FAQs

Important:

Citrix SSO for Android is now called Citrix Secure Access. We are updating our documentation and the UI screenshots to reflect this name change.

This section captures the FAQs on the Citrix Secure Access for Android.

How is Citrix Secure Access different from VPN app? Citrix Secure Access is the next generation SSL VPN client for NetScaler. The App uses Apple’s Network Extension framework to create and manage VPN connections on iOS and macOS devices. Citrix VPN is the legacy VPN client that made use of Apple’s private VPN APIs which is now deprecated. Support for VPN will be removed from the App Store in the months to come.

What is Network Extension? The Network Extension (NE) framework from Apple is a modern library which contains APIs that can be used to customize and extend the core networking features of iOS and macOS. Network Extension with support for SSL VPN is available on devices running iOS 9+ and macOS 10.11+.

For which versions of NetScaler is the Citrix Secure Access compatible? VPN features in Citrix Secure Access are supported on NetScaler versions 10.5 and above. The TOTP is available on NetScaler version 12.0 and above. Push Notification on NetScaler has not been publicly announced yet. The App requires iOS 9+ and macOS 10.11+ versions.

How does Cert-based authentication for non-MDM customers work? Customers who previously distributed Certificates via Email or Browser to perform Client Certificate Authentication in VPN must note this change when using Citrix Secure Access. This is mostly true for non-MDM customers who do not use an MDM Server to distribute User Certificates. See “Importing Certificates into Citrix Secure Access via Email” to be able to distribute Certificates.

What is Network Access Control (NAC)? How do I configure NAC with Citrix Secure Access and NetScaler Gateway? Microsoft Intune and Citrix Endpoint Management (formerly XenMobile) MDM customers can take advantage of the Network Access Control (NAC) feature in Citrix Secure Access. With NAC, administrators can secure their enterprise internal network by adding an extra layer of authentication for mobile devices that are managed by an MDM server. Administrators can enforce a device compliance check on Citrix Secure Access at the time of authentication.

To use NAC with Citrix Secure Access, you must enable it on both the NetScaler Gateway and the MDM server.

  • To enable NAC on NetScaler refer this link.
  • If the MDM vendor is Intune refer this link.
  • If the MDM vendor is Citrix Endpoint Management (formerly XenMobile) refer this link.

    Note:

    The minimum supported Citrix Secure Access for Android version is 1.1.6 and above.

FAQs

In this article