Secure Application Developer Portal » ocb

Post to Twitter | Comments (1) | Views (10814) |

11 Jan 2008 06:09 PM EST

[ Tags: netscaler , sap , appexpert , xenapp , apptips , tips , netscaler , mpx , lb , llb , slb , gslb , clustering , rewrite , client-ip , x-forwarded-for , apache , iis , headers , policies , policy , pe , request , response , cache , caching , appcache , compress , compression , appcompress , controller , acceleration , soa , soap , xml , wsdl , wisl , uddi , ica , rdp , ssl vpn , ica proxy , citrix load balancer , citrix load balancing , link load balancer , link load balancing , load balancer , load balancing , server load balancer , server load balancing , security load balancer , security load balancing , hardware load balancer , hardware load balancing , next gen load balancing , website load balancer , website load balancing , application load balancer , application load balancing , application switch , web application controller , application controller , application delivery , tcp multiplexing , ssl offload , ssl multiplexing , global server load balancing , wan load balancing , xml load balancer , xml load balancing , content rewrite , external url , internal url , home page redirect , apache rewrite , server obfuscation , application obfuscation , http header , policy engine , content switching , content switch , content acceleration , content accelerator , application acceleration , application accelerator , tcp acceleration , ssl acceleration , xml firewall , xml gateway , xml rewrite , xml acceleration , enterprise soa , terminal server , terminal switch , virtual terminal ]

posted by Craig Ellrod

We recently had a meeting with a large partner of ours and they handed down some hefty requirements. An average of 100 partners using their portal on any given month to access their development environments on the backend. It was clear that NetScaler could scale, but the question was how to keep all of those partners separated from each other, without them peeking into each others traffic. It turned out to be easier than we thought using the NetScaler as an SSL VPN with the addition of some policies bound to each partner's user group. The following is an overview of the network diagram, and there are some deployment guides to walk you through these installations.

The Citrix SSL VPN CPS Deployment Guide walks you through deploying NetScaler SSL VPN as an ICA Proxy and authentication point. It then walks you through deploying Citrix Presentation Server and the steps necessary to connect the SSL VPN to the CPS Applications. The guide includes Session policies which direct users upon authentication to specific CPS farms on the backend of the NetScaler SSL VPN. Think of it as an authentication portal.

The Citrix SSL VPN Deployment Guide walks you through deploying NetScalers as an HA Pair, and then as an SSL VPN with ICA Proxy OFF. The intention was to use the SSL VPN for regular VPN traffic, and not Citrix Presentation Server traffic. Just as well, policies can be combined on the same NetScaler Application Switch to allow both non-CPS and CPS traffic to traverse the same SSL VPN.

Tap into the power of AppExpert

Labels

Comments (1)

Vishal Ganeriwala says: