Configure settings on the virtual servers on the NetScaler Gateway Proxy

Last published : Sep 03, 2026
To allow connections to pass between the NetScaler Gateway appliances, you enable double-hop in the virtual server on the NetScaler Gateway proxy.
When users connect, the NetScaler Gateway appliance authenticates users and then proxies the connection to the proxy appliance. On the NetScaler Gateway in the first DMZ, configure the virtual server to communicate with NetScaler Gateway in the second DMZ. Do not configure authentication or policies on the NetScaler Gateway proxy. Citrix recommends disabling authentication on the virtual server.
Related information
Install and configuring NetScaler Gateway in a double-hop DMZ

To enable double hop on the virtual server on the NetScaler Gateway proxy by using the GUI

  1. Navigate to Configuration > NetScaler Gateway > Virtual Servers.
  2. Select a virtual server and click Edit.
  3. In the Basic Settings section, click the edit icon and then click More.
  4. Select Double Hop.
    Basic settings
  5. Click OK.

To disable authentication on the virtual server on the NetScaler Gateway proxy by using the GUI

  1. Navigate to Configuration > NetScaler Gateway > Virtual Servers.
  2. Select a virtual server and click Edit.
  3. In the Basic Settings section, click the edit icon and then click More.
    Basic settings
  4. Clear the Enable Authentication check box.
    Basic settings
  5. Click OK.