Citrix ADC is deployed in front of web, application and database servers. It combines high-speed L4-7 load balancing and content switching with application acceleration, data compression, static and dynamic content caching, SSL acceleration, network optimization, application performance monitoring application visibility and robust application security via an application firewall.
Today, I am going to show you how to configure Citrix ADC with Virtual Apps.
1.Type the IP address of Citrix ADC in a Web browser to access the virtual appliance.
2.On the Configuration, expand the Citrix Gateway menu.
3.Select the Virtual Servers menu, click Add.
4.On the VPN Virtual Server settings, configure Basic settings values as below, click OK.
- Name: type XEN_VIP.
- IP Address Type: Select IP Address.
- IPAddress: type the Internal VIP address, in my case is 172.21.128.196.
- Port: Type 443
- Select ICA Only.
- Select Enable Authentication.
- Select Down State Flush.
- Select State.
5.On the VPN Virtual Server Certificate, click Server Certificate.
6.On the Server Certificate Binding page, click Add.
7.On the Server Certificates page, select you’re the existing certificate, click Select.
Note: you can check below link for installation certificate.
8.On the Server Certificate Binding page, click Bind.
9.On the SSL Virtual Server Server Certificate Binding page, click Close.
10.On the VPN Virtual Server Certificate page, click Continue.
11.On the VPN Virtual Server Basic Authentication page, click +.
12.On the Policies page, select LDAP.
13.On the Policies page, click Continue.
14.On the Policy Binding page, click Add.
15.On the Create Authentication LDAP Policy page, configure setting values as below, click Create
- Name: Type the Authentication LDAP policy name, in my case is GDMCGY_LDAP_Policy.
- Server: Select the Authentication LDP server.
- Expression: type ns-true.
16.On the Choose Type page, click Bind.
17.On the VPN Virtual Server Basic Authentication page, click Continue.
18.On the VPN Virtual Server Advanced Authentication page, click Continue.
19.On the SSL Ciphers, ECC Curve and Profiles page, keep the default settings.
20.On the Other Settings, Policies page, keep the default settings.
21.On the Published Applications, click STA Server.
22.On the STA Server Binding page, configure setting values as below, click Bind.
- Secure Ticket Authority Server: type virtual app server url, in my case is https://cgy-xen01.gdmcgy.gooddealmart.ca
- Secure Ticket Authority Server Address Type: Select IPV4.
23.VPN Virtual Server page, click Done.
24.Loin to virtual app server, open Citrix Studio.
25.On the Citrix StoreFront, select Stores, select Store Service, click Manage Citrix Gateways of Stores Actions.
26.On the Manage Citrix Gateways page, click Add.
27.On the General page, configure setting values as below, click Next.
- Display Name: Type XEN_VIP.
- Citrix Gateway URL: Type Https://citrix.gooddealmart.ca
- Usage or role: select Authentication and HDX routing.
28.On the Secure Ticket Authority (STA) page, click Add for Secure Ticket Authority URLs.
29.On the Add Secure Ticket Authority URL, type the virtual server FQDN, in my case is cgy-xen01.gdmcgy.gooddealmart.ca, click OK.
30.On the Secure Ticket Authority (STA) page, click Next.
31.On the Authentication Settings page, configure setting values as below, click Create.
- Version: Select 10.0 (Build 69.4) or later.
- VServer IP Address: enter the IP address of VPN Virtual Server. In my case is 172.21.128.196.
- Logon type: Select Domain.
32.On the Summary page, verify add gateway succeeded, click Finish.
32.On the Manage Citrix Gateways page, click Close.
33.On the Store Service Actions page, click Configure Remote Access Settings.
34.On the Configure Remote Access Settings – Store Service page, configure settings values as below, click OK.
- Select Enable Remote Access.
- Select Allow users to access only resource delivered through StoreFront (No VPN tunnel).
- Citrix Gateway appliances: Select XEN_VIP.
- Default appliance: Select XEN_VIP.
35.Verify the Store Service access for Internal and external networks.
Hope you enjoy this post.
Cary Sun
Twitter: @SifuSun
Web Site: carysun.com
Blog Site: checkyourlogs.net
Blog Site: gooddealmart.com
Author: Cary Sun
Cary Sun has a wealth of knowledge and expertise in data center and deployment solutions. As a Principal Consultant, he likely works closely with clients to help them design, implement, and manage their data center infrastructure and deployment strategies.
With his background in data center solutions, Cary Sun may have experience in server and storage virtualization, network design and optimization, backup and disaster recovery planning, and security and compliance management. He holds CISCO CERTIFIED INTERNETWORK EXPERT (CCIE No.4531) from 1999. Cary is also a Microsoft Most Valuable Professional (MVP), Microsoft Azure MVP, Veeam Vanguard and Cisco Champion. He is a published author with several titles, including blogs on Checkyourlogs.net, and the author of many books.
Cary is a very active blogger at checkyourlogs.net and is permanently available online for questions from the community. His passion for technology is contagious, improving everyone around him at what they do.
Blog site: https://www.checkyourlogs.net
Web site: https://carysun.com
Blog site: https://gooddealmart.com
Twitter: @SifuSun
in: https://www.linkedin.com/in/sifusun/
Amazon Author: https://Amazon.com/author/carysun
