StoreFront servers are deployed and configured to manage access to published resources and data. For remote access, adding NetScaler Gateway in front of StoreFront is recommended.
For detailed configuration steps on how to integrate XenApp and XenDesktop with NetScaler Gateway, see the StoreFront documentation.
The following diagram illustrates an example of a Citrix simplified Citrix deployment that includes NetScaler Gateway. NetScaler Gateway communicates with StoreFront to protect apps and data delivered by XenApp and XenDesktop. The user devices run Citrix Receiver to create a secure connection and access their apps, desktops, and files.
Users log on and authenticate using NetScaler Gateway. NetScaler Gateway is deployed and secured in the DMZ. Two-factor authentication is configured. Based on the user credentials, users are provided with the relevant resources and applications. Applications and data are on appropriate servers (not shown on the diagram). Separate servers used for security sensitive applications and data.