Citrix Gateway

Configuring Intranet Applications for the Citrix Gateway plug-in

You create intranet applications for user access to resources by defining the following:

  • One IP address
  • A range of IP addresses

When you define an intranet application on Citrix Gateway, the Citrix Gateway plug-in for Windows intercepts user traffic that is destined to the resource and sends the traffic through Citrix Gateway.

When configuring intranet applications, consider the following:

  • Intranet applications do not need to be defined if the following conditions are met:
    • Interception mode is set to transparent
    • Users are connecting to Citrix Gateway with the Citrix Gateway plug-in for Windows
    • Split tunneling is disabled
  • If users connect to Citrix Gateway by using the Citrix Gateway plug-in for Java, you must define intranet applications. The Citrix Gateway plug-in for Java intercepts traffic only to network resources defined by intranet applications. If users connect with this plug-in, set the interception mode to proxy.

When configuring an intranet application, you must select an interception mode that corresponds to the type of plug-in software used to make connections.

Note: You cannot configure an intranet application for both proxy and transparent interception. To configure a network resource to be used by both the Citrix Gateway plug-in for Windows and Citrix Gateway plug-in for Java, configure two intranet application policies and bind the policies to the user, group, virtual server, or Citrix Gateway global.

To create an intranet application for one IP address

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway Resources and then click Intranet Applications.
  2. In the details pane, click Add.
  3. In Name, type a name for the profile.
  4. In the Create Intranet Application dialog box, select Transparent.
  5. In Destination Type, select IP Address and Netmask.
  6. In Protocol, select the protocol that applies to the network resource.
  7. In IP Address, type the IP address.
  8. In Netmask, type subnet mask, click Create and then click Close.

To configure an IP address range

If you have multiple servers in your network, such as web, email, and file shares, you can configure a network resource that includes the IP range for network resources. This setting allows users access to the network resources contained in the IP address range.

  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand Citrix Gateway Resources and then click Intranet Applications.
  2. In the details pane, click Add.
  3. In Name, type a name for the profile.
  4. In Protocol, select the protocol that applies to the network resource.
  5. In the Create Intranet Application dialog box, select Transparent.
  6. In Destination Type, select IP Address Range.
  7. In IP Start, type the starting IP address and in IP End, type the ending IP address, click Create and then click Close.
Configuring Intranet Applications for the Citrix Gateway plug-in