Forum Discussion

Rul_74331's avatar
Rul_74331
Historic F5 Account
Feb 10, 2015

ICA Traffic and Kerberos

Hi, In a Citrix envieroment, where APM is publising the services:

 

1- Has all the traffic to pass through the APM ?? I mean, there are lan users, after the authentication with the APM, can these user connect directly to the xenapp/app server, in order to release some performance to the APM?? . 2- If Citrix support Kerberos, could APM support also Kerberos to avoid the user to authenticate

 

Thanks,

 

BIG-IP Access Policy Manager (APM)
citrix
deployment
security

3 Replies

  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Feb 10, 2015

    No, if you enable the ICA proxy bypass mode, then APM is just presenting the resources, and the users connect to the Xenapp/Xendesktop directly.

     

    2 - re Kerberos - it's a much trickier animal - all depends on the Citrix versions and the required setup/scenario.

     

  • Rul_74331's avatar
    Rul_74331
    Historic F5 Account
    Feb 10, 2015

    Thanks Michael,

     

    For Kerberos integration, the are using Citrix XenApp 6.5 (and also 7.6) on Windows Server 2008 R2. They uses 3 types of Citrix services :Storefront, Web Interface and services based on ICA client, all of them are sopported??

     

    Thanks

     

  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Feb 10, 2015

    The only reason you'd want to use APM internally is to replace StoreFront/WebInterface - else you do not need APM and can just load-balance StoreFront/WebInterface internally.