Overview Everyones trying to get rid of FAS and implement Entra ID’s native SSO solution for Citrix DaaS Cloud or Citrix DaaS Local (GA since 2607 LTSR). The main requirements are Windows Server 2025 or
Continue reading
NetScaler – Run & Get IoC-Scripts with Console
Overview Quick-Post about how you can run IoC Scripts, centrally managed by NetScaler Console (NSC) or NetScaler Console Service (NSC-Service) and getting the results without ever connecting to your NetScaler Instances by manual. IoC Scripts
Continue reading
NetScaler – TLS 1.3 Backend SSL Communication
Overview TLS 1.3 is a common since 2020, and established in a common point during the last years as a constant default for SSL Frontend communications across LoadBalancers or ADC’s. But in return, using TLS
Continue reading
NetScaler – Performance Impact for Post-Quantum Cryptography (PQC)
Overview Post-Quantum Cryptography (PQC) involves new public-key security algorithms designed to protect digital data from future quantum computers. NetScaler supports it since 14.1 51.72 – I’ve written about that and the configuration here last year.
Continue reading
Microsoft Entra – CA Baseline changes affecting Citrix Authentication
Overview Microsoft is going to change the default behaviour on how Conditional Access Policies are enforced for Applications requesting only OIDC Scopes or a limited set of directory scopes – because of strenghten Entra ID’s
Continue reading
NetScaler – Zero Touch Certificate Management (ZTCM)
Overview NetScaler Console’s (NSC) / Console Service Zero Touch Certificate Management now exists a while, but after talking to several customers, I think there are some misunderstandings what’s behind the Feature ZTCM and Manual /
Continue reading
NetScaler – TLS Citrix VDA with TLS 1.3
Overview This Quickpost contains informations about deploying a secure frontend to backend communication with NetScaler, using TLS 1.3 to achieve a continues 443 TCP (UDP with EDT / DTLS) connection from NetScaler Frontend (HDX Gateway)
Continue reading
NetScaler – Session Hijack Protection X-Forwarded-For
Overview Protecting an authenticated User’s Session is very important in todays world. Hijacking an active Session is nothing new, taking over an existing session is the golden ticket for unwanted access, regardless of the MFA
Continue reading
Windows Cloud – Pushing Private Access to the Limit
Overview I did some first Tests with Global Secure Access – Private Access during the public Preview in 2023, here testing private Citrix Sessions, tunneled by GSA-Client. In this customer PoC, I did the same,
Continue reading
Windows Cloud – Universal Print with AVD
Overview No-one will have to deal with Printers or Print-Servers. Doesn’t matter if printing from a Client / Notebook or from an EUC-solution like Azure Virtual Desktop / Windows365 CloudPC. Here’s a possible easy-to-setup print
Continue reading