Gateway

Add the Citrix Secure Access client to the Citrix Workspace app

When Citrix Workspace app is installed on the user device, users can log on with the Citrix Secure Access client through the Citrix Workspace app. You upload the Citrix Secure Access client to the Merchandising Server, which then downloads and installs the plug-in to Citrix Workspace app on the user device. If users have the Citrix Secure Access client installed when they install Citrix Workspace app for the first time, the plug-in is automatically added to Citrix Workspace app.

Deliver plug-ins to the user devices

To deliver plug-ins to user devices, you must upload and configure the Citrix Secure Access client on the Merchandising Server. When users make a selection, the plug-in downloads and installs from the Merchandising Server.

If users install the Citrix Secure Access client and then later install Citrix Workspace app, when the Citrix Workspace app installation is complete, the Citrix Secure Access client appears in the Citrix Workspace app menu.

If users have Citrix Workspace app for Windows, users can install Citrix Workspace app Updater for Windows. This is an optional component that updates the plug-ins and communicates with the Merchandising Server. Citrix Workspace app includes all the plug-ins available for delivery, including the Citrix Secure Access client. For more information about Citrix Workspace app Updater for Windows, see the Citrix Workspace apps and plug-ins section in the NetScaler product Documentation.

Connect to NetScaler Gateway with Citrix Workspace app

If users connect with Citrix Workspace app for Windows, they can right-click the Citrix Workspace app icon in the notification area, click Preferences, and then click plug-in status. If the Citrix Secure Access client is installed on the user device, users right-click the Citrix Secure Access client, and then click Logon. When authentication succeeds, the Citrix Secure Access client establishes the connection to NetScaler Gateway and establishes a full VPN tunnel.

Users can also log on with a web browser. Users enter the fully qualified domain name (FQDN) of NetScaler Gateway and log on. When NetScaler Gateway establishes the connection, users can verify the connection on the Preferences > plug-in status panel in Citrix Workspace app.

The NetScaler Gateway web address is part of the metadata configured on the Merchandising Server and users cannot change the address. The Citrix Secure Access client initiates the logon to NetScaler Gateway. If the version of the Citrix Secure Access client for Windows that is installed on the user device is different than the version on the NetScaler Gateway appliance, the plug-in downgrades or upgrades automatically when users log on. The Citrix Secure Access client for macOS X does not downgrade automatically. To install an earlier version of the plug-in on a Mac computer, users must first uninstall the Citrix Secure Access client and then download the earlier version from NetScaler Gateway.

Upgrade or downgrade the Citrix Secure Access client

During an upgrade or downgrade of the Citrix Secure Access client, the appliance removes, downloads, and then installs the correct version of the plug-in. Users can confirm the new installation by checking the plug-in entry on the Preferences > plug-in status panel in Citrix Workspace app. The newly installed version of the Citrix Secure Access client might be a different version than what is configured on the Merchandising Server.

Add the Citrix Secure Access client to the Merchandising Server

You can also configure Citrix Secure Access client delivery on the Merchandising Server, which provides a web configuration interface that allows you to upload the Citrix Secure Access client MSI installation package. On Merchandising Server, you can:

  • Specify the version and metadata for the Citrix Secure Access client.

  • Configure one or more Web addresses for the NetScaler Gateway appliance.

  • Associate specific rules based on operating system or other parameters for delivery.

Users cannot add or remove servers from the list of servers configured on Merchandising Server, although they can select a different server from the configured list in the Network Settings panel in Citrix Workspace app.

If you are using Access Scenario Fallback or load balancing, you can configure a fixed set of NetScaler Gateway web addresses and designate the Merchandising Server as the default address. Users connect to the default server when they select Log On from the Citrix Workspace app menu. Users can select a different address from the provided list by using the Citrix Workspace app’s Preferences > Network Settings panel in Citrix Workspace app.

Users can continue to use a web browser to log on to any NetScaler Gateway. If users log on by using a web browser, the Citrix Secure Access client upgrades or downgrades automatically to the version that is on NetScaler Gateway.

The following are general steps for adding the Citrix Secure Access client to the Merchandising Server.

  • Configure the settings on the General tab in the Merchandising Server Administrator Console.

  • Add the Citrix Secure Access client to the Merchandising Server.

  • Select the appropriate plug-in version for the target platform. The Citrix Secure Access client must be added to the main page of the Merchandising Server for the plug-in to appear in the Add plug-ins to Delivery page.

  • Configure delivery for the Citrix Secure Access client.

  • Use a friendly name for the location that identifies the NetScaler Gateway Web address. This name appears in Citrix Workspace app. You can also add more NetScaler Gateway appliances.

  • Specify authentication type and customize specific labels that appear in the Citrix Workspace app logon dialog box, such as the user name, password, or personal identification number (PIN).

  • Add rules for the delivery.

  • Create rules if you want rules to appear in the Add Rule to Delivery page.

  • Schedule the delivery.

Add the Citrix Secure Access client to the Citrix Workspace app