Nfuse w/ MetaFrame XP and Project Columbia

1. Nfuse w/ MetaFrame XP and Project Columbia Presenters: Jason Gradel – SE, Northern California Rick Dehlinger – SSE, Northwest

2. Welcome to this Citrix Western Regional Web Conference training session! What are we trying to do here? • to provide timely, easily accessible technical information regardingCitrix technologies. • to ensure that you have a consistent way to get current informationregarding Citrix technologies. • to provide you with regular access to Citrix technical resources. Who can participate? • Any administrator or integrator of Citrix technologies (feel free to tell your friends). How are we attempting to do it? • www.groups.yahoo.com, territory based ‘newsletter’ lists* • Regular Web Conference training sessions • *Note: It is only necessary to subscribe to the group for your territory

3. Welcome to this Citrix Western Regional Web Conference training session! How do I partipate in the egroups lists? • Northwest (Oregon, Washington, Idaho, Alaska, Northern Nevada) www.groups.yahoo.com/group/citrixnw • NorCal (Northern California) www.groups.yahoo.com/group/citrixnorcal • LA/Orange County www.groups.yahoo.com/group/lao_cug • Southwest (Southern California, Arizona, Southern Nevada, Hawaii) www.groups.yahoo.com/group/citrixsw How do I use these groups? • Join to receive proactive technical/training information via e-mail • Visit the ‘Calendar’ section of your territory’s group for training information • Visit the ‘Files’ section of your territory’s group for pertinent file uploads (presentations, utilities, newsletters, etc.)

4. Today’s Session Outline • What are we going to cover today? • General ICA Client Architecture • ICA Resources • How does Nfuse Work • Components • Architecture • Requirements • Nfuse 1.5 Feature Recap • What’s New in Nfuse 1.51 • Internet Server Application Program Interface (ISAPI) extension. • Active Directory and User Principal Name (UPN) support. • Turnkey Install with MetaFrame XP • Project Columbia

5. ICA Client Architecture • ‘Two Parts’ • The User Interface (Win32 - pn.exe) • Function 1- provide a graphical mechanism to create connection defining entries in local *.ini’s • Function 2- provide a graphical mechanism to launch defined connections to Citrix ICA servers • The ‘Connector’ (Win32- wfcrun32.exe/wfica32.exe) • Responsible for actually initiating and maintaining the connections to Citrix servers • Think of the ICA client as a ‘helper’ application, similar to Acrobat reader, Windows Media Player, or RealAudio.

6. ICA Connection Architecture • Necessary Functions • The user interface • pn.exe, link to ICA file, web browser • Define connections • Client and MetaFrame server, static ICA file, MetaFrame and web servers • Launch defined connections to Citrix ICA servers • pn.exe, ICA file associations • Instantiate and maintain the session • The ‘connector’- on Win32, wfcrun32.exe (or wfica32.exe) • The ‘connector’ is always responsible for actually initiating and maintaining the connections to Citrix servers • For every connection, you have to perform each function. PN, ALE, and NFuse distribute and manage these functions differently.

7. ICA Resources • What are ‘ICA Resources’? • We call them “Published Applications” • Named objects that you create/define in Citrix Management Console, and point clients towards • Services Involved • IMA Service……THAT’S IT!

8. ICA Resources • Types of ‘ICA Resources’ • Named Citrix Server • 1 to 1 relationship – 1 name to 1 server • Published Application • Potential 1 to many relationship – 1 name to many servers using Load Balancing • Application Set • Name of Application Set = Name of ‘Server Farm’

9. NFuse • What is NFuse? A three tier system that provides a new mechanism for application deployment and management using a Citrix Server, a Web server, and a Web browser A “Web” Program Neighborhood that combines the browser integration of ALE and the management and dynamics of Program Neighborhood.

