Citrix Secure Private Access hybrid deployment

Citrix Secure Private Access for hybrid deployment allows customers to implement a Zero Trust Network Access (ZTNA) solution using on-premises StoreFront and NetScaler Gateway components and use the Citrix Cloud for managing the configuration, administration, and monitoring functions. This means customers can leverage existing NetScaler Gateway on-premises to control user traffic routing while using Citrix Cloud hosted UI for management of configurations and policies. Also, use Citrix Monitor hosted in the Citrix Cloud for monitoring and troubleshooting functions.

The key components of the Secure Private Access hybrid deployment are:

Hybrid deployment

Cloud Connector: Pulls and caches all the configuration data, which allows app launches and access even when Citrix Cloud is unavailable. No user traffic is sent to the cloud. Cloud Connector is installed on a Windows server within your on-premises network. The Secure Private Access provider is part of the Cloud Connector. For details, see Cloud Connector for hybrid deployment.

StoreFront: Handles the enumeration and delivery of applications and desktops to the end users. StoreFront remains on-premises and you can continue to use your existing StoreFront setup without migrating to the cloud. For details, see StoreFront.

NetScaler Gateway: Provides secure remote access to applications and desktops. NetScaler Gateway remains on-premises, ensuring that users can securely connect to their resources from outside the corporate network. For details, see Configure NetScaler Gateway.

Secure Private Access admin console: Provides access to administrative and management functions, such as onboarding new users, configuring applications, and setting up policies. Site management tasks are centralized and administration is streamlined without requiring on-premises infrastructure for these functions. For details, see Access the Secure Private Access admin console.

Note:

For details on the system requirements and supported product versions for Secure Private Access hybrid deployment, see System requirements and prerequisites.

Citrix Secure Private Access hybrid deployment

In this article