Citrix Secure Private Access™ Hybrid Deployment

Configure session policies

April 7, 2026

Contributed by:

You can use a session policy to allow users to directly access back-end applications by bypassing NetScaler Gateway tunneling.

Navigate to Policies > Session Policies and click Create Session Policy.
Enter a name and a description of the policy.
Select the users and conditions to which you want to apply these settings.

You can apply the condition to all users or to a subset of users.

For example, you can define the Network Location condition to enable dynamic routing for the entire session. This ensures that direct routing is enabled only when users are inside the company’s corporate network.

When you add additional conditions based on a context, an AND operation is applied on the conditions, and the policy is evaluated only if both the users and the optional contextual-based conditions are met.
Select Direct routing to send user traffic directly to the back-end applications without NetScaler Gateway tunneling.
Select Enable policy after creation. If you do not select this option, the policy is only created and not enforced on the applications.

Alternatively, you can also enable the policy from the Session Policies page by using the toggle switch in the Status column.
Click Save.

Note:

Network location changes trigger session policy refreshes and this might impact the end clients as follows:

Citrix Secure Access client: Policy refreshes might alter routing configurations and hence impact application access.

Chrome Secure Browse extension: Policy refreshes occur every 30 minutes. Users must restart the browser or wait for the refresh to access applications.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Configure session policies

April 7, 2026

Contributed by:

April 7, 2026

Contributed by:

Configure session policies

In this article