For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Jinshu_134425's avatar
Jinshu_134425
Icon for Nimbostratus rankNimbostratus
Jul 29, 2015

Can we integrate Citrix 5.0 and 6.5 in the same APM portal?

Hi friends,

 

I am configuring citrix through APM. Can we integrate Citrix and another applications like OWA in the same portal?

 

user will access https://myportal.remotesystem.com and it will open a portal after the authentication. This portal contains the Citrix icon and OWA applications. If user clicks on citrix icon, it should launch Citrix through APM. I am trying with iApp but it is asking for external IP access. How can we achieve this ? Can we configure citrix as portal?

 

Regards

 

application delivery
availability
BIG-IP Access Policy Manager (APM)
performance
security
virtualization

5 Replies

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Jul 30, 2015

    Hi,

     

    Yes you can if you replace StoreFront and WebInterface. Actually, you have to create a new object called VDI (or Remote Desktop). Create one Citrix VDI object for Xen5, one for Xen6.5 and create Portal Access ressources for Web Apps.

     

    On your Xen server (the broker), you have to allow XML called from APM (have a look in the Deployment, in Appendix).

     

    In this scenario, you will see all apps allowed for the user in the Webtop (the portal) and also all Web Apps.

     

    I hope this help. Matt

     

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Jul 31, 2015

    The simplest solution is to use the remote desktop object with SSO so that users can see all Apps in the web top.

     

    The second solution Reverse Proxy the SF server. You an test both. Result is the same but user experience is different.

     

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Jul 31, 2015

    No. You have to bypass the SF in this use case so that all Apps appear on the webtop. So you set the Broker in the profile.

     

    The second solution is to use Portal Access and create one Portal Access per SF.

     

  • Matt_Dierick's avatar
    Matt_Dierick
    Icon for Employee rankEmployee
    Jul 31, 2015

    For option 1, check on your VS is the box VDI, PerAPP VPN is checked. This enable ICA proxy on the VS.

     

    For option 2, your admin has to allow XML request on the Broker. If you look in the deployment guide, there is a section for that (Appendix)

     

    In both cases, the VDI box has to be checked on the Virtual Server

     

    I would advice to re-run the iApp with SF replacement so that you can check what the iApps does. It's not really difficult but you have to understand how APM works with ICA.

     

  • Jinshu's avatar
    Jinshu
    Icon for Cirrus rankCirrus
    Aug 02, 2015

    Hello Matt,

     

    I am trying now the Option 1

     

    I have not configured any Citrix iApp in f5 as citrix well working in infra. So i have created portal access using citrix internal url. Page is opening fine through webtop but getting below error.

     

     

    Seems Citrix is having problem loading the ICA connectivity from external. Below is the config i have done in the external VIP.

     

     

    Do I need to configure iApp for getting this Citrix work properly?