VPN configuration on a NetScaler Gateway appliance

Last published : Sep 03, 2026
Important:
The screen captures in this section are maintained in a grayscale scheme for the following reasons:
  • Help visually impaired readers particularly those with color-blindness or color deficiency.
  • Use of a grayscale image represents the image in a generic form that shows no impact of color coding customization that might have been done in the user's browser or the operating system.
Users can use the following methods to connect to your organization's network resources through NetScaler Gateway:
  • Citrix Workspace app that contains all Citrix plug-ins installed on the user device.
  • Citrix Workspace app for web that allows user connections to applications, desktops, and ShareFile by using a web browser.
  • Secure Hub to allow users to access Secure Mail, WorxWeb, and mobile apps from their iOS and Android devices.
  • Citrix Secure Access™ client for Windows, macOS X, or Linux.
  • NetScaler Gateway app for iOS and Android.
  • Clientless access that provides users with the access they need without installing user software.
  • Interoperability with Citrix SD-WAN™ plug-in.
If users install the Citrix Secure Access client and then install Citrix Workspace app from Citrix Virtual Apps 6.5 for Windows Server 2008 (including Feature Pack and Feature Pack 2), Citrix Virtual Desktops 7.0 or newer, Citrix Workspace app automatically adds the Citrix Secure Access client. Users can connect with the Citrix Secure Access client from a web browser or from Citrix Workspace app.
SmartAccess determines automatically the methods of access that are allowed for a user device based on the results of an endpoint analysis scan. For more information about SmartAccess, see Configuring SmartAccess.
NetScaler Gateway supports Citrix Endpoint Management mobile productivity apps for iOS and Android mobile devices. NetScaler Gateway contains Secure Browse that allows connections to NetScaler Gateway from iOS mobile devices that establish the micro VPN tunnel. Android devices that connect with the Secure Hub also establish a micro VPN tunnel automatically that provides secure web and mobile application-level access to resources in your internal network. If users connect from an Android device with mobile productivity apps, you must configure DNS settings on NetScaler Gateway. For details, see Support DNS Queries by Using DNS Suffixes for Android Devices.
Related information
How users connect with the Citrix Secure Access™ clientFull VPN setup on NetScaler GatewaySelect the user access methodDeploy Citrix Secure Access™ client for user accessSelect the Citrix Secure Access™ client for usersIntegrate the Citrix Secure Access client with Citrix Workspace appNetScaler Gateway Windows VPN client registry keysEnforce the HttpOnly flag on authentication cookiesCustomize the user portal for VPN usersConfigure clientless VPN access with NetScaler GatewayCitrix® SSO VPN client for mobile devicesConfigure the Client Choices pageConfigure Access Scenario FallbackConfigure connections for the Citrix Secure Access™ clientConfigure SmartAccessTraffic policiesSession policiesAdvanced policy support for enterprise bookmarksEndpoint policiesAdvanced Endpoint Analysis scansManage user sessionsWindows autologonAlways OnAlways On VPN before Windows Logon (formally Always On service)