Configuring outbound ICA Proxy

February 20, 2024

Contributed by:

H C

Outbound ICA Proxy configuration involves configuring the NetScaler LAN proxy and NetScaler Gateway.

Configure NetScaler LAN Proxy for ICA outbound proxy

You can perform the following steps to configure outbound ICA Proxy by using the CLI.

Add a VPN virtual server.

 add vpn vserver <name> <serviceType> [<IPAddress> [-range <positive_integer>] [-ipset <string>]] [<port>] [-state ( ENABLED | DISABLED )] [-authentication ( ON | OFF )] [-doubleHop ( ENABLED |DISABLED )]
 <!--NeedCopy-->

Set the VPN parameters.

 set vpn parameter[-backendServerSni ( ENABLED | DISABLED )][-backendCertValidation ( ENABLED | DISABLED )]
 <!--NeedCopy-->

Add an SSL certificate-key pair.

 add ssl certKey ca_cert_verify -cert <certificate name>
 <!--NeedCopy-->

Bind the SSL certificate-key pair globally.

 bind vpn global -cacert ca_cert_verify
 <!--NeedCopy-->

Example:

-  add vpn vserver ssl_lan_proxy SSL 65.219.17.34 443 -authentication OFF - doubleHop ENABLED

-  set vpn parameter backendserverSni ENABLED backendcertValidation ENABLED

-  add ssl certKey dnpg_ca -cert dnpg_ca_cert.cer

-  bind vpn global -cacert dnpg_ca

<!--NeedCopy-->

Note:

For SSL support on NetScaler LAN proxy, no changes are required in the NetScaler Gateway configuration.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Configuring outbound ICA Proxy

February 20, 2024

Contributed by:

H C

February 20, 2024

Contributed by:

H C

Configuring outbound ICA Proxy

Configure NetScaler LAN Proxy for ICA outbound proxy

In this article