Proxy, Security

Citrix Secure Gateway via https-only

René Jorissen on February 4, 2013 0 Comments • Tags: #address #citrix #gateway #http #https #ip #redirect #restriction #secure #unsecure

Configuring a Citrix Secure Gateway (CSG) server is simple, but provides a powerful solution to access resource from remote locations. CSG is an application installed on a DMZ server. Mostly I also configure the Citrix WebInterface on the same server. The CSG instance listens on TCP/443 and the WI instance listens on TCP/80. To improve … Read More

IPSec / SSL VPN, Security

Microsoft UAG – Invalid External Port bug

René Jorissen on November 2, 2011 4 Comments • Tags: #2010 #a #access #activated #address #be #cannot #choose #different #due #external #following #forefront #gateway #invalid #microsoft #port #sp1 #the #to #uag #unified

Last week I have installed a Microsoft UAG array. I installed Microsoft ForeFront Unified Access Gateway 2010 including Service Pack 1. When using an array configuration you have to deploy Microsoft’s Network Load Balancing (NLB) for redundancy and load balancing purposes. I configured NLB with multicast and IGMP support. I had configured some HTTPS trunks … Read More

IPSec / SSL VPN

Citrix Access Gateway: duplicate STA ID

René Jorissen on March 29, 2010 3 Comments • Tags: #access #authority #cag #citrix #duplicate #gateway #secure #sta #ticket

I received complains from a customers who wasn’t able to add two new Citrix servers to his Citrix Access Gateway configuration. He could successfully add the first Citrix server, but he couldn’t add the second Citrix server, because the first was overwritten by the second. I looked at the problem and noticed that both Citrix … Read More

Proxy

eSafe Gateway 7.1 Forwarding Proxy with squid

René Jorissen on August 5, 2009 0 Comments • Tags: #71 #enable #esafe #forwarding #gateway #proxy #squid #squidconf

My colleague over at PBSPlaza wrote a nice article about enabling squid on eSafe Gateway 7.1 Forwarding Proxy. Today I had to configure an extra step to enable squid. I followed the instructions from my colleague, but when I tried to start squid I received the following error message. FATAL: Could not determine fully qualified … Read More

IPSec / SSL VPN, Proxy

Microsoft IAG

René Jorissen on November 25, 2008 0 Comments • Tags: #appliance #application #cag #cisco #csg #gateway #iag #intelligent #isa #juniper #microsoft #sa #ssl #vpn #webvpn

It has been a while since my last post, but time is short these days. Today I had to troubleshoot a Microsoft IAG appliance. Microsoft IAG stands for Microsoft Intelligent Application Gateway. And indeed, intelligent it is. NOT. I have seen and configured multiple SSL VPN solutions like Juniper SA, Citrix Access Gateway, Citrix Secure … Read More

Firewalling, IPSec / SSL VPN

Microsoft Outlook through Citrix Access Gateway SSL IP VPN

René Jorissen on October 31, 2008 1 Comment • Tags: #135 #1536 #access #administrator #ampr #amprinter #cag #citrix #epmap #exchange #gateway #inter #ip #microsoft #outlook #ssl #tcp #vpn

One of our customers wants you use their locally installed Microsoft Outlook through a Citrix Access Gateway (CAG). Sales people from that customer travel through the country and use the Outlook offline to read or prepare e-mail to send later. These people use UMTS technology to connect their laptops to the Internet. The customers wants … Read More