CTX-1256BIServer Certificate ScreenCitrix Course CTX-1256BISecure Protocol Parameters ScreenCitrix Course CTX-1256BIInbound Client Connections ScreenCitrix Course CTX-1256BIOutbound Con
10、nections ScreenCitrix Course CTX-1256BISecure Ticket Authority ScreenCitrix Course CTX-1256BIConnection Parameters ScreenCitrix Course CTX-1256BILogging Exclusions ScreenCitrix Course CTX-1256BIAccess OptionsCitrix Course CTX-1256BILogging Parameters ScreenCitrix Course CTX-1256BIConfiguring Secure
11、Gateway for the Web InterfaceSecure Gateway settings configured for the Web Interface include: nDefault Access Network settingsnNetwork address access settingsnSecure Gateway settingsnInternal firewall address settings Citrix Course CTX-1256BIConfiguring Default Network AccessAn administrator can co
12、nfigure default network access for Web Interface when using Secure Gateway with the following settings:nSecure Gateway DirectnSecure Gateway AlternatenSecure Gateway TranslatedCitrix Course CTX-1256BIConfiguring Client Address and Access MethodsCitrix Course CTX-1256BIConfiguring Secure Gateway Sett
13、ingsCitrix Course CTX-1256BIConfiguring Address TranslationCitrix Course CTX-1256BIManaging the Secure GatewayCitrix Course CTX-1256BISecure Gateway Management ConsoleCitrix Course CTX-1256BISecure Gateway Diagnostics ToolCitrix Course CTX-1256BICompleting the Secure Gateway ExercisesSecure Gateway
14、/Web Interface ServerClient DeviceFirewall Server FarmFirewall Real World ConfigurationClassroom ConfigurationCitri x XML Servi ceSecur e Ticke t Author ity Secur e Gatewa y Servic eSecure Gateway and Web Interface typically are on the same serverSecure GatewayServer also serves as the Client Device
15、Student Configuratio nCitrix Course CTX-1256BISecure Gateway and Web Interface SystemInstall Server CertificateConfigure IIS Install Secure Gateway ServiceConfigure Secure Gateway Settings 12-1Test Secure Gateway InstallationStudent Exercises Overview12-212-412-312-5Secure GatewayServer also serves
16、as the Client DeviceStudent Configuratio nCitrix Course CTX-1256BIExercisesThe instructor will demonstrate the following:nExercise 12-1: Installing Server and Root CertificatesnExercise 12-2: Installing Secure GatewaynExercise 12-3: Configuring Secure Gateway SettingsnExercise 12-4: Confirming Secure Gateway Settings Citrix Course CTX-1256BIReviewTopics covered in this module include: nSecuring Access with ICA EncryptionnSecuring Access with the Citrix SSL RelaynPreparing a Secure Gateway Deplo
