NetScaler Gateway Prerequisites

• NetScaler Gateway is configured as a proxy to StoreFront. See https://support.citrix.com/article/CTX139963.

• Configure StoreFront to accept NetScaler Gateway as a proxy. See https://docs.citrix.com/en-us/storefront/2-6/dws-manage/dws-addgateway.html.

• NetScaler Gateway server SSL certificate is trusted by Storefront. Note:The certificate key must be at least 2048 bits and the certificate CN (common name) must match the DNS name of the NetScaler Gateway server. See https://support.citrix.com/article/CTX109260.

• Configure StoreFront to enumerate resources from XenApp and XenDesktop.

Tasks:

• Configure LDAP Authentication as a second factor on NetScaler.

• Change the VeridiumID RADIUS default secret

• Configure RADIUS as a primary factor and choose Password Authentication Protocol (PAP) on NetScaler.

• Configure authentication methods on StoreFront.

• Test remote access to Citrix desktops or applications