Product Documentation

Configuring Client Choices Options

In addition to enabling client choices by using a session profile and policy, you need to configure the settings for the user software. For example, you want users to log on using either the Citrix Gateway Plug-in, StoreFront or the Web Interface, or clientless access. You create one session profile that enables all three options and client choices. Then, you create a session policy with the expression set to True value with the profile attached. Next, you bind the session policy to a virtual server.

Before creating the session policy and profile, you need to create an authorization group for users.

To create an authorization group

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > User Administration, and then click AAA Groups.
  2. In the details pane, click Add.
  3. In Group Name, type the name of the group.
  4. On the Users tab, select the users, click Add for each one, click Create and then click Close.

The following procedure is an example session profile for client choices with the Citrix Gateway Plug-in, StoreFront, and clientless access.

To create a session profile for client choices

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway > Policies and then click Session.
  2. In the details pane, click the Profiles tab and then click Add.
  3. In Name, type a name for the profile.
  4. On the Client Experience tab, do the following:
    1. Next to Home Page, click Override Global and then clear Display Home Page. This disables the Access Interface.
    2. Next to Clientless Access, click Override Global and then select OFF.
    3. Next to Plug-in Type, click Override Global and then select Windows/Mac OS X.
    4. Click Advanced Settings and next to Client Choices, click Override Global, click Client Choices.
  5. On the Security tab, next to Default Authorization Action, click Override Global and then select ALLOW.
  6. On the Security tab, click Advanced Settings.
  7. Under Authorization Groups, click Override Global, click Add and then select the group.
  8. On the Published Applications tab, do the following:
    1. Next to ICA Proxy, click Override Global and then select OFF.
    2. Next to Web Interface Address, click Override Global and then type the Web address of StoreFront, such as http://ipAddress/Citrix/.
    3. Next to Web Interface Portal Mode, click Override Global and then select COMPACT.
    4. Next to Single Sign-On Domain, click Override Global and then type the name of the domain.
  9. Click Create and then click Close.

If you want to use the Citrix Gateway Plug-in for Java as a client choice, on the Client Experience tab, in Plug-in Type, select Java. If you select this choice, you must configure an intranet application and set the interception mode to Proxy.

After creating the session profile, create a session policy. Within the policy, select the profile, and set the expression to True value.

To use StoreFront as a client choice, you must also configure the Secure Ticket Authority (STA) on the Citrix Gateway. The STA is bound to the virtual server.

Note: If the server running the StoreFront is not available, the Citrix XenApp choice does not appear on the choices page.

To configure the STA server globally

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Global Settings.
  2. In the details pane, under Servers, click Bind/Unbind STA Servers to be used by the Secure Ticket Authority.
  3. In the Bind/Unbind STA Servers dialog box, click Add.
  4. In the Configure STA Server dialog box, in URL, type the web address of the STA server and then click Create.
  5. Repeat Steps 3 and 4 to add more STA servers and then click OK.

To bind the STA to a virtual server

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Virtual Servers.
  2. In the details pane, click a virtual server and then click Open.
  3. On the Published Applications tab, under Secure Ticket Authority, under Active, select the STA servers and then click OK,

You can also add STA servers on the Published Applications tab.