Configuring Access to Applications and Virtual Desktops in the Web Interface

January 29, 2019

Contributed by: C

You can configure NetScaler Gateway to give users access to published applications and virtual desktops with the NetScaler Gateway Plug-in instead of with Receiver. To configure access to applications and desktops, you change the configuration on NetScaler Gateway from using Receiver only to connect to NetScaler Gateway, to a configuration that enables connections by using the NetScaler Gateway Plug-in with single sign-on to the Web Interface. For example, you configure NetScaler Gateway so that all users connect with the NetScaler Gateway Plug-in and use the Web Interface as the home page. This scenario supports single sign-on to the Web Interface.

In addition to access to applications and desktops, users can also run applications installed on the user device that make network connections through the VPN tunnel.

To start the configuration, use the following guidelines:

Create a Web Interface site.
Configure Advanced Access Control settings.
Configure SmartAccess.
Configure endpoint analysis on NetScaler Gateway.
Configure policies and filters on Citrix XenApp and XenDesktop.
Configure NetScaler Gateway so users log on by using the NetScaler Gateway Plug-in to access published applications and virtual desktops.

For more information, see the following topics in Citrix eDocs:

When configuring user logon to XenApp and XenDesktop, you first create a session profile to select the NetScaler Gateway Plug-in for Windows. Then, you create a profile for intranet applications for access to XenApp, XenDesktop, and the Web Interface.

To configure global settings for the NetScaler Gateway Plug-in for access to applications and desktops

In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Global Settings.
In the details pane, under Settings, click Change global settings.
On the Published Applications tab, next to ICA Proxy, select OFF.
In Web Interface Address, type the URL of the Web Interface site. This becomes the home page for users.
In Single Sign-On Domain, type the Active Directory domain name.
On the Client Experience tab, next to Plug-in Type, select Windows/Mac OS X and then click OK.

To configure the intranet application

In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Resources and then click Intranet Applications.
In the details pane, click Add.
In Name, type a name for the application.
Click Transparent.
In Protocol, select the TCP, UDP, or Any.
In Destination Type, select IP Address and Netmask . For example, type 172.16.100.0 and the subnet mask 255.255.255.0 to represent all servers on the 172.16.100.x subnet. The IP address of the Web Interface, XenApp, and all other servers to which users connect must be in one of the subnets defined as an intranet application.

After you create the intranet application, you can bind it globally or to a virtual server.
In IP Address and NetMask, type the IP address and subnet mask that represents your internal network, click Create and then click Close.

After you create the intranet application, you can bind it globally or to a virtual server.

To bind an intranet application globally

In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Global Settings.
In the details pane, under Intranet Applications, click Create mappings to TCP applications in the secure network for the NetScaler Gateway Plug-in for Java.
In the Configure VPN Intranet Applications dialog box, click Add.
Under Available, select one or more intranet applications, click the arrow to move the intranet applications to Configured and then click OK.

To bind an intranet application to a virtual server

In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Virtual Servers.
In the details pane, select a virtual server and then click Open.
In the configure NetScaler Gateway Virtual Server dialog box, click the Intranet Applications tab.
Under Available Application Name, select the intranet applications, click Add and then click OK.

When users log on with the NetScaler Gateway Plug-in, the VPN tunnel is established and either Receiver or the Web Interface is used as the home page.

The official version of this content is in English. Some of the Citrix documentation content is machine translated for your convenience only. Citrix has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Citrix product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Citrix, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Citrix will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configuring Access to Applications and Virtual Desktops in the Web Interface

January 29, 2019

Contributed by: C

Configuring Access to Applications and Virtual Desktops in the Web Interface

To configure global settings for the NetScaler Gateway Plug-in for access to applications and desktops

To configure the intranet application

To bind an intranet application globally

To bind an intranet application to a virtual server

Configuring Access to Applications and Virtual Desktops in the Web Interface

In this article