Configuring Intranet Applications for the NetScaler Gateway Plug-in

You create intranet applications for user access to resources by defining the following:

• Access to one IP address and subnet mask
• Access to a range of IP addresses

When you define an intranet application on NetScaler Gateway, the NetScaler Gateway Plug-in for Windows intercepts user traffic that is destined to the resource and sends the traffic through NetScaler Gateway.

When configuring intranet applications, consider the following:

• Intranet applications do not need to be defined if the following conditions are met:
  • Interception mode is set to transparent
  • Users are connecting to NetScaler Gateway with the NetScaler Gateway Plug-in for Windows
  • Split tunneling is disabled
• If users connect to NetScaler Gateway by using the NetScaler Gateway Plug-in for Java, you must define intranet applications. The NetScaler Gateway Plug-in for Java intercepts traffic only to network resources defined by intranet applications. If users connect with this plug-in, set the interception mode to proxy.

When configuring an intranet application, you must select an interception mode that corresponds to the type of plug-in software used to make connections.

Note: You cannot configure an intranet application for both proxy and transparent interception. To configure a network resource to be used by both the NetScaler Gateway Plug-in for Windows and NetScaler Gateway Plug-in for Java, configure two intranet application policies and bind the policies to the user, group, virtual server, or NetScaler Gateway global.

To create an intranet application for one IP address

1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway Resources and then click Intranet Applications.
2. In the details pane, click Add.
3. In Name, type a name for the profile.
4. In the Create Intranet Application dialog box, select Transparent.
5. In Destination Type, select IP Address and Netmask.
6. In Protocol, select the protocol that applies to the network resource.
7. In IP Address, type the IP address.
8. In Netmask, type subnet mask, click Create and then click Close.

To configure an IP address range

If you have multiple servers in your network, such as web, email, and file shares, you can configure a network resource that includes the IP range for network resources. This setting allows users access to the network resources contained in the IP address range.

1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway Resources and then click Intranet Applications.
2. In the details pane, click Add.
3. In Name, type a name for the profile.
4. In Protocol, select the protocol that applies to the network resource.
5. In the Create Intranet Application dialog box, select Transparent.
6. In Destination Type, select IP Address Range.
7. In IP Start, type the starting IP address and in IP End, type the ending IP address, click Create and then click Close.