How to securely publish IE. for an activex application?

[defekt]

Any tips on securely publishing an internet explorer app so that a user is directed to a specific internal webserver and an activex application is loaded and used? Is there anyway to restrict the user from ONLY being able to browse to that IP address?

I'd rather the 2 users we have for this app use citrix rather then VPN.

 

[balage0]

you can publish that IE apps directly for these two users, then using policies to run only that activex pages.
If the user has vpn, then they can run that ie-activex apps via Citrix(will be faster).

but if you want to use only Citrix secured ica connection via normal internet(not vpn) then you need some extra configuration and maybe hardware, depend on your citrix versions and the level of the security that you want to build and use...