Today I did a Citrix Federated Authentication Services (FAS) implementation at a customer. One of the issues I had was the error: You cannot log on using a smart card. Doing some research on the internet I found a blog from nerdscaler.com (https://nerdscaler.com/storefront-fas-cannot-login-using-smart-card/). This blog describes the problem and…
Upgrade to Citrix StoreFront 3.0 and enable HTML5 Citrix Receiver
This blog will describe the StoreFront update from 2.6 to 3.0. I also describe how to implement the HTML5 Citrix Receiver support. Start the StoreFront 3.0 installation Select I accept the terms of this license agreement Select Install The Storefront 3.0 will be installing Select Finish Start the StoreFront Console Go to Receiver for Web…
Block Citrix IOS VPN Access
Citrix released a new Citrix VPN Cliënt for Netscaler on Apple IOS devices. When there is a session policy configured with an Plug-in Type: Windows/MAC OS X the customer can still connect with VPN access, even without any VPN configuration. You could fix this by using an Responder policy to block access for VPN access….
Deny access to resource based on HTTP Headers
In this blog I will describe how to configure the Citrix NetScaler to deny access to an resource based on HTTP Headers. This often will be used to deny access to an website for particular web browsers/devices.
Citrix NetScaler as Forward Proxy
In this blog I will describe how to configure the Citrix NetScaler as Forward Proxy. This installation/screenshots are based on an NetScaler VPX 1000 Platinum license, so there could be some slide differents between the screenshots. The Citrix NetScaler is a good product for replacing Microsoft TMG. Microsoft TMG is end-of-life so customers a searching for…
Install Certificate Authority
In this blog I will describe the installation of Microsoft Certificate Authority. This installation/screenshots are based on an Windows 2012R2 server. The Certificate Authority will be installed a lot in the future I guess because you can’t request public certificates with an internal server name anymore with an expire date after the 1st of November 2015….