Release Notes

The Citrix Gateway service release to cloud release notes describe the new features, enhancements to existing features, fixed issues, and known issues available in a service release. The release notes include one or more of the following sections:

What’s new: New features and enhancements available in the current release.

Fixed issues: Issues that are fixed in the current release.

Known issues: Issues that exist in the current release and their workarounds, wherever applicable.

August 19, 2025

What’s new

• DNS service changes in the Citrix Gateway service

  The Citrix Gateway service is migrating its DNS service from the current provider to Akamai DNS for the Citrix commercial cloud in a phased manner. To ensure a smooth migration and continued operation, you must complete the following configurations:

  1. Firewall configuration: Configure firewalls and Secure Web Gateways as mentioned in System and Connectivity Requirements. Ensure all the global FQDNs are part of your required exceptions. For more information, see Global FQDNs with defined set of PoPs.

  2. DNS forwarder configuration: If DNS forwarders are configured to allow recursive DNS resolution for specific domains, you must include *.akadns.net in the allowed list. This configuration enables Citrix Cloud Connector, Citrix Virtual Apps and Desktops, or client to connect to the Citrix Gateway service.

  [CTXENG-67839]

August 07, 2025

What’s new

• Citrix Gateway service PoP expansion

  To enhance business continuity and ensure quality of service for customers using Citrix Gateway service for HDX proxy, launch of the following new PoPs are planned for the upcoming service release:

  PoP code	PoP FQDN	Cloud service provider	Country	Location
  az-us-e2	az-us-e2-rdvz.g.nssvc.net	Azure	USA	Virginia
  aws-asia-se	aws-asia-se-rdvz.g.nssvc.net	AWS	Singapore	Singapore
  aws-asia-tw	aws-asia-tw-rdvz.g.nssvc.net	AWS	Taiwan	Taipei

  For more information, see PoP FQDNs.

  [CTXENG-67498]

• Support for Citrix Gateway service bandwidth monitoring in Citrix Japan Cloud

  Administrators of Citrix Japan Cloud can now monitor Citrix Gateway service bandwidth usage with enhanced visibility and tracking capabilities. This feature provides comprehensive insights into consumption patterns across multiple entitlements and enables proactive monitoring of bandwidth usage to identify potential overages.

  The following are some of the key features:

  • Usage summary: The Usage Summary page displays an overview of all your entitlements and any bandwidth overage.

  • Detailed usage interface: A multi-tab interface allows you to view usage details of your monthly, annual, and termed entitlements.

  • Entitlement-based calculation: Bandwidth is precisely calculated based on the allocation of your purchased entitlements.

  For more information, see Monitor bandwidth usage for Gateway service.

  [CTXENG-602]

June 19, 2025

What’s new

• Enhanced network metrics monitoring for the Citrix Gateway service - Preview

  The enhanced network metrics monitoring for the Citrix Gateway Service is now available to all Citrix DaaS™ customers. To use this feature, admins must only enable the Network telemetry policy in Citrix Studio or Web Studio for the following builds:

[CTXENG-65466]

Known issues

• The session reliability feature might not work for EDT sessions when the Network telemetry policy is enabled for version 2503 of both Citrix Workspace app and Citrix Virtual Apps and Desktops.

  [CGS-21605]

June 12, 2025

What’s new

• Support for on-premises Citrix Virtual Apps and Desktops - Preview

  The Citrix Gateway service now supports on-premises Citrix Virtual Apps and Desktops. The Citrix Gateway service is integrated with the on-premises Delivery Controller, which makes hybrid access easier for Citrix Virtual Apps and Desktops customers. Hybrid access lets you use your on-premises NetScaler Gateway and StoreFront for authentication, authorization, and enumeration. Citrix Gateway service is used to launch virtual apps and desktops. This approach maximizes the value of existing remote access infrastructure and minimizes administrative effort.

  Key benefits:

  The integration of Citrix Gateway service with on-premises Delivery Controller offers the following benefits:

  • Customization retention: NetScaler Gateway and StoreFront™ customizations can be retained, ensuring a consistent user experience.

