aXsGUARD Gatekeeper Single Sign-On Utility (SSO) - Vasco

aXsGUARD Gatekeeper Single Sign-On Utility (SSO) How To v1.6 Concept and Features
2.10.2 With Virtual IP Support
When users log on to a thin client, which depends on a central server such as a Citrix Presentation Server or
an MS Terminal Server, any outgoing traffic generated by the thin client shows the Terminal Server's IP
address as the source IP address. If multiple users are coming from a single IP address, e.g. in older versions
of the Citrix Presentation Server, the SSO Authentication Utility cannot be used (see section 2.10.1).
As of version 4.0 and above, the Citrix Metaframe Presentation Server offers a Virtual IP feature where it can
assign a unique virtual IP address to each user who logs in. As such, it is possible to differentiate each user's
traffic based on their Virtual IP address. In other words, each user / IP pair is unique.
The Virtual IP Addresses are bound to the Citrix Presentation Server NIC and can be consulted via the Windows
ipconfig command.
Image 6: Terminal Server with Virtual IP Support
© 2009 - VASCO Data Security 17