Gateway

Configuring Custom Clientless Access Policies for Receiver for Web

January 8, 2024

Contributed by:

You can configure custom clientless access policies on NetScaler Gateway for user connections with Receiver for Web by adhering to the following guidelines:

Receiver requires that StoreFront XML traffic cannot be rewritten, which would occur when users connect to NetScaler Gateway with clientless access.
Citrix Endpoint Management requires the rewriting of HTML traffic.
Receiver for Web requires that certain cookies are not proxied through NetScaler Gateway.

If you create clientless access policies for Receiver and Receiver for Web, bind the Receiver policy to the virtual server before you bind the Receiver for Web policy. When you bind the Receiver policy, set a lower priority number to make sure that this policy takes precedence over the Receiver for Web policy.

To configure a clientless access policy for Receiver for Web

In the configuration utility, on the Configuration tab, expand NetScaler Gateway > Policies and then click Clientless Access.
In the details pane, on the Policies tab, click Add.
In Name, type a name for the policy.
Under Expression, type true.
Next to Profile, click New.
In Name, type a name for the profile.
On the Rewrite tab, in URL Rewrite, select ns_cvpn_default_inet_url_label.
On the Client Cookies tab, next to Client Cookies, click New.
In the Configure Pattern Set dialog box, under Specify Pattern, in Pattern, add the following cookies in this order:
1. Enter the value CsrfToken and then click Add.
2. Enter the value ASP.NET_SessionId and then click Add.
3. Enter the value CtxsPluginAssistantState and then click Add.
4. Enter the value CtxsAuthId and then click Add.
Click Create three times and then click Close.

To bind a clientless access policy to a virtual server

After you create the custom clientless access policy, bind the policy to the virtual server.

In the configuration utility, on the Configuration tab, in the navigation pane, expand NetScaler Gateway and then click Virtual Servers.
In the details pane, select a virtual server and then click Open.
In the configure NetScaler Gateway Virtual Server dialog box, click the Policies tab and then click Clientless.
Next to a policy, under Priority, type the number and then click OK.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

NetScaler Secure Deployment Guide

Configuring Custom Clientless Access Policies for Receiver for Web

January 8, 2024

Contributed by:

Configuring Custom Clientless Access Policies for Receiver for Web

To configure a clientless access policy for Receiver for Web

To bind a clientless access policy to a virtual server

In this article