  • Minimized maintenance: HDX proxy performance and scale requirements are now managed by Citrix Gateway service, eliminating the need for customer management.

  • Existing URL: DaaS customers can continue using their familiar on-premises NetScaler® Gateway URL.

  • Leveraging LHC for enhanced resiliency: Local Host Cache (LHC) supports resiliency needs by allowing the connector to function as a local Secure Ticket Authority (STA) during outages.

  • Better user experience: Ability to use geographically closer PoPs reduces latency and improves performance.

  • High resiliency: Ensures high resiliency because of the multi-cloud and multi-geo architecture of Citrix Gateway service.

  Prerequisites:

  1. You must have a functional on-premises working environment where NetScaler Gateway is used for authentication and authorization and StoreFront is used for enumeration.

  2. Upgrade StoreFront to version 2503 or higher. For more information, see Upgrade StoreFront.

  Create a resource location on Citrix Cloud™:

  1. Onboard to Citrix Cloud. For more information, see Create a Citrix Cloud account and Connect to Citrix Cloud.

  2. On Citrix Cloud, install Cloud Connectors and associate them with the resource location. For more information, see Cloud Connector Installation.

     Note:

     To make your existing apps and desktops available to subscribers, add your site (Citrix Virtual Apps and Desktops deployment) to Citrix Workspace. For more information, see Aggregate Virtual Apps and Desktops in workspaces.

  Configure the resource location and policies on the on-premises Delivery Controller™:

  1. Run the following command on the Windows Active Directory (AD) or Domain Controller (DC) server, to retrieve the Security Identifiers (SIDs) of connector machines in a Windows AD or DC environment. Note the SIDs of the connector machines.

     Get-ADComputer -Filter *|Select-Object Name, SID 
     <!--NeedCopy-->
     

  2. In the on-premises Delivery Controller, create a zone and map it to the resource location created in Citrix Cloud.

     1. In on-premises Delivery Controller, run the following command in the PowerShell and note the Uid generated for the required resource location:

        Get-ConfigZone
        <!--NeedCopy-->
        

     2. Run the following commands for all the Citrix Cloud Connectors:

        Set-ConfigZone -Uid <Uid from above command output> -ExternalUid <RL ID noted at step 1>
        
        new-configedgeserver  <User friendly name> -MachineAddress "<Connector FQDN"> -Sid <Connector respective SID from step 2> -uuid <Respective Edge server UUID from step 1> -ZoneUid <Uid from Get-ConfigZone output>
        <!--NeedCopy-->
        

  3. To use Rendezvous v1, enable Rendezvous within the Delivery Controller policies and ensure that the on-premises Delivery Controller is configured with the connector details to accept Rendezvous requests. For more information, see Rendezvous v1.

  4. To use HDX adaptive transport with EDT, enable adaptive transport protocol within the Delivery Controller policies on your on-premises Delivery Controller. For more information, see HDX Adaptive transport with EDT support for Citrix Gateway service.

  Configure Citrix Gateway service for StoreFront to integrate with on-premises Delivery Controller:

  Perform the following steps to integrate the Citrix Gateway service for StoreFront with the on-premises Delivery Controller:

  1. Configure an authentication gateway

  2. Configure a routing gateway

  3. Configure remote access setting for Delivery Controller

  4. Map the Delivery Controller and routing gateway

  5. Configure the optimal HDX™ gateway routing

  Step 1 - Configure an authentication gateway:

  1. Open the StoreFront management console.

  2. Navigate to Stores > Manage Citrix Gateways and click Add.

  3. In Display name, enter a name for the authentication gateway.

  4. In Gateway type, select Citrix Gateway Appliance and in Usage or role, select Authentication only.

  5. In Citrix Gateway URL, enter an authentication URL.

  6. Click Next and then Finish.

  Step 2 - Configure a routing gateway:

  1. Navigate to Stores > Manage Citrix Gateways in the StoreFront management console and click Add.

  2. In Display name, enter a name for the routing gateway.

  3. In Gateway type, select Citrix Gateway service.

  4. If geo-location routing is required, fill the following parameters:

     • Citrix Gateway service URL: Enter the FQDN ending with rgn.g.nssvc.net, which serves as the general FQDN for geo-location routing.

