Endpoint Management Analyzer

Endpoint Management Analyzer is a cloud-based tool that you can use to check the authentication and enrollment setup for Citrix Endpoint Management.

Configure the tool to point to your Endpoint Management server and provide information, such as server deployment type, mobile platform, authentication type, and user credentials. The tool then connects to the server and scans your environment for configuration issues. If Endpoint Management Analyzer discovers issues, the tool provides recommendations to correct the issues.

Key features

  • Secure, cloud-based micro-service to troubleshoot issues related to Endpoint Management.
  • Recommendations to resolve Endpoint Management configuration issues.
  • Reduced support calls and accelerated troubleshooting of Endpoint Management environments.
  • Zero-day support for Endpoint Management releases.
  • Health check scheduling on a daily or weekly cadence.
  • Citrix ADC configuration checks. The Citrix ADC Configuration Report displays a badge notification indicating the number of recommendations.
  • Secure Mail autodiscovery service checks.

Prerequisites

Product Supported Version
Citrix ADC 10.5 and later
Client Enrollment Simulation iOS and Android

Accessing Endpoint Management Analyzer

Use one of the following methods to access Endpoint Management Analyzer:

  • In the Endpoint Management console, click the wrench icon in the upper-right corner to open the Troubleshooting and Support page.
  • Use your My Citrix credentials to access the tool from https://xmanalyzer.xm.citrix.com/. On the Endpoint Management Analyzer Checks page, click Endpoint Management Environment.

    Image of Endpoint Management Analyzer check tool

Endpoint Management Analyzer contains the following options:

  • Environment Check: This option guides you in setting up tests to check your setup. The option provides recommendations and solutions on device, user enrollment, and authentication issues.
  • Gateway Configuration Check: This option guides you in checking your Citrix ADC configurations for Endpoint Management deployment readiness.
  • Secure Mail Test Tool: This option directs you to download the Exchange ActiveSync Test application. This tool helps troubleshoot the ActiveSync servers for their readiness to be deployed in an Endpoint Management environment.
  • Server Connectivity: This option instructs you to test the connectivity of your servers.
  • Citrix Insight Services: This option opens Citrix Insight Services to find further issues that the environment check might have missed.
  • Contact Citrix support: If you are still having issues, you can create a Citrix support case.

The following sections describe each option in more detail.

Performing an environment check

  1. Log on to Endpoint Management Analyzer and then click Endpoint Management Environment.

  2. Click Add Test Environment.

  3. In the new Add Test Environment dialog box, do the following:

    Image of Endpoint Management Analyzer configuration and checks a. Provide a unique name for the test that will help identify the test in the future.

    b. In FQDN, UPN login, Email or URL Invitation URL, enter the information that is used to access the server.

    c. In Instance Name, if you use a custom instance, provide that value.

    d. In Choose Platform, select either iOS or Android as the platform for testing.

    e. Expand Advanced Deployment Options and then in the Deployment Mode list, select your deployment mode. The options are:

    • Enterprise (MDM + MAM)
    • App Management (MAM)
    • Device Management (MDM).
  4. Click Continue.

  5. On the Test Options tab, choose one or more of the following tests and then click Continue.

    Image of the Test Options tab

    • Secure Web Connectivity. Provide an intranet URL. The tool tests for the reachability of the URL. This test detects if there are any connectivity issues that may potentially occur in Secure Web while trying to reach intranet URLs.

    • Secure Mail ADS. Provide a user email ID. Endpoint Management Analyzer uses this ID to test autodiscovery of the Exchange Server in your environment.

    • ShareFile SSO. Endpoint Management Analyzer tests if the ShareFile DNS resolution happens successfully. The tool also checks if ShareFile single sign-on (SSO) is compatible with the provided user credentials.

  6. On the User Credentials tab, depending on your server setup, different Secure Hub user credentials fields appear, such as Username, Username and Password, or Username, Password, and Enrollment PIN.

  7. Click Save & Run to start the tests.

    A progress notification appears. You can leave the progress dialog box open or close the dialog box and the tests continue to run.

    Tests that pass appear in green. Tests that fail appear as red.

