Wednesday, April 27, 2011

Configuring Citrix Access Gateway on netscaler for WYSE xenith and iDevices

  The WYSE xenith client is a great zero client for use with XenDesktop.  It supports quite a few HDX features and performance is on par with Windows Embedded thin clients.  The user experience with the Xenith client is much more seamless in my opinion than any other thin client I have tested.  In an organization where Client access through a Citrix Access Gateway running on a Netscaler is required the xenith works very well.  Below are the steps for configuring this type of access.

Web Interface

Create a XenApp Services Site




























After the site is created
Configure the Farm

















































































Edit the secure access settings of the site created.



























Click Edit and change to Gateway Direct



























Enter the FQDN you will use to access the site


























Enter the ddc path for the STA

Netscaler
On the netscaler launch the access gateway wizard



Enter the information required for your environment




Choose a server certificate
This choice depends on your environment but if you are using a 3rd party CA import the certificate in and then select it from the list here

Enter an account and password here and you can delete it later


Select these settings if you want to redirect all traffic from port 80 to 443


After the site is created you will need to create a session profile



For Home Page enter the path to the XenApp Services site you created i.e. http://xenith.domain.local/citrix/xenith
 On the published applications tab ensure that ICA Proxy is checked and set to On if you will be accessing your XenDesktop Environment from the internet and the Web Interface Portal mode is checked and set to normal.
Create a session policy under Access Gateway>Policies>Session
Repeat for each device you want to have a policy for.
Select the Profile that you created for the xenith clients when creating the session policiy
The Last step is to add the session policy to the Access Gateway virtual server that you created.
WYSE
Ensure that the Root CA certificate of the Access Gateway certificate that you are using is in the Certificate Store on your WYSE Xenith Client.  See the Xenith Admin guide for instructions on how to do this.
Configure the Web Interface setting on the Xenith Client to point to the Access Gateway site created.  In this case it is https://xenith.internet.com

4 comments:

  1. You wouldn't happen to have the xen.ini file you're using would you? I ask because if a fileserver is configured, it obviously can't hit it so it takes forever to time out. Take out the fileserver and it still looks for it.

    ReplyDelete
  2. trying to get thiw working, can login and see desktops but not launch any (get a connection timeout error) have tried various different wyse firmware and netscaler firmware, be interested to know if you are still using this on later versions

    ReplyDelete
    Replies
    1. i am running into this exact thing, were you able to resolve?

      Delete
  3. This post will be very useful to us.I like your blog and helpful to me.nice thoughts for your great work.

    Thin Clients & Zero Client

    ReplyDelete