Forum Discussion

Osama_Ibrahim_M's avatar
Osama_Ibrahim_M
Icon for Nimbostratus rankNimbostratus
Mar 07, 2019

APM Integration with Citrix

Hi Dears, first of all am new on this field, but am trying to under stand, so if someone can guide me or support it will be very appreciated. I received a request from my boss to publish Citrix usi...
BIG-IP Access Policy Manager (APM)
security
  • AMiles_377865's avatar
    AMiles_377865
    Mar 07, 2019

    Hello Osama,

     

    It seems like your second guess is correct: you're using a separate IP from your dmz range for the address that external users connect to. This virtual server will have the access profile/policy attached to it. Authentication is handled there and then credentials are given to the citrix backend servers. This makes the most sense to me.

     

    I don't know what resources support showed you but the general flow is summed up pretty well here. There's also a more in-depth guide here.

     

    Have you looked into using the citrix iApp template for this deployment? The inline text documentation can be a super helpful walk-through of the configuration. This would also make for an easy change in the future if you need to switch the ip address of the vs.

     

    Best of luck,

     

    Austin

     

AMiles_377865's avatar
AMiles_377865
Icon for Cirrocumulus rankCirrocumulus

Hello Osama,

 

It seems like your second guess is correct: you're using a separate IP from your dmz range for the address that external users connect to. This virtual server will have the access profile/policy attached to it. Authentication is handled there and then credentials are given to the citrix backend servers. This makes the most sense to me.

 

I don't know what resources support showed you but the general flow is summed up pretty well here. There's also a more in-depth guide here.

 

Have you looked into using the citrix iApp template for this deployment? The inline text documentation can be a super helpful walk-through of the configuration. This would also make for an easy change in the future if you need to switch the ip address of the vs.

 

Best of luck,

 

Austin

 

Osama_Ibrahim_M's avatar
Osama_Ibrahim_M
Icon for Nimbostratus rankNimbostratus
Mar 10, 2019

Hi Austin, appreciate your support and your great gaudiness, I did my configuration according to your provided link, but am still confuse about which IPs I should use, citrix servers have three internal IPs, and I need to configure in DMZ, so should I use different IP from my DMZ range so I can NAT this IP to public IP.

 

I hope I explained well.

 

thanks.