2. "The majority of users in a typical enterprise simply want frequent, location-independent access to a few key applications, such as email, calendar and selected reports.“ - John Girard, vice president and director of research at Gartner Group

3. The Internet — network of choice n Global population now exceeds 200 million users n Will reach one billion in the next 2 – 5 years n By 2004, e-commerce solutions will reach $2.5 trillion

4. The Internet — network of choice Greater Faster Lower reach implementation cost Partners Competitive data and joint initiatives Suppliers Inventory updates and production status Employees Most up-to-date news, information and apps Customers Enhanced interactive e-commerce

5. What is Citrix Secure Gateway? Citrix Secure Gateway is a secure Internet gateway between MetaFrame® servers and ICA Client workstations that allows customers to simply and securely deliver applications across the Internet, on demand, to any device

6. Benefits of Citrix Secure Gateway n Provides secure remote access - anywhere n Lowers cost of ownership n Protects your MetaFrame investment n Integrates employees, customers, etc.

7. Citrix Security Solutions SSL Solutions CSG is a simple and secure, ICA only solution SecureICA™ SSL Relay Citrix Secure Gateway Citrix Extranet™ Lower Security Highest Security

8. When to use SecureICA or SSL Relay Use SecureICA when:  Internal LAN / WAN / Intranet  Secure DOS or Win 16 access is necessary  Have older devices/ ICA clients that cannot be upgraded  Risk of “man-in-the-middle” attack is acceptable Use SSL Relay when:  Small number of MetaFrame servers to support (<5)  No need to secure access at DMZ  No need to hide server IP addresses, or NAT is used  Need end-to-end encryption of data between client and server

9. When to use CSG or Citrix Extranet Use Citrix Secure Gateway when:  Large number of servers to support  Want to hide internal network addresses  Want to secure from DMZ  Need two-factor authentication (in conjunction with NFuse)  Need non-intrusive client install i.e. access from Internet cafes Use Citrix Extranet or another VPN when:  Need two-factor authentication  Need to create a secure pipeline for full (beyond ICA) network access  Need to create secure tunnels between sites  Want to secure from within DMZ  Access is normally via same workstation i.e. OK to install additional client  Want to use IPSEC

10. Key Features of Citrix Secure Gateway Strong Encryption n Industry standard SSL 3.0 Minimal Client Configuration n Uses latest ICA client Single Authentication n Integrates with NFuse Simplified Server Management n Gateway to MetaFrame server farm Ease of Firewall Traversal n Uses standard port 443

11. Typical architecture MetaFrame Server Farm Citrix XML Service Secure Web Server Citrix NFuse Citrix Secure Gateway ICA Client Web Browser

12. CSG Architecture – key points Authorization based on ticketing, leverages NFuse for authentication n Compatible with a wide range of authentication systems n Compatible with any Web-compatible authentication n Replaceable Secure Ticketing Authority n Works with replaceable authentication – e.g. SecurID, Smart Card Operates in Gateway mode – installed in DMZ n Highly scalable – by design n Single CSG server can support 500 to 2000 concurrent connections n Highly reliable – fail-over support for STA, external Load Balancer for main CSG Server Uses XML for inter-component communication n Components are easily replaceable by Citrix or 3 rd party

13. Pricing, Packaging, and Availability

14. Pricing, Packaging, Subscription Advantage Pricing n Citrix Secure Gateway is delivered at no cost as a benefit of Subscription Advantage. Therefore, there is no price associated with the product. Packaging n Citrix Secure Gateway is available via the Citrix Secure Portal only at www.citrix.com/mycitrix. There is no physical media. n CSG is less than 6MB in size Subscription Advantage Fulfillment n Subscription Advantage customers to be contacted via e-mail. n Only customers who have purchased a MetaFrame XP solution, or MetaFrame for UNIX, and have a valid and active Subscription Advantage contract are entitled to receive Citrix Secure Gateway as a benefit. n These customers can visit the Citrix Secure Portal Web site at www.citrix.com/mycitrix for Subscription Advantage benefit fulfillment. n Citrix Secure Gateway will NOT be optionally sold to MetaFrame XP for Windows and MetaFrame for UNIX customers who did not buy with Subscription Advantage,

15. NFRs and Evals n There are currently no Evaluation or Not-For-Resale units. n Prospective customers who wish to evaluate CSG should contact their Citrix Sales representative to request the ability to download CSG for evaluation only. n Citrix channel partners can download CSG via the Citrix Secure Portal Web site at www.citrix.com/mycitrix.

16. Availability Language Citrix Secure Gateway EnglishDecember 14, 2001 German*N/A Japanese*N/A French*N/A Spanish*N/A *CSG is internationalized to run on non-English servers

17. Launch Deliverables n Product Datasheet n Launch PPT n Launch FAQ n Technical PPT n Citrix.com Updates n MyCitrix.com Updates

18. For More Information… For More Information n Contact a local member of the Citrix Solutions Network™ n Connect to Citrix Web site at: www.citrix.com/products/securegatewaywww.citrix.com/products/securegateway