This article contains information about deploying the Citrix Gateway Plug-in and Endpoint Analysis (EPA) Microsoft Installer (MSI) packages for Windows by using an Active Directory Group Policy.

If users do not have administrative privileges to install the Citrix Gateway Plug-in and EPA Plug-in on the user device, you can deploy the plug-in for users from Active Directory.

When you use this method to deploy the Citrix Gateway Plug-in, you can extract the installation program and then use a group policy to deploy the program.

Prerequisites

• WinSCP or alternate secure copy or secure FTP application must be installed on the computer.

• Microsoft Active Directory Users and Computers, snap-in.

Instructions

To deploy the Citrix Gateway Windows plug-in and EPA MSI package by using an Active Directory Group policy, complete the following procedures:

• Acquiring the Citrix Gateway Plug-in for Windows Installation Package

• Acquiring the Citrix Gateway Endpoint Analysis Plug-in

• Installing the Citrix Gateway Plug-in for Windows MSI Package on a Computer

• Installing the Citrix Gateway Endpoint Analysis MSI Package on a Computer

• Configuring Active Directory Group Policy on Windows 2008 Server Domain Controller to Deploy the Packages

Acquiring the Citrix Gateway Plug-in for Windows Installation Package

Option 1: Download the required release of the Citrix Gateway Plug-in for Windows from Citrix  Downloads. Use a valid My Account or Citrix.com credential to download the software.
Note: Download the same release of the client software as that of Citrix Gateway appliance. 

Option 2: Use the secure copy or secure FTP application to download the client from the Citrix Gateway appliance. The client is available in the /var/netscaler/gui/vpns/scripts/vista directory of the appliance, as shown in the following screenshot:

Installing the Citrix Gateway Plug-in for Windows MSI Package on a Computer

To install the Citrix Gateway Plug-in for Windows MSI package on a computer, complete the following procedure:

1. Run the appropriate installation file, such as nsvpnc_setup.exe or nsvpnc_setup64.exe.
   Note: Do not click Next in the Installer dialog box.

2. Run the following command to open the command prompt:
   cmd

3. Run the following command to change to the temporary directory:
   cd %temp%

4. Run the following command to search for the Citrix Gateway Plug-in for Windows installation file:
   dir agee.msi /s

5. Copy the file agee.msi to an end-user accessible UNC path on a domain server, such as \\server.example.com\share\agee.msi.

6. Cancel the installation.

Installing the Citrix Gateway Endpoint Analysis MSI Package on a Computer

To install the Citrix Gateway Endpoint Analysis MSI package on a computer, complete the following procedure:

1. Run the appropriate installation file, such as nsepa_setup.exe or nsepa_setup64.exe.
   Note: Do not click Next in the Installer dialog box.

2. Run the following command to open the command prompt:
   cmd

3. Run the following command to change to the temporary directory:
   cd %temp%

4. Run the following command to search for the Citrix Gateway EPA for Windows installation file:
   dir nsepa.msi /s

5. Copy nsepa.msi file to an end-user accessible UNC path on a domain server, such as \\server.example.com\share\nsepa.msi.

6. Cancel the installation.

Configuring Active Directory Group Policy on Windows 2008 Server Domain Controller to Deploy the Packages

Citrix Gateway Plug-in for Windows

To configure Active Directory on Windows 2008 Server Domain controller, complete the following procedure:

1. From the Start menu, select Group Policy Manager. The Group Policy Manager option is available in Programs > Administrative Tools.

2. Either create or edit an existing Group policy. To edit a policy, right-click the policy and select Edit from the shortcut menu.

3. In the Group Policy Management Editor, expand the Computer Configuration node.

4. Expand the Policies node.

5. Expand the Software Settings node.

6. Select the Software Installation node.

   

7. Right-click Software Installation and select New > Package from the shortcut menu.

8. Click Browse and navigate the directory structure to select the agee.msi file.

9. Select Advanced option and click OK.

   

10. In the Citrix Gateway Plug-in Properties dialog box, make the required changes to the settings, as shown in the following screen shot:

    

11. Click OK.

Citrix Gateway Endpoint Analysis

For EPA installation issues logs:-
C:\ProgramData\Citrix\AGEE
nsinst2.txt and nsinst.txt

C:\Users\<user>\AppData\Local\Citrix\AGEE
this is  more specific to EPA scan failures

Citrix Documentation - Deploying the NetScaler Gateway Plug-in from Active Directory
Citrix Documentation - Endpoint Analysis Requirements