"The majority of users in a typical enterprise simply want frequent, location-independent access to a few key applications, such as email, calendar and selected reports.“

- John Girard, vice president and director of research

at Gartner Group

The Internet — network of choice

Global population now exceeds 200 million users

Will reach one billion in the next 2 – 5 years

By 2004, e-commerce solutions will reach $2.5 trillion

The Internet — network of choice

Greater Faster Lower reach implementation cost

Greater Faster Lower reach implementation cost

Partners Competitive data and joint initiatives Competitive data and joint initiatives

Suppliers Inventory updates and production statusInventory updates and production status

Employees Most up-to-date news, information and appsMost up-to-date news, information and apps

Customers Enhanced interactivee-commerceEnhanced interactivee-commerce

What is Citrix Secure Gateway?

Citrix Secure Gateway is a secure Internet gateway between MetaFrame® servers and ICA Client

workstations that allows customers to simply and securely deliver applications across the Internet, on

demand, to any device 

Benefits of Citrix Secure Gateway

Provides secure remote access - anywhere

Lowers cost of ownership

Protects your MetaFrame investment

Integrates employees, customers, etc.

Citrix Security Solutions

SSL Solutions

CSG is a simple and secure, ICA only solution

SecureICA™ SSL RelayCitrix

Secure Gateway

Citrix Extranet™

Lower Security

Highest Security

When to use SecureICA or SSL Relay

Use SecureICA when:  Internal LAN / WAN / Intranet

  Secure DOS or Win 16 access is necessary

  Have older devices/ ICA clients that cannot be upgraded

  Risk of “man-in-the-middle” attack is acceptable

 

Use SSL Relay when:  Small number of MetaFrame servers to support (<5)

  No need to secure access at DMZ

  No need to hide server IP addresses, or NAT is used

  Need end-to-end encryption of data between client and server

When to use CSG or Citrix Extranet

Use Citrix Secure Gateway when:  Large number of servers to support

  Want to hide internal network addresses

  Want to secure from DMZ

  Need two-factor authentication (in conjunction with NFuse)

  Need non-intrusive client install i.e. access from Internet cafes

 

Use Citrix Extranet or another VPN when:  Need two-factor authentication

  Need to create a secure pipeline for full (beyond ICA) network access

  Need to create secure tunnels between sites

  Want to secure from within DMZ

  Access is normally via same workstation i.e. OK to install additional client

  Want to use IPSEC

Key Features of Citrix Secure Gateway

Strong Encryption Industry standard SSL 3.0

Minimal Client Configuration Uses latest ICA client

Single Authentication Integrates with NFuse

Simplified Server Management Gateway to MetaFrame server farm

Ease of Firewall Traversal Uses standard port 443

Typical architecture

•MetaFrame Server Farm•Citrix XML Service

•Secure Web Server•Citrix NFuse

CitrixSecure Gateway

•ICA Client•Web Browser

CSG Architecture – key points

Authorization based on ticketing, leverages NFuse for authentication

Compatible with a wide range of authentication systems Compatible with any Web-compatible authentication Replaceable Secure Ticketing Authority Works with replaceable authentication – e.g. SecurID, Smart Card

Operates in Gateway mode – installed in DMZ Highly scalable – by design Single CSG server can support 500 to 2000 concurrent connections Highly reliable – fail-over support for STA, external Load Balancer for

main CSG Server

Uses XML for inter-component communication Components are easily replaceable by Citrix or 3rd party

Pricing, Packaging, and

Availability

Pricing, Packaging, Subscription Advantage

Pricing Citrix Secure Gateway is delivered at no cost as a benefit of Subscription

Advantage. Therefore, there is no price associated with the product.

Packaging Citrix Secure Gateway is available via the Citrix Secure Portal only at

www.citrix.com/mycitrix. There is no physical media. CSG is less than 6MB in size

Subscription Advantage Fulfillment Subscription Advantage customers to be contacted via e-mail. Only customers who have purchased a MetaFrame XP solution, or

MetaFrame for UNIX, and have a valid and active Subscription Advantage contract are entitled to receive Citrix Secure Gateway as a benefit.

These customers can visit the Citrix Secure Portal Web site at www.citrix.com/mycitrix for Subscription Advantage benefit fulfillment.

Citrix Secure Gateway will NOT be optionally sold to MetaFrame XP for Windows and MetaFrame for UNIX customers who did not buy with Subscription Advantage,

NFRs and Evals

There are currently no Evaluation or Not-For-Resale units. Prospective customers who wish to evaluate CSG should contact

their Citrix Sales representative to request the ability to download CSG for evaluation only.

Citrix channel partners can download CSG via the Citrix Secure Portal Web site at www.citrix.com/mycitrix.

Availability

Language Citrix Secure Gateway

English December 14, 2001

German* N/A

Japanese* N/A

French* N/A

Spanish* N/A

*CSG is internationalized to run on non-English servers

Launch Deliverables

Product Datasheet Launch PPT Launch FAQ Technical PPT Citrix.com Updates MyCitrix.com Updates

For More Information…

For More Information Contact a local member of the Citrix Solutions Network™ Connect to Citrix Web site at: www.citrix.com/products/securegateway