How to Configure HDX Enlightened Data Transport Protocol

Adaptive transport for XenApp and XenDesktop optimizes data transport by leveraging a new Citrix protocol called Enlightened Data Transport EDT in preference to TCP whenever possible. Compared to TCP and UDP, EDT delivers a superior user experience on challenging long-haul WAN and Internet...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Domain Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for domain check...

How to Configure NetScaler Gateway EPA Scans to Detect Receiver on Clients

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway EPA scans to detect clients without Receiv...

CVE-2017-5933

CVE-2017-5933 affects Citrix NetScaler ADC and NetScaler Gateway. Affected: NetScaler ADC/Gateway 10.5 before Build 65.11; 11.0 before Build 69.12/69.123; 11.1 before Build 51.21. Issue: random GCM nonces enabling marginally easier nonce reuse attacks that could let remote attackers obtain the GC...

StoreFront Management Console Reverts NetScaler Gateway Authentication Type to "Domain"

When editing Authentication Settings in MMC under NetScaler Gateway applicance, the Auth type is reverted to Domain. For instance, if we select Smartcard then apply the changes and reopen the console, the authtype would appear as "Domain". However, the configuration file will make the changes. On...

How to Configure NetScaler Gateway and Microsoft Intune (MDM) for Single Factor Authentication

Background The integration of Microsoft Intune with NetScaler Gateway provides best-of-class application access and data protection solution offered by Citrix NetScaler Gateway and Intune. You get the most complete suite of secure productivity apps, including: email calendar contacts note-taking...

Unable to launch applications externally through Netscaler Gateway, getting internal server IP address in ICA file

Unable to launch application externally through Netscaler Gateway and when checking further we see that we are getting internal server IP address in ICA file rather than "Gateway FQDN:443"...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

The following error occurred during an authentication attempt for user:domain.com\abc with realm: <unknown>

Getting error "Cannot complete your request" when accessing the website through Netscaler Gateway. Bypassing the Netscaler Gateway website works fine. Event ID:2 "The following error occurred during an authentication attempt for user:domain.com\abc with realm: "...

"Attach a smart card reader and insert your smart card to log on" When no Smart Card Authentication Present

When using Citrix Receiver to connect to the NetScaler Gateway, StoreFront users get "Attach a smart card reader and insert your smart card to log on" however smart authentication is not configured...

NetScaler Gateway EPA Scan Fails When Checking for "Windows Update" on Client Machine

When NetScaler Gateway EPA scan is configured to validate if the Windows update on client machine has been performed within X days, the scan fails on client machine...

NetScaler Gateway: Could not add account. Check your account settings and try again.

When accessing the Store externally we would get the error Could not add account. Check your account settings and try again. If we access the Storefront Base URL, we are able to enumerate the applications and desktops just fine...

How to Limit One Session Per User on NetScaler Gateway?

This article describes how to limit one session per user on NetScaler Gateway. Use case An administrator wants to ensure that at any point in time a given user can only have one active session with NetScaler Gateway. Administrators can use a session policy or the global NetScaler Gateway settings...

StoreFront Site Connecting Through NetScaler Gateway Gets Stuck at "/cgi/setclient?wica" Page After Authentication

When accessing StoreFront site through NetScaler Gateway, StoreFront site gets stuck at "/cgi/setclient?wica" page after authentication...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Antivirus and Firewall Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for antivirus and firewall check...

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

Compatibility of NetScaler with TLS 1.1 - 1.2 and Client Authentication with Citrix Receiver

NetScaler GatewayNG 11.0 version enabled for Client CertificateCC authentication with TLS 1.1,TLS1.2 enabled. 2. Citrix Receiver 4.3 or 4.4 installed on Client Machine. 3. During logon to Gateway, browser pop up to select client Certificate and then successfully login to enumerate the...

Does domain passthrough authentication work with NetScaler Gateway?

Question: Does domain pass through authentication work with NetScaler Gateway, like forwarding the windows machine credentials so that user do not have to login and does single sign onlatest update for 12.0.58.x? Answer: No, Domain pass through does not work with Netscaler Gateway. Authentication...

Storefront 3.7 console displays Store as Internal Only

Question: After upgrade to Storefront 3.7 the store is displayed as Internal Only. In the details it shows Remote Access as Enabled and it also works with Netscaler Gateway. Answer: This is a known issue in Storefront 3.7 and is also mentioned in the edocs...

Receiver for Android Connects to Default StoreFront WebUI

When adding account using Receiver for Android 3.9.1 and accessing StoreFront using NetScaler Gateway, setting defaults to StoreFront Web UI instead of showing list of apps in the Receiver app. It opens a webpage to sign into Receiver for Web. When changing type to XenApp Services or NetScaler...