On 7/21/05, bob sengupta <bobsengupta_at_hotmail.com> wrote:
> I am looking for a security assessment technique to conduct assessment of a
> Citrix Implementation. I do have a benchmark to check Citrix configurations.
> However, the problem is not having access to the actual devices to be able
> to assess security. Is there a way to export configuration settings from all
> Citrix components and be able to get configuration settings to review? The
> component breakdown is as follows:
>
> Citrix Secure Ticketing Authority
> Citrix/Nfuse Classic server
> Citrix Secure Gateway
I think you would need the following information to:
- ICA protocol encryption level
- Citrix Policy's
- Shadowing settings
and things like: are users allowed to download software form the
internet, are they allowed to run non-authorised software from
locations like a local disk or homedirectory
--
regards,
Berdt van der Lingen
http://hire.berdt.nl
Received on Jul 22 2005
Intro
