How to Configure Access Gateway Enterprise Edition Appliance for StoreFront Integrating with AppController
Article ID: CTX138143
Updated On:
Description
This article describes how to configure Access Gateway Enterprise Edition appliance for StoreFront integrating with AppController.
Background
Citrix XenMobile App Edition allows access to web, Software as a Service (SaaS), and mobile applications. You can configure AppController to work with StoreFront, which delivers a secure, unified App store to users that displays all of their authorized applications including Windows-based, mobile, Web, or SaaS on any device.You deploy XenMobile App Edition for Remote users in the following scenarios:
- To access Web or SaaS applications through Access Gateway Enterprise Edition appliance integrated with AppController
- To access XenApp or XenDesktop application through Access Gateway Enterprise Edition appliance integrated with StoreFront
- To access XenApp, XenDesktop, and Web or SaaS applications through Access Gateway Enterprise Edition appliance by integrating StoreFront with AppController
Instructions
To configure Access Gateway Enterprise Edition appliance for StoreFront integrating with AppController, complete the following procedure:-
Run the following command from the command line interface of the appliance to configure domains for clientless access:
bind policy patset ns_cvpn_default_inet_domains <StoreFront FQDN>
bind policy patset ns_cvpn_default_inet_domains <AppController FQDN> -
Run the following commands to add Client Cookies and allow AppController cookies to be store on the client:
add policy patset sf_cookies
bind policy patset sf_cookies CsrfToken -index 1
bind policy patset sf_cookies ASP.NET_SessionId -index 2
bind policy patset sf_cookies CtxsPluginAssistantState -index 3
bind policy patset sf_cookies CtxsAuthId -index 4 -
Run the following command to add Clientless profile and policy to use NetScaler URL rewrite feature for Web and SaaS applications:
add vpn clientlessAccessProfile sf_prof
set vpn clientlessAccessProfile sf_prof -URLRewritePolicyLabel ns_cvpn_default_inet_url_label -ClientConsumedCookies sf_cookies
add vpn clientlessAccessPolicy sf_pol true sf_prof -
Run the following command to add session profile and policy for Receiver access:
add vpn sessionAction sf_receiver_prof -defaultAuthorizationAction ALLOW -SSO ON -homePage "https://<StoreFront FQDN>/Citrix/StoreWeb " -icaProxy OFF -ntDomain <SSO domain name> -clientlessVpnMode ON -clientlessModeUrlEncoding TRANSPARENT -SecureBrowse ENABLED -storefronturl "https:// <StoreFront FQDN>"
add vpn sessionPolicy sf_receiver_pol "REQ.HTTP.HEADER User-Agent CONTAINS CitrixReceiver && REQ.HTTP.HEADER X-Citrix-Gateway EXISTS" sf_receiver_prof -
Run the following commands to add session profile and policy for Web access:
add vpn sessionAction sf_web_prof -defaultAuthorizationAction ALLOW -SSO ON -homePage "https:// <StoreFront FQDN>//Citrix/StoreWeb" -icaProxy OFF -wihome "https:// <StoreFront FQDN>" -ntDomain <SSO Domain Name> -clientlessVpnMode ON -clientlessModeUrlEncoding TRANSPARENT
add vpn sessionPolicy sf_web_pol ns_true sf_web_prof -
Run the following command to bind the clientless policy with Access Gateway virtual server:
bind vpn vserver <Access Gateway Vserver> -policy sf_pol -priority 100 -gotoPriorityExpression END -type REQUEST -
Run the following commands to bind the session policy with Access Gateway virtual server:
bind vpn vserver <Access Gateway Vserver> -policy sf_receiver_pol -priority 40
bind vpn vserver <Access Gateway Vserver> -policy sf_web_pol -priority 50 -
Run the following command to configure the Access Gateway virtual server mode:
set vpn vserver <Access Gateway Vserver> -icaOnly off
Issue/Introduction
Additional Information
