What’s new

This article provides a list of the latest customer-facing features for the Citrix Secure Internet Access (CSIA) 2021-Q3 Release.

December 2, 2021

Azure Active Directory support for SSO

Azure Active Directory (AD) is also supported as an Identity Provider (IdP) for Single sign-on (SSO) with Citrix Secure Internet Access (CSIA) account. By default, the CSIA account is configured with Citrix IdP settings. If the Citrix tenant has Azure AD enabled, the CSIA account is configured with Azure AD IdP for SSO validation. Currently, a given CSIA account can be configured to have either Azure AD IdP or Citrix IdP settings.

Integration with Citrix Secure Browser Service

Citrix Secure Browser Service provides Remote Browser Isolation by isolating web browsing to protect the corporate network from browser-based attacks. With Citrix Secure Internet Access, you can create and apply web filtering rules to redirect web traffic to a Secure Browser instance.

October 28, 2021


The Citrix Secure Internet Access onboarding helps you configure your user account post you get the cloud access and done with the initial setup. You must perform some basic onboarding settings to access the other CSIA configuration. You cannot view the configuration policy portal without completing the onboarding process.

Account Settings

The Account Settings feature helps to change/override the user account name that appears for your account in the Citrix Secure Internet Access service portal.

October 14, 2021

Offline Cloud Backup

The Offline Cloud Backup settings provide the ability to store/save the backup settings and logs from reporting nodes based on the Region, Location, and Time that you select.

Citrix Secure Internet Access APIs with Swagger support

A set of configuration related APIs are now available in the swagger docs. The CSIA-Core Swagger API information is available under the sia-core-controller section.

September 15, 2021

Predefined roles

Customer: Read Only Access (Privacy mode) role is introduced as a new predefined role. You can add a user and assign this role from Citrix Identity and Access Management. A user that is assigned with the Customer: Read Only Access (Privacy mode) role has read-only access to view all the features of the service except for Licensing and User Settings.

Email settings

The Email settings page under Configuration > Cloud Settings is enhanced to include the following features:

  • Test Email Settings: Verify your email settings.
  • Set Default Settings: Populate the default email settings.
  • Email Recipients: Add email recipients to receive User Alerts and URL Exception requests.

July 29, 2021

Cloud Settings in Citrix Secure Internet Access UI

The UI now supports Cloud configuration settings for NTP Server, Platform Maintenance, Update Release Settings, and Anonymized Logging. For more information, see Configuration.

ECMP tunnel load balancing

Citrix Secure Internet Access now supports SD-WAN Orchestrator service ECMP load balancing. For more information, see ECMP load balancing.

April 29, 2021

Internet breakout for Cloud Connector traffic

Traffic to Citrix Secure Internet Access cloud nodes is redirected through internet services instead of the IPsec and GRE tunnels deployed on the site. With this direct breakout, you avoid tunneling the traffic twice.


To ensure that you don’t miss important messages about iboss subscription and configuration changes, the Citrix Secure Internet Access service displays alerts as notifications within the Dashboard.

User reallocation

To minimize latency in particular locations, you can now reconfigure the location of your nodes within a geographical region. You can also edit the number of users assigned to these nodes.

Deliver network traffic over multiple tunnels in parallel by configuring tunnels from a single location with multiple ISP connections to the same Service Provider points of presence (PoPs).

Network map of PoPs under a node

View which points of presence (PoPs) are being used for a customer and the SD-WAN branches that connect to Citrix Secure Internet Access PoPs.

Role settings (Technical Preview)

Citrix is offering role-based access control (RBAC). RBAC gives you the ability to customize permission-based roles and to add these roles to different users.

What’s new