XenMobile Device Manager is comprised of the following separate server components:
You can install Device Manager to support a variety of existing network topologies and a large number of users. Some of the installation considerations are related to how the users connect to their Information System (Wi-Fi, Cellular, and Ethernet), existing security rules (DMZ, firewalls), user authentication (Directories), and more. Device Manager should be installed on a standalone physical server or dedicated virtual machine.
In order to be compliant with existing IT infrastructures Device Manager can be deployed in various scenarios:
The following figure shows a typical Device Manager deployment.
Citrix recommends deploying the Device Manager server in the DMZ as a perimeter security server for mobile device management. In a conventional single DMZ architecture, prior to installing the Device Manager Server, make sure that the firewalls authorize the network streams.
You can also install Device Manager server in the secure network, however it will require all network firewall ports described in "Device Manager Server" in Product Requirements from the Internet to be allowed inbound to your secure network where the server is placed to fully operate correctly. See Preparing for Device Manager Installation for information on required ports for a Device Manager deployment.
For Device Manager Server connectivity, make sure that it has:
The computers on which you install Device Manager Remote Support connects to the Device Manager server IP address on port 80 (by default) to retrieve the list of connected devices and on a port selected (port 82 for example) during installation for remote control of devices through the Device Manager server.