10. NFuse Overview 1- URL web page content request 2- Authentication information communicated to MetaFrame 3- HTML content is displayed with applicable app icons

11. NFuse Usage Scenario - Authenticate

12. NFuse Usage Scenario – Personal App Set

13. NFuse Functional Distribution • Function Distribution • The user interface • Web browser • Define connections • Dynamically created ICA files on a web server pointing towards ‘Application Set’ • CMC on MetaFrame server (Published App objects) • Launch defined connections to Citrix ICA servers • ICA file association • Instantiate and maintain the session • The ‘connector’- on Win32, wfcrun32.exe • The ‘connector’ is always responsible for actually initiating and maintaining the connections to Citrix servers

14. NFuse System Requirements • MetaFrame Servers • MetaFrame XP • MetaFrame 1.8 for Windows NT 4.0 TSE • MetaFrame 1.8 for Windows 2000 Servers • MetaFrame for Unix 1.1 (Solaris, HP U/X, AIX) • Web Servers • Internet Information Server Version 4.0 on Windows NT Server • Internet Information Server Version 5.0 on Windows 2000 Servers • Apache Version 1.3 (with Apache JServ 1.1 and GNU JSP 1.0) on Solaris and RedHat Linux 6.x • Netscape Enterprise Server Version 3.6 on Solaris • Web Browsers • Microsoft Internet Explorer 4.0 or greater • Netscape Navigator 4.0 or greater

15. Citrix NFuse 1.5 Feature Recap Citrix NFuse 1.5 • NFuse 1.5 Feature List • Web Based ICA Client Install • TCP Browser • 128 Bit Encryption • SSL Relay Service • Ticket Based Authentication • Backup MetaFrame Server Support • Multiple Farm Support • Unix Application Support • Corporate Portal Support

16. Nfuse 1.5 recap • NFuse 1.51 supports SSL encryption of the web-server to MetaFrame server traffic. • When this feature is enabled*, all traffic from the web server is encrypted and sent to port 443 on the web server. • The SSL Relay Service on MetaFrame server unencrypts the traffic and forwards it to the Citrix XML Service on port 80. *

17. Citrix NFuse 1.5 Recap MetaFrameServer Farm Citrix XML Service NFuse XML Protocol over HTTP Web Server Ticket Request Unique web server session ID ICA Server 2 IP Address of Server2 plus 120-bit ticket for this user only ICA Client& Browser Rendered ICA File includes the temporary ticket valid only on Server2 for 120 seconds (configurable) • Ticket Based Authentication • Time Sensitive Ticket • One time use only • Expired Ticket invalidates cached ICA Files

18. Nfuse 1.5 Recap • Centralized access to applications and content information for users in any location

19. What’s new in NFuse 1.51? • Internet Server Application Program Interface (ISAPI) extension. • Active Directory and User Principal Name (UPN) support. • Turnkey Install with MetaFrame XP

20. Universal Principal Name Support • Two different inputs are accepted • Input User Name in User field, and domain.com in domain field. Domain field still may be forced with the Web Site Wizard. • Input user@domain.com in User field, no entry in domain field. If domain field is not blank, an authentication error will occur. • Up to 256 characters supported.

21. NFuse Integration Introducing ‘Turnkey’ NFuse • NFuse install option with XP install if IIS detected. • Sets up default web and startup page. • In short- you can now ACCIDENTLY deploy NFuse!

22. ‘Project Columbia’ • What is it? • Free, unsupported, NFuse template site • Drop in replacement for XP’s ‘turnkey’ NFuse • Easy feature configuration (config.txt) • What does it do? • Tons! For starters… • Multi-farm support • Backup XML server support • Integrated password validation with change function • Detect/install ICA clients • Automatic delivery of win32t.cab ICA client

23. ‘Project Columbia’ • But wait, there’s more! ;-) • Throw in these functions too. • Display farm names with app sets • Modify application display options and column count • Automatically populate USERNAME/DOMAIN fields • Disable ‘Right Click/Save As’ on ICA file • Enable connectivity for Citrix Extranet clients • Return ALTADDR for external network users • Round robin load balancing of XML servers • Enable/Disable Ticketing • Enable/Disable Debug Mode • Current limitations • Win32/Microsoft server focus • Un-supported

24. ‘Project Columbia’ in Action

25. ‘Project Columbia’ in Action

26. ‘Project Columbia’ in Action

27. Questions and Answers