Deploying a Citrix NetScaler Secure Web Gateway Instance on an SDX Appliance

The NetScaler Secure Web Gateway (SWG) solution offers tools that enterprises can use to protect against internet threats.

From release 12.0 56.20, you can deploy a NetScaler SDX SWG instance on a NetScaler SDX appliance. All NetScaler SDX models support SDX SWG instances. For more information, see NetScaler SDX Hardware-Software Compatibility Matrix.

Deploying a NetScaler SDX SWG instance on a NetScaler SDX appliance includes the following tasks:

• Installing the hardware: ensure the SDX hardware is properly installed. For more information, see Installing the Hardware. 
• Setting up and configuring the NetScaler SDX Management Service. For more information, see Getting Started with the Management Service User Interface and Configuring the Management Service.
• Provisioning the NetScaler SDX SWG instance on the NetScaler SDX appliance. For more information, see Provisioning NetScaler Instances.
  
• Configuring the NetScaler SDX SWG instance. For more information, see the NetScaler Secure Web Gateway documentations.

• Install an exclusive instance pack for SDX SWG. This instance pack is different from SDX platform license or SDX instance pack.

Keeping the following points in mind while provisioning a NetScaler SDX instance on an SDX appliance:

• The platform license determines the throughput of the SDX SWG instance.
• You can provision the SWG instance only on one or more dedicated CPU cores.
• Use regular NetScaler XVA and upgrade images for provisioning and upgrading an SDX SWG instance. Make sure the image supports the SWG feature.
• You can provision up to two SWG instances with one SDX 2-Instance Add-On Pack for Secure Web Gateway license. 

• You cannot convert a NetScaler VPX ADC instance to a NetScaler SWG instance, and vice versa. 
• You cannot set up a NetScaler cluster of NetScaler SDX SWG instances.
• Attaching a FIPS partition to an SDX SWG instance is not supported.
• Pooled licensing is not supported.