Securing Citrix XenApp Server in the Enterprise [Paperback]

Tariq Azad (Author)

Book Description

Publication Date: July 8, 2008 | ISBN-10: 1597492817 | ISBN-13: 978-1597492812 | Edition: 1

Citrix Presentation Server allows remote users to work off a network server as if they weren't remote. That means: Incredibly fast access to data and applications for users, no third party VPN connection, and no latency issues. All of these features make Citrix Presentation Server a great tool for increasing access and productivity for remote users. Unfortunately, these same features make Citrix just as dangerous to the network it's running on. By definition, Citrix is granting remote users direct access to corporate servers?..achieving this type of access is also the holy grail for malicious hackers. To compromise a server running Citrix Presentation Server, a hacker need not penetrate a heavily defended corporate or government server. They can simply compromise the far more vulnerable laptop, remote office, or home office of any computer connected to that server by Citrix Presentation Server.
All of this makes Citrix Presentation Server a high-value target for malicious hackers. And although it is a high-value target, Citrix Presentation Servers and remote workstations are often relatively easily hacked, because they are often times deployed by overworked system administrators who haven't even configured the most basic security features offered by Citrix. "The problem, in other words, isn't a lack of options for securing Citrix instances; the problem is that administrators aren't using them." (eWeek, October 2007). In support of this assertion Security researcher Petko D. Petkov, aka "pdp", said in an Oct. 4 posting that his recent testing of Citrix gateways led him to "tons" of "wide-open" Citrix instances, including 10 on government domains and four on military domains.

* The most comprehensive book published for system administrators providing step-by-step instructions for a secure Citrix Presentation Server.
* Special chapter by Security researcher Petko D. Petkov'aka "pdp detailing tactics used by malicious hackers to compromise Citrix Presentation Servers.
* Companion Web site contains custom Citrix scripts for administrators to install, configure, and troubleshoot Citrix Presentation Server.

Product Details

• Paperback: 528 pages
• Publisher: Syngress; 1 edition (July 8, 2008)
• Language: English
• ISBN-10: 1597492817
• ISBN-13: 978-1597492812
• Product Dimensions: 9.2 x 7.5 x 1.5 inches
• Shipping Weight: 2.9 pounds (View shipping rates and policies)
• Amazon Best Sellers Rank: #1,653,281 in Books (See Top 100 in Books)

More About the Author

Mr. Michael Wright is an independent information technology security consultant specializing in systems compliance, risk analysis and information assurance. He creates, evaluates and implements enterprise security policy, practices and procedures as well as conducts enterprise security and vulnerability assessments. Mr. Wright is a recognized security expert in information assurance relating to such products as Citrix XenApp, Microsoft Windows Server 2003/2008 and Active Directory.

With more than 23 years of professional experience in telecommunications, LAN/WAN internetworking technologies, and IT Security, Mr. Wright has spent the last 15 years working as both an IT and INFOSEC consultant working on projects for a variety of organizations, including the Pennsylvania Turnpike Commission, Computer Sciences Corporation, IBM, Rome Air Force Research Laboratory, United States Navy and the Defense Information Systems Agency (DISA). He began his technology career in the United States Marine Corps designing custom software application systems. After his 5 years of military experience, Mr. Wright worked for DBI, Inc. in the field of disaster recovery. He has spent a bulk of his career providing consulting services to the Department of Defense in the areas of information security and information assurance. The book he co-authored, "Securing Citrix XenApp in the Enterprise", served as one of the principal documents defining Citrix XenApp security policy for the Department of Defense. Currently, Mr. Wright is a consultant with IBM.

Mr. Wright is a past president of the Central Pennsylvania Chapter of the Information Systems Security Association (ISSA), a member of the Institute of Electrical and Electronics Engineers (IEEE) and a member of InfraGard. Mr. Wright also serves as a corporate faculty member for the Harrisburg University of Science and Technology teaching courses on information security and information assurance.

Mr. Wright is an alumnus of the Virginia Military Institute and a magna cum laude graduate from Harrisburg University of Science and Technology with a B.S. in Integrative Sciences. He has obtained the following professional certifications during his technical career: Microsoft Certified Systems Engineer (NT, 2000, 2003), Department of Defense Level II System Administrator, Certified Information Systems Security Professional (CISSP), Cisco Certified Network Professional (CCNP), Citrix Certified Enterprise Engineer (CCEA), Security+.