For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

lcjr2002_331749's avatar
lcjr2002_331749
Icon for Nimbostratus rankNimbostratus
Jan 08, 2018

Replacing Citrix Netscaler with Big-IP

Replacing Citrix Netscaler with Big-IP. What is the configuration to accomplish this and still allow access to XenDesktop applications for external users via the Big-IP? Would like to replace Netscal...
application delivery
BIG-IP
LTM
Farshad_249798's avatar
Farshad_249798
Icon for Cirrus rankCirrus
Jan 08, 2018

Yes for ICA traffic unless you force it through SSL, you need an iRule for that.

 

As you mentioned the other thing is after authenticatin when use lunches an app it will connet to app server via private ip so you need an iRule to map and proxy ICA traffic correctly. I haven’t tested the iApp without APM but pretty sure if you select ‘do not proxy ICA’ during iApp config it will sort this for you, if not you need an iRule.

 

All in all I would consider APM.

 

  • lcjr2002_331749's avatar
    lcjr2002_331749
    Icon for Nimbostratus rankNimbostratus
    Jan 09, 2018

    Thank you. The goal is to get this to work without APM and allow external clients to open XenDesktop apps via the BigIP with few firewall ports as possible. Similar to how the Netscaler is configured. Any more detailed ideas on the setup?

     

  • lcjr2002_331749's avatar
    lcjr2002_331749
    Icon for Nimbostratus rankNimbostratus
    Jan 10, 2018

    Can any additional help be provided? Thanks.