Configure NetScaler Gateway to handle the STA and ICA traffic
When you deploy NetScaler Gateway in a double-hop DMZ, you must configure NetScaler Gateway in the first DMZ to handle communications with the Secure Ticket Authority (STA) and ICA traffic appropriately. The server running the STA can be bound either globally or to a virtual server.
After you configure the STA, you can bind the STA either globally or to a virtual server.
To configure and bind the STA globally:
-
In the GUI, on the Configuration tab, expand NetScaler Gateway and then click Global Settings.
-
In the details pane, under Servers, click Bind/Unbind STA Servers to be used by the Secure Ticket Authority.
-
In the Bind/Unbind STA Servers dialog box, click Add.
-
In the Configure STA Server dialog box, in URL, type the path to the server running the STA, such as
<http://mycompany.com>or<http://ipAddress>and then click Create.
To configure and bind the STA to a virtual server:
-
In the GUI, on the Configuration tab, expand NetScaler Gateway and then click Virtual Servers.
-
In the details pane, select a virtual server and then click Open.
-
On the Published Applications tab, under Secure Ticket Authority, click Add.
-
In the Configure STA Server dialog box, in URL, type the path to the server running the STA, such as
<http://mycompany.com>or<http://ipAddress>and then click Create.
Note:
If the VPN virtual servers share the same next hop virtual server and STA servers, the connection is reset when the common STA server is unbound from a virtual server that shares the same next hop virtual server.