     • Citrix Gateway service URL (STA Connector Mode): Enter the FQDN ending with rgn-s.g.nssvc.net, which supports the service continuity feature.

     For more information, see Regional FQDNs for geo-location routing.

  5. Navigate to the Cloud Connectors tab and click Add to add the cloud connector URLs.

  6. Enable Load balance multiple servers and Enable session reliability.

  7. Click OK.

     Note:

     • HDX session launch fails if the Enable session reliability option is disabled on on-premises StoreFront.

     • Citrix Gateway service for StoreFront does not support dual STA. Hence, the Request two tickets from cloud connectors, where available option must not be selected.

  Step 3 - Configure remote access setting for Delivery Controller:

  1. In the StoreFront management console, navigate to Configure remote access settings in your site.

  2. Select Enable remote access.

  3. In Citrix Gateway, select the previously configured authentication gateway.

  4. Click OK.

  Step 4 - Map Delivery Controller and routing gateway:

  1. In the StoreFront management console, navigate to Configure store settings > Optimal HDX routing in your site.

  2. Select the routing gateway, click Manage sites, and select the configured site.

  3. Click OK.

  Step 5 - Configure optimal HDX gateway routing:

  Note:

  If you have multiple zones, create routing gateways for each zone as given in “Step 2: Configure a routing gateway”.

  Map each zone to its distinct routing gateway as given in the following steps:

  1. In the StoreFront management console, navigate to Configure store settings > Optimal HDX routing in your site.

  2. Select the routing gateway and click Manage zones.

  3. Click Add under Manage zones and create a zone with the same zone name created at the on-premises Delivery Controller.

  [CTXENG-1466]

June 05, 2025

What’s new

• Addition of AWS PoP in Paris, France

  To enhance business continuity and ensure quality of service for customers using Citrix Gateway service for HDX proxy, a new AWS PoP is added in Paris, France.

  PoP FQDN: aws-eu-w-rdvz.g.nssvc.net

  For more information, see PoP FQDNs.

  [CGS-21400]

May 20, 2025

What’s new

• Security and compliance enhancements

  Citrix Gateway service is now compliant with the following industry-standard certifications, reinforcing our commitment to delivering a secure and reliable service:

  • System and Organization Controls (SOC) 2 Type 2: Ensures compliance with stringent requirements for security, availability, processing integrity, confidentiality, and privacy.

  • Payment Card Industry Data Security Standard (PCI DSS) v4.0: Validates the secure handling of payment card data.

  • Health Insurance Portability and Accountability Act (HIPAA): Demonstrates adherence to regulations for the secure management of protected health information (PHI).

  For latest certification status, see the “Certifications” section in Citrix Trust Center.

  [CTXENG-65435]

May 15, 2025

What’s new

• Geo-location Routing - General availability in Citrix Gateway service for StoreFront

  Geo-location Routing is now generally available in Citrix Gateway service for StoreFront. For more information, see Add Citrix Gateway service.

  [CGS-21536]

May 13, 2025

What’s new

• Addition of AWS PoP in Hyderabad, India

  To enhance business continuity and ensure quality of service for customers using Citrix Gateway service for HDX proxy, a new AWS PoP is added in Hyderabad, South-Central India.

  PoP FQDN: aws-in-sc-rdvz.g.nssvc.net

  For more information, see PoP FQDNs.

  [CTXENG-67122]

March 27, 2025

What’s new

• Support for geo-location routing to PoPs in Asia region

  Citrix Gateway service now supports geo-location routing to PoPs in the Asia region.

  The following table lists the Asia region FQDNs and PoPs for geo-location routing:

[CTXENG-65014]

February 21, 2025

What’s new

• Enhanced Citrix DaaS experience for GCP customers with support to commercial region PoPs

  The upcoming service release will provide support for PoPs in commercial regions for GCP customers.

  Currently, there are 24 commercial region PoPs across 5 continents. With this upcoming support, you can use these PoPs in Azure and AWS in addition to the existing GCP PoPs.

