This article will explain how to configure NetScaler Gateway on NetScaler VPX hosted on Microsoft Azure.

---

Instructions

To configure NetScaler Gateway on NetScaler products,below is the procedure to follow:

1) On Microsoft Azure, we will configure a Network Interface for NetScaler Gateway with a public and a private IP.
2) Public IP assigned to above created interface will be resolvable to NetScaler gateway URL which we will configure later. Create a DNS A record on your DNS sever which points to public IP of NetScaler Gateway to its URL.

3) Gateway Configuration will be completed in following steps:

• If VPX is hosted on Azure then NetScaler does not have SNIP.
• Configure Virtual IP on NetScaler. Navigate to System -> Network -> IPs and add a IP for NetScaler Gateway VPN Server and select the IP type as Virtual IP.
• After configuring Virtual IP, configure NetScaler Gateway VPN server. Navigate to NetScaler Gateway > NetScaler Gateway Virtual Servers.
• Provide Name and IP address for virtual server and check ICA only check box and enable authentication check box as well.
• Bind server certificate to server and add STA server and click on Done.

Note: In this scenario, we will not configure any authentication policy on NetScaler Gateway. No session policies will be configured unlike general NetScaler Gateway configuration. When we use cloud hosted StoreFront services, authentication happens at StoreFront not on NetScaler Gateway. 

4) Login to your Citrix Cloud account and click on XenApp and XenDesktop services. You will re-directed to another GUI with gateway configuration which will similar to


5) In above screenshot we are configuring our own NetScaler Gateway so we will use 'user your own NetScaler gateway in the resource location'. Here give URL for your NetScaler Gateway which will be resolvable to your NetScaler gateway URL.

For application/desktop launch, you have to access StoreFront URL not NetScaler Gateway. NetScaler Gateway is not doing any authentication here as it is acting as a proxy. Access the StoreFront URL on browser as:


Note: If you will check the downloaded ICA file, you will see SSL proxy host as NetScaler Gateway URL.