• Save
Citrix Remote Access Solution Soup
Upcoming SlideShare
Loading in...5
×
 

Citrix Remote Access Solution Soup

on

  • 2,601 views

BriForum London 2012 Lightning Round session

BriForum London 2012 Lightning Round session

Statistics

Views

Total Views
2,601
Views on SlideShare
1,477
Embed Views
1,124

Actions

Likes
0
Downloads
0
Comments
0

3 Embeds 1,124

http://blog.danbrinkmann.com 1043
http://blog.whatwoulddando.com 79
http://www.linkedin.com 2

Accessibility

Categories

Upload Details

Uploaded via as Microsoft PowerPoint

Usage Rights

© All Rights Reserved

Report content

Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
  • Full Name Full Name Comment goes here.
    Are you sure you want to
    Your message goes here
    Processing…
Post Comment
Edit your comment

    Citrix Remote Access Solution Soup Citrix Remote Access Solution Soup Presentation Transcript

    • WelcomeBriForum | © TechTarget
    • Citrix Remote Access SolutionSoup - CSG, AG, AGEE, NSDan Brinkmann @dbrinkmannblog.danbrinkmann.comSolutions Architect, VMware vExpertLewan & Associates (Denver, CO)BriForum | © TechTarget
    • Agenda● Architecture● Citrix Secure Gateway (CSG)● Citrix Access Gateway Standard (CAG)● Citrix Access Gateway Enterprise Edition (CAG-EE)● Netscaler platform● What do you choose?BriForum | © TechTarget 3
    • Remote Access ArchitectureBriForum | © TechTarget 4
    • Remote Access● ICA Proxy - Included in AG platform licenses - Most common requirement● SSL VPN - Included in Platinum or Universal License● Endpoint Analysis ● Included in Platinum or Universal LicenseBriForum | © TechTarget 5
    • Citrix Secure Gateway● Windows based● Proxies all traffic to Web Interface● “Free”● No built in HA/LB● ICA Proxy only● Long path for Pnagent● No authentication● No support for Storefront/CloudGateway (no 2 factor in SF)● Effectively it’s finally deadBriForum | © TechTarget 6
    • Citrix Access Gateway Standard (5.04)● Physical or virtual appliance - Both “rated” to 500 users for SSL VPN - Model 2000 (EOL) or Model 2010 physical appliance - *Also a model MPX 5500 but is using EE* - VPX (virtual appliance) model● ICA Proxy and SSL VPN● Opswat integration for Endpoint Analysis● Long path for pnagent● Supports HA/Clustering● Supports multistream ICA● No built-in LB for WI/SF/XMLBriForum | © TechTarget 7
    • Citrix Access GatewayBriForum | © TechTarget 8
    • Citrix Access Gateway Enterprise Edition (AG 10)● Physical (MPX 5500) and virtual appliance (VPX) - VPX rated for 500/100 SSL trans/sec (1K/2K) - VPX rated for 300 concurrent SSL VPN users● ICA proxy and SSL VPN● Endpoint Analysis isn’t using Opswat● HTTP header policy● Supports multistream ICA● Supports HA/Clustering● Web socket support HTML5 Receiver● No built-in LB for WI/SF/XMLBriForum | © TechTarget 9
    • Netscaler● All versions Standard/Enterprise/Platinum include CAG-EE● Adds additional functionality for LB/AF….● Physical or virtual appliance - Adds throughput options on VPX 10, 200, 1000, 3000 - Additional scalability options in physical appliance● Health monitors for WI/XML and aware of STA availability● Load balancing of WI/SF/XML● GSLB for XA/XD infrastructure● Support for WI on NS BriForum | © TechTarget 10
    • Physical vs Virtual● Limited SSL scalability on virtual platform● Network placement (resources available internal vs dmz)● SSL transactions/sec● Certificate size● Throughput● Other usesBriForum | © TechTarget 11
    • Want me to make it easy for you?● Secure Gateway – dead/dying…move on● Access Gateway● Access Gateway Enterprise Edition● Netscaler Standard/Ent/Plat● Physical or virtualBriForum | © TechTarget 12