NetScaler Gateway

Configuring Load Balancing Servers for XenMobile or Citrix Endpoint Management

October 5, 2020

Contributed by:

After using the NetScaler for XenMobile wizard for initial setup, use the NetScaler Gateway configuration utility to configure load balancing, as described in this section. For Citrix Endpoint Management, use SSL Offload. For XenMobile Server, be sure to refer to the recommendations for load balancing modes under “Deployment Summary” in Integrating with NetScaler Gateway and NetScaler.

To use SSL Bridge mode for NetScaler VIPs

Use SSL Bridge mode if XenMobile is in the DMZ. When you load balance XenMobile server with NetScaler VIPs in SSL Bridge mode, Internet traffic flows directly to XenMobile server, where connections terminate. SSL Bridge mode is the simplest mode to set up and troubleshoot.

Before configuring SSL Bridge mode, go to XenMobile App Management Settings and verify that Communication with XenMobile Server is HTTPS.
After you log on to the configuration utility, on the Home tab, in MDM Server LB, click Configure.
Under LB Virtual Server for Device Management, in Name, type a name for the server.
In IP Address, type the IP address for the virtual server and then click Continue.
On the Load Balance XenMobile MDM Servers page, repeat Steps 3 and 4 and then click Create.
Verify that the settings are correct and then click Done.
To verify the load balancing configuration, go to Traffic Management > Virtual Servers.

To use SSL Offload mode for NetScaler VIPs

Use SSL Offload for Citrix Endpoint Management. Also use SSL Offload, if required to meet security standards, when the on-premises XenMobile server is in the internal network. When you load balance Citrix Endpoint Management or XenMobile server with NetScaler VIPs in SSL Offload mode, Internet traffic flows directly to the NetScaler appliance, where connections terminate. NetScaler Gateway then establishes new sessions from the appliance to Citrix Endpoint Management or the XenMobile server. SSL Offload mode involves additional complexity during setup and troubleshooting.

Before configuring SSL Offload mode, go to XenMobile App Management Settings and verify that Communication with XenMobile Server is HTTP.
Log on to the configuration utility. On the Home tab, in MDM Server LB, click Configure.
Under LB Virtual Server for Device Management, in Name, type a name for the server.
In IP Address, type the IP address for the virtual server and then click Continue.
On the Load Balance XenMobile MDM Servers page, repeat Steps 3 and 4 and then click Create.
Verify the settings and then click Done.
When prompted to add a server certificate, choose the server certificate and click Continue.
Specify the CA certificate and click Continue.
Keep the same XenMobile IP address. Click Done.
To verify the load balancing configuration, go to Traffic Management > Virtual Servers.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Load Balancing Servers for XenMobile or Citrix Endpoint Management

October 5, 2020

Contributed by:

October 5, 2020

Contributed by:

Configuring Load Balancing Servers for XenMobile or Citrix Endpoint Management

To use SSL Bridge mode for NetScaler VIPs

To use SSL Offload mode for NetScaler VIPs

In this article