Citrix Gateway

Configuring Outbound ICA Proxy

To configure an Outbound ICA Proxy by using CLI, follow these steps:

  1. Add a Cache Redirection Vserver:

    add cr vserver <name> <serviceType> <IPAddress> <port> -cacheType <cacheType>

    Service must be HDX

    CacheType must be FORWARD

    Example:

    add cr vserver CR_LAN_Proxy HDX 10.217.208.197 8080 -cacheType FORWARD

  2. Add an ICA SmartControl Profile:

    add ica accessprofile <name> -ConnectClientLPTPorts ( DEFAULT DISABLED ) ClientAudioRedirection ( DEFAULT DISABLED ) -LocalRemoteDataSharing ( DEFAULT DISABLED ) -ClientClipboardRedirection ( DEFAULT DISABLED ) -ClientCOMPortRedirection ( DEFAULT DISABLED ) -ClientDriveRedirection ( DEFAULT DISABLED ) -ClientPrinterRedirection ( DEFAULT DISABLED ) -Multistream ( DEFAULT DISABLED ) -ClientUSBDriveRedirection ( DEFAULT DISABLED)

    Example:

    add ica accessprofile disableCDM -ConnectClientLPTPorts DEFAULT -ClientAudioRedirection DEFAULT –LocalRemoteDataSharing DEFAULT -ClientClipboardRedirection DEFAULT -ClientCOMPortRedirection DEFAULT –ClientPrinterRedirection DEFAULT -Multistream DEFAULT -ClientUSBDriveRedirection DEFAULT
    
  3. Add an ICA Action:

    add ica action <name> -accessProfileName <string>

    Example:

    add ica action disableCDM\_action -accessProfileName disableCDM
    
  4. Add an ICA Policy:

    add ica policy <name> -rule <expression> -action <string> -comment <string> -logAction <string>

  5. Bind the ICA Policy to the Virtual Server or Global:

    a. Bind to Virtual Server

    **bind cr vserver** \<name\> **-policyName** \<string\> **-priority** \<positive\_integer\>
    

    Example:

    bind cr vserver CR\_LAN\_Proxy –policyname disableCDM\_pol –priority 10
    

    b. Bind to Global

    **bind ica global -policyName** \<string\> -**priority** \<positive\_integer\>
    

    Example:

    bind ica global –policyName disableCDM\_pol –priority 10
    

Note

Set the Secure ICA Ports:This value is the port number on the Citrix Gateway to which the LAN Proxy makes an outbound connection. By default it is set to 443. Use the following command to change the port.

set ns param -secureicaPorts<port>

Example:

set ns param -secureicaPorts 8443

Configuring Outbound ICA Proxy