Configure domain access for users

Last published : Sep 03, 2026
If users connect by using clientless access, you can restrict the network resources, domains, and websites users are permitted to access. You can use the NetScaler Gateway wizard or global settings to create lists for including or excluding access to domains.
You can allow access to all network resources, domains, and websites and then create an exclusion list. The exclusion list cites a specific set of resources that users are not allowed to access. Users cannot access any domains that are in the exclusion list.
You can also deny access to all network resources, domains, and websites and then create a specific inclusion list. The inclusion list cites the resources that users can access. Users cannot access any domains that do not appear on the list.
Note: If you configure clientless access policies for Citrix Endpoint Management or StoreFront and users connect with Receiver for Web, you need to allow the domains that Receiver for Web can access. This is required so NetScaler Gateway can rewrite network traffic for StoreFront and Endpoint Management.
Related information
Configure clientless VPN access with NetScaler Gateway

To configure domain access by using the NetScaler Gateway wizard

  1. In the configuration utility, click the Configuration tab and then in the navigation pane, click NetScaler Gateway.
  2. In the details pane, under Getting Started, click NetScaler Gateway wizard.
  3. Click Next and then follow the directions in the wizard until you reach the Configure clientless access page.
  4. Click Configure Domains for Clientless Access and do one of the following:
    • To create a list of excluded domains, click Exclude domains.
    • To create a list of included domains, click Allow domains.
  5. Under Domain Names, type the domain name and then click Add.
  6. Repeat Step 5 for each domain you want to add to the list and then click OK when finished.
  7. Continue configuring the appliance by using the NetScaler Gateway wizard.

To configure domain settings by using the configuration utility

You can also create or modify the domain list by using global settings in the configuration utility.
  1. In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Global Settings.
  2. In the details pane, under Clientless Access, click Configure Domains for Clientless Access.
  3. Do one of the following:
    • To create a list of excluded domains, click Exclude domains.
    • To create a list of included domains, click Allow domains.
  4. Under Domain Names, type the domain name and then click Add.
  5. Repeat Step 4 for each domain you want to add to the list and then click OK when finished.