SSL VPN ON MAC OS X UPGRADE
SSL VPN ON MAC OS X WINDOWS

The Home Page setting in the Session Profile allows you to display an internal website instead of displaying the Citrix Gateway Portal Page.After the user logs in, the user is presented with a portal page that contains a list of Gateway bookmarks and/or StoreFront published icons. If On, then Clientless is the only connection method allowed, assuming ICA Proxy is not set to ON.If VPN is launched, then the portal page shown to the user after the tunnel is established can contain the StoreFront published applications. For example, Clientless Access can show both Citrix Gateway Bookmarks and StoreFront published apps. Setting it to OFF allows the other connection methods to function.You can still send ICA traffic to the Citrix Gateway Virtual Server, and the Citrix Gateway Virtual Server will still proxy it to internal VDAs. If OFF, that doesn’t mean ICA Proxy doesn’t work.This is typically the StoreFront Receiver for Web page, but technically it can be any internal website. ICA Proxy shows the Webpage that’s configured in the Web Interface Address field of the Session Profile.ICA Proxy does not launch the VPN client.If ON, then ICA Proxy is the only connection method allowed, overriding the other connection methods.Session Policies/Profiles have several settings that control the behavior seen after authentication: This can be the Clientless Access portal, or a user defined website URL (e.g. After the tunnel is established, a portal page is displayed. The Connect with Citrix Gateway Plug-in option launches the VPN tunnel.For other types of icons, you’ll need Clientless Access. The Virtual App and Desktop Access option only displays icons from Citrix StoreFront (ICA Proxy).Citrix Gateway can optionally Single Sign-on to the websites.Proxy methods include: clientless rewrite, SSL VPN, and traditional load balancing. The website links can be proxied through Citrix Gateway.The Clientless Access option opens a portal page that has icons from Citrix StoreFront (ICA Proxy), icons for RDP Proxy, icons for PCoIP Proxy, and links to websites.Here’s a sample Client Choices screen using the RfWebUI theme: Or Citrix Gateway can be configured to let users choose between ICA Proxy, Clientless, and SSL VPN connection methods. You can configure Citrix Gateway Session Policies/Profiles to only use one of the connection methods. PCoIP Proxy – only VMware Horizon Client is needed.Secure Browse – from MDX-wrapped mobile applications (Citrix Endpoint Management aka XenMobile), uses rewrite.Clientless – browser only, no VPN client, uses rewrite.SSL VPN – requires installation of Citrix Gateway plug-in (VPN client).ICA Proxy to Citrix Virtual Apps and Desktops (CVAD) (aka XenApp/XenDesktop) and StoreFront – the client is built into Citrix Workspace app (aka Citrix Receiver).Once the user is authenticated, Citrix Gateway uses Session Policies/Profiles to determine what happens next.Ĭitrix Gateway supports six different connection methods:.

Citrix Gateway prompts the user for authentication.

Users use SSL/TLS to connect to a Citrix Gateway Virtual Server (VIP).

Here’s an overview of the Citrix Gateway connection process:

2018 Feb 8 – in Authorization Policies section, added info from CTX232237 NetScaler Unified Gateway Advanced Authorization Policy Support for UDP/ICMP/DNS Traffic.

2018 Mar 18 – in the NetScaler Gateway Virtual Server section, added info from Julien Mooren NetScaler – Native OTP is breaking SSL VPN.

2018 Apr 3 – in the Create Session Profile section, added Clientless Access removal instructions from CTP Sam Jacobs at NetScaler Gateway Client Choices – hide/remove Virtual Apps and Desktops at Citrix Discussions.

Gateway Plug-in – 12.1 supports nFactor authentication.

2018 Oct 6 – updated some screenshots for Gateway 12.1.

SSL VPN ON MAC OS X WINDOWS

2019 Mar 6 – VPN Session Profile – added link to AlwaysOn service for Windows at Citrix Docs.

2021 Jan 9 – Bind Session Policy – added info from CTX289931 AAA group session policies are not applying based on priority.

2021 Feb 5 – VPN Client – added SecureDNS info from 13.0-71.44 release notes.

SSL VPN ON MAC OS X UPGRADE

2021 May 5 – Upgrade Gateway Plug-in on ADC.

StoreFront in Gateway Clientless Access Portal.

Citrix Gateway Plug-in Session Profile Settings.

Ssl vpn on mac os x