    Image of test with issues

  8. Click the View Report icon to see test results.

    • To rerun the same test, click Run Again.
    • To download the report, click Download Report.
    • To select another Endpoint Management Analyzer option, click Go To Endpoint Management Analyzer Checks.
    • To return to the list of tests on the Environment Lists page, in the upper-left of the page, click Environment Check.
  9. On the Environment List page, you can copy and edit tests. To do so, select a test, click More and then select Duplicate and Edit.

    A copy of the selected test is created and the Add Test Environment dialog box opens, allowing you to modify the new test.

Adding a schedule to environment checks

You can configure tests to run on an automatic schedule with results sent to a list of users you configure.

  1. To add a schedule, do one of the following:

    a. On the Environment List page, select the environment for which you want to set up a schedule and then click Add Schedule. b. In a test result, click Add Schedule.

    Image of report with add schedule link

  2. The Add Schedule window displays a message warning you that Endpoint Management Analyzer saves credentials for running tests on a schedule. Citrix recommends that you use an account with limited access for running scheduled tests. Click I Agree to continue.

  3. Enter a Username and Password for running the test.

  4. Configure a schedule for the test to run.

    a. Select Daily or Weekly.

    b. Select a time of day for the test to run and a time zone.

    c. Use the date picker to select a date for the scheduled test to stop running or leave it blank for the test to run indefinitely.

    d. Enter a list of email addresses to receive reports, separated by commas.

    e. Click Save.

  5. A clock symbol to the left of your test indicates that a schedule is configured. If you select your test, click Edit Schedule to change when the test runs.

    Image of edit schedule screen

    • You can change when the test runs.
    • You can disable the test, by clicking the switch at the top from ON to OFF.

Performing a Citrix ADC check

  1. Log on to Citrix Endpoint Analyzer and then click Gateway Configuration. The Gateway Configuration Check page appears.

    Image of XenMobile Analyzer Configuration and checks

  2. Upload the latest ns.conf file from your instance of Citrix Gateway. You can either drag the file into the upload box or click Browse to search and add the ns.conf file. For more information on how you can download the latest ns.conf file, see the Support Knowledge Center.

    Note:

    Endpoint Management Analyzer does not save the ns.conf file. After the check is complete, you can view and download the report.

  3. Click Run Check.

    Endpoint Management Analyzer runs two types of configuration checks.

    • Essential Checks looks for components that are critical for a successful Endpoint Management deployment.
    • Advanced Checks looks for components that are not critical, but are complementary to Endpoint Management deployments.
  4. To view recommendations on Essential and Advanced Checks for Citrix Gateway, click View Report.

    The Configuration Report page appears.

    Note:

    Citrix Gateway Analyzer supports gateway servers configured through the Citrix ADC wizard. Citrix Gateway instances always have the following title convention: ‘_XM_*name-provided-by-user-when-deploying’.

    The overall status is a Success when the essential configuration checks have passed.

    When an Essential Configuration check fails, the Recommendations table lists the Policy, Details, and Results (Action Required).

    When an Advanced Configuration check fails, the Recommendations table lists the Policy, Details, and Results (Action Recommended).

    The notification badge within the Configuration Report indicates the number of recommendations in the Essential Configuration check for gateway servers configured through the Citrix ADC wizard. The badge also indicates recommendations for user-configured Gateways.

    On the Configuration Report page, the following options are available.

    1. To view the details, click Essential Configuration Checks/Advanced Configuration Checks (or click the expand icon).

    2. To run another Gateway configuration check, click Run another test.

    3. To view other troubleshooting and analyzing tools, click Go to Citrix Endpoint Analyzer Checks.

    4. To download a report of the results, click Download report and ns.conf file bundle or, in Email report and ns.conf bundle, type your email address. Click Send.

Known issues

The following issues are known in the XenMobile Analyzer:

  • When performing the Secure Web Connectivity checks, typing multiple URLs in the text box is not supported.
  • The shared devices authentication feature of Secure Hub is not supported.
  • Secure Web tests only check the connectivity to the URLs entered and not the authentication to the corresponding sites.