Gateway

Install and configuring Citrix Gateway in a double-hop DMZ

January 8, 2024

Contributed by:

You need to complete several steps to deploy Citrix Gateway in a double-hop DMZ. The steps include installation of appliances in both DMZs and configuring the appliances for user device connections.

Install Citrix Gateway in the first DMZ

To install Citrix Gateway in the first DMZ, follow the instructions in Install the hardware.

If you are installing multiple Citrix Gateway appliances in the first DMZ, you can deploy the appliances behind a load balancer.

Configure Citrix Gateway in the first DMZ

In a double-hop DMZ deployment, it is mandatory that you configure each Citrix Gateway in the first DMZ to redirect connections to either StoreFront or the Web Interface in the second DMZ.

Redirection to StoreFront or the Web Interface is performed at the Citrix Gateway Global or virtual server level. To connect to the Web Interface through Citrix Gateway, a user must be associated with a Citrix Gateway user group for which redirection to the Web Interface is enabled.

Install Citrix Gateway in the second DMZ

The Citrix Gateway appliance in the second DMZ is called the Citrix Gateway proxy because it proxies ICA and Secure Ticket Authority (STA) traffic across the second DMZ. Install the hardware to install each Citrix Gateway appliance in the second DMZ.

You can use this installation procedure to install other appliances in the second DMZ.

After you install Citrix Gateway appliances in the second DMZ, you configure the following settings:

Configure a virtual server on the Citrix Gateway proxy.
Configure Citrix Gateway appliances in the first and second DMZ to communicate with each other.
Bind the Citrix Gateway in the second DMZ globally or to a virtual server.
Configure the STA on the appliance in the first DMZ.
Open ports in the firewalls separating the DMZ.
Install certificates on the appliances.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Install and configuring Citrix Gateway in a double-hop DMZ

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Install and configuring Citrix Gateway in a double-hop DMZ

Install Citrix Gateway in the first DMZ

Configure Citrix Gateway in the first DMZ

Install Citrix Gateway in the second DMZ

In this article