Chapter 13. Securing XenDesktop^®

By itself, XenDesktop has a weak spot because the traffic is not totally secure, but you can make it secure by following the simple guidelines mentioned in this chapter. You must undoubtedly be familiar with SSL, with uses port 443 or HTTPS to encrypt data and to check the message integrity between the client and the server. XenDesktop and XenApp have, for a long time, had a feature called the Secure Ticket Authority (STA); however, this feature doesn't provide the complete message encryption security that SSL provides. In this chapter, we will discuss securing XenDesktop with SSL.

In this chapter, we will discuss the following topics:

• DMZ architectures

• Securing XenDesktop with NetScaler Gateway

• The STA

• Securing the ICA/HDX protocols

• Securing StoreFront

• Securing Receiver

• Securing the controller

• Securing Studio and Director

• Securing the XenDesktop to XenServer communications

• Smart cards