Citrix StoreFront

Require Citrix Workspace app when connecting through a gateway

January 28, 2025

Contributed by:

You can require users to use Citrix Workspace app when connecting through a gateway by using a plug-in.

To deploy the plug-in to your gateway:

Download the plugin from Citrix Downloads.
Extract the zip file and citrix-gateway-plugin.tar.gz. It consists consists of an HTML file and a JavaScript file.
Copy the files to the NetScaler gateway under /var/netscaler/gui/vpn/init
Configure using the Management GUI or Configure using the CLI

Configure using the Management GUI

Sign in to the Netscaler admin GUI.
Create a responder action and click Add.
Configure the responder action:

Type: Respond with HTML page

Add: Enter path /vpn/init/native-app-mandate.html
Create a responder policy.
Configure the responder policy:

Action: The name of the action you created above.

Expression: HTTP.REQ.IS_VALID && HTTP.REQ.URL.ENDSWITH(".js").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("CitrixReceiver").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("CWAWEBVIEW").NOT && HTTP.REQ.HEADER("X-Requested-With").CONTAINS("com.citrix.Receiver").NOT && HTTP.REQ.HEADER("X-Requested-With").CONTAINS("XMLHttpRequest").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("AuthManager").NOT
Navigate to the virtual server where you want to bind the responder policy.
Bind the policy you created.
To verify it is configured correctly, open the gateway URL to confirm that it displays the Citrix Workspace app required screen. Add the Netscaler URL to Citrix Workspace app and confirm that it does not display the Citrix Workspace app required screen.

Configure using the CLI

To configure the require Citrix Workspace app feature using the CLI, perform the following:

Create a responder action with an HTML file (you can edit the configuration in GUI)

add responder action respond_with_html_act respondwithhtmlpage sample_page -responseStatusCode 200
<!--NeedCopy-->

Create a responder policy to handle requests from a web browser, not Citrix Workspace app.

add responder policy respond_with_html_pol "HTTP.REQ.IS_VALID && HTTP.REQ.URL.ENDSWITH(".js").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("CitrixReceiver").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("CWAWEBVIEW").NOT && HTTP.REQ.HEADER("X-Requested-With").CONTAINS("com.citrix.Receiver").NOT && HTTP.REQ.HEADER("X-Requested-With").CONTAINS("XMLHttpRequest").NOT && HTTP.REQ.HEADER("User-Agent").CONTAINS("AuthManager").NOT" respond_with_html_act
<!--NeedCopy-->

Bind the policy to the VPN vserver

bind vpn vserver vpn_vs -policy respond_with_html_pol -priority 100 -gotoPriorityExpression END -type AAA_REQUEST
<!--NeedCopy-->

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Require Citrix Workspace app when connecting through a gateway

January 28, 2025

Contributed by:

January 28, 2025

Contributed by:

Require Citrix Workspace app when connecting through a gateway

Configure using the Management GUI

Configure using the CLI

In this article