Jump to content
Welcome to our new Citrix community!

Force Workspace to contact Storefront through Gateway

Thomas Niedermeier

Recommended Posts

I need to force all Clients to contact the Storefront through the Netscaler Gateway. 


I have two issues:

*The first time I start the Workspace to add a store, I add the Netscaler Gateway adress, I successful authenticate and the Netscaler Gateway is resolved to the Storefornt adress.

*Workspace clients in the intranet always contact the Storefront


Can this be resolved, or must the Workspace Client contact the Storefront directly?

Link to comment
Share on other sites

If the storefront needs to be gateway only:

1) Configure the StoreFront to have gateway only authentication for both the web and the services address. (Meaning the store's authentication is gateway only AND the associated receiver for web site is also gateway only). Deselect the explicit authentication option.  Store should then display "external only" in the summary pane.

2) Configure the GAteway/Storefront for gateway integration as normal.


Then only supply the gateway fqdn to internal/external users for either web or services connections.  You can even make sure the storefront direct address is only resolvable by gateway (unless you are doing something more exotic with the name resolution).  IF there are no storefront only/internal only connections, then the gateway should be the only fqdn you need to resolve from either the internal or external network.


Use either Provisioning files or change the SRV record for automatic discovery for services clients to use the gateway fqdn instead of the storefront address.


  • Like 1
Link to comment
Share on other sites

Thank you Rhonda for our answer. But I am still lost.


*I have configured the stores authentication with "Passhtrough-Authentication from Citrix Gateway"

*removed all other authentication methods

*enabled Remoteaccess, tried "No VPN tunnel" and "Full VPN tunnel" - no luck, I still get in the summary pane "internal and external network"


Citrix Workspace still resolves after first configuration the Storefront adress and tries to contact storefront.


Link to comment
Share on other sites

Look at both the store's authentication config AND the associated receiver for web authentication configuration.

My guess is that WEB may still have it enabled.

Then double check the gateway association with the store (in the store's remote settings).


You can also change the storefront fqdn if needed so its not known to users (unless you have other stores).

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...