So if you would like to know how to install and configure the Citrix Access Gateway both as a simple ICA Proxy as well as then the full VPN using SmartAccess then this is the book for you. Setting up licensing, installing the CAG, basic login points, end point analysis, smart access to full and limited resources, we have the lot. Not only this but we add HA with appliance fail-over! Available now from PACKT Publishing
- Chapter 1: Getting Started with the Citrix Access Gateway Product Family This chapter describes the purpose of the Citrix Access Gateway and the models that are available and their associated features. The chapter will serve as a good introduction to the product range and help in choosing the correct model to meet a required business need.
- Chapter 2: Licensing Citrix Access Gateway This chapter introduces Citrix licensing and what options are available. It is important to step though the MyCitrix Website where Licenses are obtained from and the assignment of licenses. Licenses can be delivered from the access gateway or from a specific license server.
- Chapter 3: Configure the initial Citrix Access Gateway setup The first step in using the Gateway is to import it into our virtualization hosts and configure networking, passwords and add SSL certificates.
- Chapter 4: Configure a basic logon point to provide secure access XenApp or XenDesktop servers With the platform license you can use unlimited connections to XenApp / XenDesktop servers and is widely used in this manner as an ICA-Proxy. We will look at how to create this proof of concept system by creating a basic logon point and use authentication at the Web Interface. This is the simplest form of the Access Gateway and provides a quick and easy start into using this system.
- Chapter 5: Creating authentication profiles Allowing authentication to occur at the Citrix Web Interface is a simple solution but limits how the Access Gateway can be used and to basic logon points. From a security perspective passing authentication to the Web Interface is just adding another component to could become hijacked for malicious purposes. Authentication should be handled at the point of entry and nowhere else; this is required for smart access logon points.
- Chapter 6: Beyond the basics This chapter introduces “smart access” login points and what becomes available with the universal licenses. Not only can we connect to XenApp and XenDesktop but we now have full VPN access to internal resources such as internal email, intranets and file shares.
- Chapter 7:Address Pools Address pools allow your smart access clients to be issued with an IP Address to access internal resources; these may be required for some services that do not allow multiple connections from a single device
- Chapter 8: Device profiles and End Point Analysis Using device profiles with smart access we are available to identify different classifications of client machines this can control which resources they can access and which policies will apply if they access XenApp or XenDesktop. Typically we may need to identify corporately managed computes from home or personal computers. We can build up expressions from scans we add to match the profile of the machine
- Chapter 9: Defining network resources The universal license and smart access allows you not only to access Citrix XenApp and Citrix XenDesktop but to access internal resources such as file shares and email using the Citrix Access Gateway. In this chapter we look at adding in network resources that we wish are users to have access to and those that they should not access.
- Chapter 10: SmartAccess logon points Nearing the end of the configuration we add smart logon points to the management console. These give access to same resources as a basic logon point but add in the access to network resources and allowing for end point analysis with the device profiles
- Chapter 11: Linking it all with SmartGroups SmartGroups enable resources to be linked to logon points, these are added through the management console; these can be described as the “glue” of the SmartAccess solutions
- Chapter 12: Connecting to SmartAccess logon points We are now able to access the logon point. We can do this through the browser or direct with the plugin. If the plugin is not yet installed this can be installed from the Citrix Access Gateway directly
- Chapter 13: Monitoring the Access Gateway and Enabling Appliance Failover In this chapter we will learn how to monitor and maintain the Citrix Access Gateway. Having setup the gateway it important to be able to keep in running effectively. This will involve monitors connections, logs, backing up the configuration with snapshots and upgrading the firmware. Once we have this in the bag we need to look into providing high availability using Appliance Failover
- Chapter 14: Manage the access gateway from the command line In this chapter the command line in introduced and we investigate some of the options available. Although most management is maintain via the console some elements can be managed from the command line and we look and when and why we use this