Citrix Gateway

Configuring outbound ICA Proxy

October 5, 2020

Contributed by:

Outbound ICA Proxy configuration involves configuring the Citrix ADC LAN proxy and Citrix Gateway.

Configure Citrix ADC LAN Proxy for ICA outbound proxy

You can perform the following steps to configure outbound ICA Proxy by using the CLI.

Add a VPN virtual server.

 add vpn vserver <name> <serviceType> [<IPAddress> [-range <positive_integer>] [-ipset <string>]] [<port>] [-state ( ENABLED | DISABLED )] [-authentication ( ON | OFF )] [-doubleHop ( ENABLED |DISABLED )]
 <!--NeedCopy-->

Set the VPN parameters.

 set vpn parameter[-backendServerSni ( ENABLED | DISABLED )][-backendCertValidation ( ENABLED | DISABLED )]
 <!--NeedCopy-->

Add an SSL certificate-key pair.

 add ssl certKey ca_cert_verify -cert <certificate name>
 <!--NeedCopy-->

Bind the SSL certificate-key pair globally.

 bind vpn global -cacert ca_cert_verify
 <!--NeedCopy-->

Example:

-  add vpn vserver ssl_lan_proxy SSL 65.219.17.34 443 -authentication OFF - doubleHop ENABLED

-  set vpn parameter backendserverSni ENABLED backendcertValidation ENABLED

-  add ssl certKey dnpg_ca -cert dnpg_ca_cert.cer

-  bind vpn global -cacert dnpg_ca

<!--NeedCopy-->

Configure Citrix Gateway for ICA Proxy

For details on configuring Citrix Gateway for ICA Proxy, see
https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/deploying-netscaler-gateway-in-ica-proxy-mode.pdf

Note: For SSL support on Citrix ADC LAN proxy, no changes are required in the Citrix Gateway configuration.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Configuring outbound ICA Proxy

October 5, 2020

Contributed by:

October 5, 2020

Contributed by:

Configuring outbound ICA Proxy

Configure Citrix ADC LAN Proxy for ICA outbound proxy

Configure Citrix Gateway for ICA Proxy

In this article