We help IT Professionals succeed at work.

Citrix- Easy enough to setup to allow for remote access to a web app?

tenover
tenover asked
on
We have a company of about 150 users, and we often need groups of people to be able to have remote access to one of our application servers.  In the past, I've required these people to install our VPN client, establish a connection and do it that way.  Now I'm being asked if we (read: "I") can setup some kind of Citrix environment that would allow 2-40 users to access the server without having to go the VPN route.....I'm thinking this would cost way too much money and take way to long to plan and setup than it's worth.  Does anyone know how long it would take to set something up like that and/or a ballpark idea of cost?  I've never had to work with Citrix before at all.  Thanks in advance.
Comment
Watch Question

Citrix Technology Professional - Fellow
Most Valuable Expert 2019
Top Expert 2010
Commented:
Should be easy to do.  Setup a server 2003 box with IIS, add the FREE citrix secure gateway and web interface.  I have a 3 part article series on how to do this at dabcc.com\webster.  Sitting in airport with inet so I can't give more details.  But my articles should fill in the blanks for you.

Commented:
If your looking for something SMB that will not provide load balancing or redundancy, I would probably purchase Citrix Fundamentals. Its extremely straight forward, Very easy to setup. You should be up and running in a few hours. I dont know what your definition of expensive is. if 5,000 for server and Citrix Licensing is expensive then maybe you should just stick with the VPN.


http://www.citrix.com/English/ps2/products/subfeature.asp?contentID=2300436

Lee OsborneSenior Infrastructure Engineer

Commented:
I've been using Citrix Secure Gateway and Web Interface for a long while now, serving up to 150 users where required, to access my XenApp farm. The latest version is easy to setup on a Windows Member Server, ideally located in your DMZ, and provides secure access through to your private Citrix servers. Both applications are also free (as mentioned above). As has CarlWebster, I've written a two part walk-through on installing Web Interface and Secure Gateway on the server - http://www.leeosborne.co.uk/wp/how-to-install-and-configure-citrix-web-interface-5-3-and-secure-gateway-3-2-part-1/

Lee

Author

Commented:
Thanks.  I have brand new hardware sitting here ready to go.  I think I may follow Carls instructions and give it a shot.  Two quick questions.

1.) We are behind a SonicWall firewall.  Should I still stick this server in the DMZ or can I simply use a one-to-one NAT policy instead?  I need this to be as secure as possible.

2.) Am I correct in assuming that once this is setup, I could have multiple users (2-100 possibly) connect to this web-app, Corporate Exchange email, and possibly a file server, remotely and securely from any remote computer?  

Thanks for all the help.

Author

Commented:
Also, can I set this all up, put it out on the DMZ and give access to just a few test users at first to try it out for a week or so?  
Carl WebsterCitrix Technology Professional - Fellow
Most Valuable Expert 2019
Top Expert 2010

Commented:
TW, new article series just started appearing last week.   Part 5 of 12 was released today.  Part 12 was just reviewed by some Citrix product teams and received their OK.

1. I would NOT stick the server in the DMZ.

2.  Depends on your hardware and software.  2 users for sure.  HIgher users counts will depend mostly on the app(s) being used.  Have customers that get anywhere from 9 to 83 users on a 4GB Server 2003 32-bit VM.  lt depends on the apps.

Users can test to their heart's content.  I would not put it in the DMZ.

Author

Commented:
Carl-
Looking at the link you posted earlier...There are hundreds of videos.  Which ones in particular do I need to watch?
Carl WebsterCitrix Technology Professional - Fellow
Most Valuable Expert 2019
Top Expert 2010

Commented:
Start with the new series Learning the Vasics of XenApp 5 FP3 for Sever 2003 and XenServer 5.6.

Part 1 and 2 are esentially getting the software downloaded and XS5.6 installed.  Part 3 is on creating a 2003 VM.  Parts 4 through 12 are installing XenApp 5, upgrading components to FP3, creating a WI site, installing apps and testing access to published apps.