Can you replace Netscaler with App Proxy?

[Nate Niemerg1709159618]

I have been looking into leveraging AZURE APP PROXY to publish our internal Citrix Storefront site.  The purpose is to have remote users use MFA to authenticate to the App Proxy URL and then open the internal Storefront URL to access VDIs.   I know this can be done with the Netscaler and FAS but I thought this may us allow to potentially replace our Netscalers with APP PROXY for remote users since we only have a few. 

The problem I'm seeing is that the internal Storefront URL doesn't load and shows an "DNS_PROBE_FINISHED_NXDOMAIN" error.  I've tried flushing DNS, etc to no avail.  I'm wondering if anyone has tried this and got it working.   

 

Thanks.

[Morten Kallesøe]

i think this questions is better suited on a Azure forum

[Jeff Riechers]

Unless you have a direct connection to the backend resources I don't believe the App Proxy does the necessary ICA tunnel.  And if it did I don't believe it would be supported by Citrix.  F5 can do Irules for routing Citrix traffic, but that also is not supported.

 

[Johannes Norz]

On 3/19/2024 at 11:29 AM, Jeff Riechers said:

 F5 can do Irules for routing Citrix traffic, but that also is not supported.

 

F5 won't solve his problem, rather the opposite would be true: He wants to get rid of costly components, not replace a very expensive one with an extremely expensive one 😂

[Jeff Riechers]

Oh, 100% agree.  I was just pointing out how another vendor did a similar function, but it wasn't supported.  I have been looking for a free CSG equivalent for years.