Challenges with NetScaler^® integration

There are some common challenges that you might face while configuring Citrix NetScaler Gateway to enable remote access to your XenDesktop environment.

NATing and firewall configuration challenges

While configuring the NetScaler Gateway in one-arm mode, we will assign a private IP to the NetScaler Gateway vServer. For requests that come from Internet to this private IP, you need to configure the route and open an SSL port to allow communication.

We should not forget two important tasks here:

• We need to make sure that network admin performs NAT for the public IP to the vServer private IP over ports 443 and 80 (to allow HTTP to HTTPS redirection)
• The firewall should be configured to receive 443/80 TCP traffic on the NS Gateway vServer private IP

If you have configured your network and firewall configuration as suggested here, you should all be set up to reach the NS Gateway VPN logon page from Internet. Any misconfiguration in the preceding components...