For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Thijs_van_Ham's avatar
Thijs_van_Ham
Icon for Nimbostratus rankNimbostratus
Nov 15, 2016

iApp Citrix XenDesktop without APM (but with ICA proxy)

We have the following situation in our environment:   We are using XenDesktop which is currently being tested in a deployment via F5 including the APM configuration. However, for several reasons w...
application delivery
BIG-IP
iApps
Greg_Crosby_319's avatar
Greg_Crosby_319
Historic F5 Account
Nov 15, 2016

ICA proxy requires APM with AD authentication or certificate based authentication (smartcard).

 

The option you mention, 'BigIP system to act as a gateway for ICA traffic', requires your application servers use client accessible addresses. Works fine for private internal routable addresses, not so great for public clients as you most likely would not want to use public addresses on your application servers but would rather mask the application servers using a proxy (requires ica proxy / APM).