  Important:

  To ensure continued operations in your Citrix DaaS deployment, complete the instructions specified in PoPs for Google Cloud Platform (GCP) customers before March 15, 2025.

  [CGS-20941]

January 20, 2025

What’s new

• Network metrics monitoring for Citrix Gateway service - Preview

  The network metrics provide end-to-end visibility of HDX traffic between Citrix Workspace app and Virtual Delivery Agent (VDA) passing through Citrix Gateway service. The visual representation of network metrics in DaaS Monitor enables administrators to view real-time client and network latency metrics, historical reports, end-to-end performance data, and troubleshoot performance issues. For more information, see Network metrics monitoring in Citrix Gateway service - Preview.

  [CGS-17876, CGS-18276]

January 15, 2025

What’s new

• Geo-location Routing - General availability

  Geo-location Routing is now generally available in Citrix Gateway service. For more information, see Geo-location Routing.

  [CGS-17232]

September 18, 2024

What’s new

• Citrix Gateway service for StoreFront - General availability

  Citrix Gateway service for StoreFront is now generally available in the Citrix DaaS environments. See Citrix Gateway service for StoreFront

• Resiliency with Local Host Cache (LHC)

  In a Citrix Gateway service for StoreFront deployment, LHC is activated when the communication between the Cloud Connector and Citrix Cloud is disrupted. LHC is a functionality of Citrix DaaS that ensures resiliency during network outages. For more information, see Resiliency with Local Host Cache (LHC).

  [BRK-15652]

April 25, 2024

What’s new

• Citrix Gateway service for StoreFront - Preview

Citrix Gateway service for StoreFront is a cloud-based HDX solution that provides secure remote access to resources accessed from on-premises StoreFront. You can leverage the scalability and reliability of Citrix Cloud (for HDX proxy) without changing your on-premises StoreFront and on-premises NetScaler Gateway environments.

This solution is in preview. For details see Citrix Gateway service for StoreFront - Preview.

April 24, 2024

What’s new

• Support for loss tolerant mode for audio policy

Citrix Gateway service now supports the latest loss tolerant mode for audio in Citrix Virtual Apps and Desktops. This mode enhances the audio experience for users connecting to networks with high latency and packet loss. Users must use Citrix Virtual Apps and Desktops 7 2402 LTSR or later versions to use this functionality.

The loss tolerant mode for audio is based on the EDT loss tolerant transport protocol, which allows packet loss in transmission without resending multimedia content, resulting in a more real-time experience for users. It is the preferred mode for audio during lossy network conditions to ensure superior audio quality compared to EDT.

For details on the loss tolerant mode settings, see Loss tolerant mode for audio.

April 19, 2024

What’s new

• Support for Toronto (Canada) Azure PoP

  Support for the Azure PoP in Toronto, Canada is now available.

  PoP FQDN: az-ca-c-rdvz.g.nssvc.net

  For details, see Geo-location Routing - Preview.

  [CGS-12933]

February 27, 2024

What’s new

• Support for Google Cloud Platform

  Support for Google Cloud Platform (GCP) PoPs along with the existing Azure and AWS PoPs are planned in the upcoming service releases.

  Currently, there are 5 GCP PoPs that are distributed across geo-locations. With this upcoming support, you can leverage these GCP PoPs along with the existing Azure and AWS PoPs.

  Important:

  To ensure continued operations in your Citrix DaaS deployment, complete the instructions specified in Citrix Gateway service – Points-of-Presence (PoPs) before 15th of March, 2024.

February 01, 2024

What’s new

• Support for Toronto (Canada) Azure PoP

  Support for the Azure PoP in Toronto, Canada is planned in the upcoming service releases.

  PoP FQDN: az-ca-c-rdvz.g.nssvc.net

  [CGS-12933]

November 02, 2023

What’s new

• Support for the latest version of reducer for HDX

  Citrix Gateway service supports the latest version of the reducer for HDX. Reducer for HDX is a general purpose compressor that works across virtual channels. The latest reducer improves the overall performance of Citrix DaaS with the following capabilities:

  • Reduces the network bandwidth utilization for HDX sessions.
  • Data packets are transmitted in a shorter duration, resulting in a faster response.

