3 ms·
> Employee access to sensitive internal applications (like document and image management) gated through Citrix-like environments, so you have to remote terminal
by tl 11y ago
> Employee access to sensitive internal applications (like document and image management) gated through Citrix-like environments, so you have to remote terminal in to get to the browser that actually talks to the application.
That may be a realistic proposal, but I'm skeptical that it's the best answer, maybe because 100% of my Citrix experiences have been awful. Wouldn't "ensure internal app adhere to all other points, rewriting them if necessary" be a better answer for "given infinite money" question?
- tptacek 11y agoSure, I think you could add a bullet for "applications not gated through Citrix-like environments are written to be hardened against arbitrary client software, as opposed to the single company-spec version of Firefox that users are allowed to use in a Citrix session". You'd still have Citrix lockdown environments for any application that you can't rewrite. For instance, an F500 might license the web app it uses for image management for things like scanned medical records. I should add: I don't think any of these are realistic proposals.