Citrix Secure Web Gateway, formerly NetScaler Secure Web Gateway

Question: What is NetScaler Secure Web Gateway?
Answer: NetScaler Secure Web Gateway (SWG) solution offers tools that enterprises can use to protect against internet threats.

Question: How is the NetScaler Secure Web Gateway appliance deployed?


Question: NetScaler SWG is supported on what NetScaler models?
Answer: The NetScaler Secure Web Gateway is supported on the following hardware and VPX models.

Question: What features are included in this release of NetScaler Secure Web Gateway?
Answer: Forward Proxy (SSL Visibility), NetScaler URL Filtering Solution,User Behavior Analytics in MAS.

Question: What are the two capture modes that I can set when creating a Secure Web Gateway virtual server?
Answer: The SWG solution supports Explicit and Transparent forward proxy. In explicit proxy, clients must specify an IP address in their browsers, unless the organization pushes the setting via policies on their devices. The address is the IP address of a proxy virtual server configured on the NetScaler Secure Web Gateway appliance. All client requests, is sent to this IP address. Transparent proxy, as the name implies, is transparent to the client. The clients are not aware that a proxy server is mediating their requests.

Question: Is the NetStar URL Filtering feature available as an add-on license?
Answer: Yes this feature is available only as an add-on license.

Question: Does NetScaler Secure Web Gateway have a configuration wizard?
Answer: Yes. The wizard is located on the Secure Web Gateway node in the configuration utility.




Question: What NetScaler features are used when configuring NetScaler Secure Web Gateway?
Answer: Responder, AAA TM vserver, Content Switching Virtual Server, and SSL.

Question: What authentication methods are supported with NetScaler Secure Web Gateway  when setup in explicit proxy mode?
Answer: LDAP, RADIUS, TACACS and ,NEGOTIATE

Question: What authentication method is support with NetScaler Secure Web Gateway in Transparent mode?
Answer: LDAP only.

Question: Is it necessary to install the CA Certificate on the client PC?
Answer: Yes. The CA Certificate that is used to sign the server certificate must be pre-installed on all client devices, so that the regenerated server certificate is trusted by the client.

Question: Can I use a NetScaler Platform license on NetScaler Secure Web Gateway device?
Answer: No. The NetScaler Secure Web Gateway requires its own Platform license.

Question: Is HA supported for a NetScaler Secure Web Gateway deployment?
Answer: Yes

Question: What file contains log entry for NetScaler Secure Web Gateway?
Answer: The ns.log file records NetScaler Secure Web Gateway information. Note: Logging must be enabled using the set syslogparams -ssli Enabled command.

Question: What nsconmsg commands can I use to troubleshoot NetScaler Secure Gateway related issues?
Answer: nsconmsg -d current -g ssli and nsconmsg -d current -g err

Question: Is NetScaler MAS able to capture data from NetScaler Secure Web Gateway?
Answer: Yes.This will require NetScaler MAS 12.0 MR1



Question : What are the supported browsers for SSL Forward Proxy (Citrix SWG) ?
Answer :  SSL Forward Proxy or Citrix SWG implement majority of the typical HTTP and HTTP(s) standards followed by similar products. This implementation is done with no specific browser in mind and is expected to work with most common browsers. The Forward Proxy or Citrix SWG has been tested with common browsers and recent versions of Google Chrome, IE and Mozilla Firefox.


Click here for an updated version of the FAQ.