Firewalls .... again

[ascotta]

OK here we go.

Borderware firewall.

Can only connect to the 1 server to run my apps.
Does not load balance.

WIN2K sp3.

XPa farm running at fr2. SQL data store on another box.

secure gateway used and STA and nfuse all on separate boxes.

I believe we have SG and NFUSE(IIS) outside firewall STA and MF farm inside.

1) what is the correct positioning of these servers.
(by correct I mean working).

2) Anyone with borderware experience ?
3) Why won't it load balance ?

My understanding is that with this scenario I can have secure port from client direct to MF farm is that so ?

Am I a complete divvy. If anyone can point me at a non citrix site explanation (they assume too much and have gaping holes in the documentation) or can someone give me a nice and simple (no big words or assumptions) step by step blow by blow explanation as to the black magic that is this subject. My simpleton understanding is obviously confused.

 

[CitrixEngineer]

Are you using Citrix or Microsoft Load Balancing?

Ideal setup =

Firewall 1 (outside)
ort 443: CSG server + CSG-Enabled NFuse server (Inside DMZ)
ort 1494 to MF Farm and Port 80 (or whatever) to XML Service)
:STA and MF Farm (Behind Firewall 2).

If you can connect and run a single Published App, this is probably set up OK already.

I don't believe you need Borderware experience per se (mine is limited!), just the correct ports open.

Hope this is helpful

 

[ascotta]

Are you using Citrix or Microsoft Load Balancing?

Now there is a question.

We have several xp servers in the farm and XPa therfore Citrix load balancing is in place and works great on the LAN.

I thought there was no real thing called Microsoft load balanacing and it was just a flukey function of DNS round robin. call several machines ica.wherever.whatnot and it should work.

As I said we can connect to one server and not the rest. However if we change to port 1495 it works but obviously lan users get a tad cheesed off.

Cheers Scott.

 

[CitrixEngineer]

Well Microsoft call it Load Balancing ;-)

If you've got Citrix LM in place, then the farm should be working on the rules you set to determine the server with the lowest load at the point of connection.

Remember that Load Management only works with published applications. If you just want to connect to server desktops, then publish the desktop.

Hope this helps