Configuring Outbound ICA® Proxy

September 27, 2025

Contributed by:

C S

To configure an Outbound ICA Proxy by using CLI, follow these steps:

Add a Cache Redirection Vserver:

add cr vserver <name> <serviceType> <IPAddress> <port> -cacheType <cacheType>

Service must be HDX™

CacheType must be FORWARD

Example:

add cr vserver CR_LAN_Proxy HDX 10.217.208.197 8080 -cacheType FORWARD

Add an ICA SmartControl Profile:

add ica accessprofile -**ConnectClientLPTPorts** ( DEFAULT

DISABLED ) ClientAudioRedirection ( DEFAULT

DISABLED ) -LocalRemoteDataSharing ( DEFAULT

DISABLED ) -ClientClipboardRedirection ( DEFAULT

DISABLED ) -ClientCOMPortRedirection ( DEFAULT

DISABLED ) -ClientDriveRedirection ( DEFAULT

DISABLED ) -ClientPrinterRedirection ( DEFAULT

DISABLED ) -Multistream ( DEFAULT

DISABLED ) -ClientUSBDriveRedirection ( DEFAULT

DISABLED)

Example:

add ica accessprofile disableCDM -ConnectClientLPTPorts DEFAULT -ClientAudioRedirection DEFAULT –LocalRemoteDataSharing DEFAULT -ClientClipboardRedirection DEFAULT -ClientCOMPortRedirection DEFAULT –ClientPrinterRedirection DEFAULT -Multistream DEFAULT -ClientUSBDriveRedirection DEFAULT

Add an ICA Action:

add ica action <name> -accessProfileName <string>

Example:
```
add ica action disableCDM\_action -accessProfileName disableCDM
```
Add an ICA Policy:

add ica policy <name> -rule <expression> -action <string> -comment <string> -logAction <string>

Bind the ICA Policy to the Virtual Server or Global:

a. Bind to Virtual Server

**bind cr vserver** \<name\> **-policyName** \<string\> **-priority** \<positive\_integer\>

Example:

bind cr vserver CR\_LAN\_Proxy –policyname disableCDM\_pol –priority 10

b. Bind to Global

**bind ica global -policyName** \<string\> -**priority** \<positive\_integer\>

Example:

bind ica global –policyName disableCDM\_pol –priority 10

Note

Set the Secure ICA Ports:This value is the port number on the Citrix® Gateway to which the LAN Proxy makes an outbound connection. By default it is set to 443. Use the following command to change the port.

set ns param -secureicaPorts<port>

Example:

set ns param -secureicaPorts 8443

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

NetScaler Secure Deployment Guide

Configuring Outbound ICA® Proxy

September 27, 2025

Contributed by:

C S

September 27, 2025

Contributed by:

C S

Configuring Outbound ICA® Proxy

In this article