In NetScaler Gateway 11.1
In Citrix Gateway
In All products
Product Documentation
In NetScaler Gateway 11.1
In Citrix Gateway
In All products
NetScaler Gateway Service NetScaler Gateway 12.0 NetScaler Gateway 11.1 NetScaler Gateway 10.5
View PDF

Configuring Custom Clientless Access Policies for Receiver for Web

January 29, 2019
Contributed by:  C

You can configure custom clientless access policies on NetScaler Gateway for user connections with Receiver for Web by adhering to the following guidelines:

  • Receiver requires that StoreFront XML traffic cannot be rewritten, which would occur when users connect to NetScaler Gateway with clientless access.
  • App Controller requires the rewriting of HTML traffic.
  • Receiver for Web requires that certain cookies are not proxied through NetScaler Gateway.

If you create clientless access policies for Receiver and Receiver for Web, bind the Receiver policy to the virtual server before you bind the Receiver for Web policy. When you bind the Receiver policy, set a lower priority number to make sure that this policy takes precedence over the Receiver for Web policy.

To configure a clientless access policy for Receiver for Web

  1. In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies and then click Clientless Access.
  2. In the details pane, on the Policies tab, click Add.
  3. In Name, type a name for the policy.
  4. Under Expression, type true.
  5. Next to Profile, click New.
  6. In Name, type a name for the profile.
  7. On the Rewrite tab, in URL Rewrite, select ns_cvpn_default_inet_url_label.
  8. On the Client Cookies tab, next to Client Cookies, click New.
  9. In the Configure Pattern Set dialog box, under Specify Pattern, in Pattern, add the following cookies in this order:
    1. Enter the value CsrfToken and then click Add.
    2. Enter the value ASP.NET_SessionId and then click Add.
    3. Enter the value CtxsPluginAssistantState and then click Add.
    4. Enter the value CtxsAuthId and then click Add.
  10. Click Create three times and then click Close.

To bind a clientless access policy to a virtual server

After you create the custom clientless access policy, bind the policy to the virtual server.

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Virtual Servers.
  2. In the details pane, select a virtual server and then click Open.
  3. In the configure NetScaler Gateway Virtual Server dialog box, click the Policies tab and then click Clientless.
  4. Next to a policy, under Priority, type the number and then click OK.

Configuring Custom Clientless Access Policies for Receiver for Web

January 29, 2019
Contributed by:  C

In this article

Edit this article