Support for VoIP phones

When you install NetScaler Gateway as a standalone appliance and users connect with the Citrix Secure Access client, NetScaler Gateway supports two-way communication with Voice over IP (VoIP) softphones.

Following are some of the VoIP softphones that Citrix Secure Access supports:

  • Cisco Softphone
  • Avaya IP Softphone

Secure tunneling is supported between the IP PBX and the softphone software running on the user device. To enable the VoIP traffic to traverse the secure tunnel, you must install the Citrix Secure Access client and one of the supported softphones on the same user device.

When the VoIP traffic is sent over the secure tunnel, Citrix Secure Access supports the following softphone features:

  • Outgoing calls that are placed from the IP softphone
  • Incoming calls that are placed to the IP softphone
  • Bidirectional voice traffic
  • TCP and UDP control flows with VoIP applications


For the UDP control flow with DNE, the VoIP application gets disconnected if the inactivity duration is 30 seconds or more. So, if the VoIP application supports UDP control messaging and you face any issues, we recommend you to use Citrix Secure Access in WFP mode.

Support for VoIP softphones is configured by using intranet IP addresses. You must configure an intranet IP address for each user. If you are using Cisco Softphone Communication, after configuring the intranet IP address and binding it to a user, no additional configuration is required. For more information about configuring an intranet IP address, see Configuring Address Pools.

If you enable split tunneling, create an intranet application and specify the Avaya Softphone application. In addition, you must enable transparent interception.

Support for VoIP phones

In this article