  The following software versions support the latest reducer.

  • Citrix Virtual Apps and Desktops 7 2303 (Windows) and later.
  • Citrix Workspace app 2303 (Windows) and later.

  [CGS-16258]

August 29, 2023

What’s new

• Geo-location Routing - Preview

  Citrix Gateway service provides a capability to the admins to enable their users to connect to PoPs in a particular region or only through a particular cloud service provider regardless of the users’ location. For more information, see Geo-location Routing - Technical preview.

  [CGS-13782]

• HDX Performance Analytics

  Citrix Gateway service supports the HDX performance analytics functionality that enables Citrix Analytics administrators to view performance data related to the Connector-Gateway PoP latency. For more information, see Connector Statistics.

  [CGS-15829]

• Accelerated Networking

  The Citrix Gateway service infrastructure is enhanced to support accelerated networking wherein it uses single root I/O virtualization (SR-IOV) to provide high-performance networking capabilities to users.

  [CGS-15684]

• Deprecated weak ciphers

  For the updated list of the deprecated ciphers of Citrix Gateway service, see Technical security overview.

  [CGS-14234]

Fixed issues

• EDT sessions are disconnected whenever the backend pool is modified in the Azure load balancer.

  [CGS-15808]

November 10, 2022

What’s new

• Rendezvous protocol version V2 support

  The Citrix Gateway service now supports Rendezvous protocol version V2 for Citrix Gateway service on the Google Cloud Platform. For details, see Citrix Gateway service features supported.

• Citrix Gateway service on Google Cloud Platform availabiality in Europe

  Citrix Gateway service on the Google Cloud Platform is now available in Europe in the following regions.

  • London
  • Zurich

  For details, see Citrix Gateway service on Google Cloud Platform.

Known issues

• Rendezvous v2 VDA registration fails if the customer ID is fewer than 6 characters.

  [CGS-15036]

June 30, 2022

What’s new

• Citrix Gateway service availability on the Google Cloud Platform

  With Citrix Gateway service support on the Google Cloud Platform (GCP), customers running their workloads on Google Cloud can take the advantage of Google Cloud’s high-performing global network using the Citrix Gateway optimal routing feature. The optimal gateway routing feature directs clients to the closest GCP Citrix Gateway service PoP. Also, the Citrix Gateway service on Google Cloud provides secure connectivity between Citrix Workspace clients and virtualization resources to deliver sessions with the lowest latency and the best user experience possible. For details, see Citrix Gateway service on Google Cloud Platform.

April 04, 2022

What’s new

• Rebranding changes

  • Citrix Secure Workspace Access is now rebranded to Citrix Secure Private Access.
  • Citrix Virtual Apps and Desktops service is now rebranded to Citrix DaaS.

What’s new

• Merger of Citrix Gateway service tile into a single Citrix Secure Private Access in Citrix Cloud

October 11, 2021

What’s new

• Merger of Citrix Gateway service tile into a single Citrix Secure Private Access in Citrix Cloud

  The Citrix Gateway service tile and Citrix Secure Private Access tile are merged into Citrix Secure Private Access tile and the Citrix Gateway landing page is modified for Citrix Secure Private Access. Therefore you do not see the Virtual Apps and Desktops and the Add a Web/SaaS app shortcuts. However, the Citrix Virtual Apps and Desktops customers can enable Citrix Gateway service from Workspace configuration > Access > External Connectivity. There is no change in the functionality, otherwise.

  The following Citrix Gateway service features are moved to Citrix Secure Private Access service.

  • Configuring SaaS and Enterprise web apps
  • Enabling enhanced security controls
  • Configuring contextual policies

  Citrix Secure Private Access customers, including Citrix Workspace Essentials and Citrix Workspace Standard, can now use one single Citrix Secure Private Access tile for configuring SaaS and Enterprise web apps, enhanced security controls, contextual policies, in addition to web filtering policies.

  [ACS-645]