Security Basics mailing list archives

Re: Citrix Web Interface - VPN - public computer...secure??


From: "Gleb Paharenko" <gpaharenko () gmail com>
Date: Fri, 11 Jul 2008 16:34:17 +0300

Hi.

It is very risky to use public networks without two factor
authentication. Consider one time password tokens.

2008/7/10 Don Joly <fuwmanchew () live com>:

We have a Citrix Secure Gateway that some of our employees use for web VPN access from home. The Citrix Gateway 
provides users with published applications and desktops and has a valid SSL Cert. We have policies that all must sign 
agreeing to have some type of firewall enabled, OS patches and anti-virus software up to date. The policy also states 
that no user is to connect to the Citrix Gateway from a "public computer" or from a public hot spot. I've been asked 
if we could change this policy to allow connections from public computers and hot spots but I'm not sure how secure 
this would be. Would this be considered safe to allow this type of access? Why or why not?

Thanks,
Don



_________________________________________________________________
The i'm Talkaton. Can 30-days of conversation change the world?
http://www.imtalkathon.com/?source=EML_WLH_Talkathon_ChangeWorld



-- 
Best regards.
Gleb Pakharenko.
http://gpaharenko.livejournal.com
http://www.linkedin.com/in/gpaharenko


Current thread: