Citrix Web Interface 5.4 and Citrix access gateway

Posted on 2011-10-06
Last Modified: 2012-05-12
Hello again.  Here is my current setup.

Internet --->Citrix Access Gateway 4.6.3---->Citrix Web Interface 5.4 -----> Citrix XenServer Farm 6.5

Somewhere in the CAG there is a setting to redirect users to the WebInterface, where is this setting?
Please help!
Question by:mrbodjagles
    LVL 36

    Accepted Solution


    Author Comment

    That was helpful, but did not resolve my issue.

    The WI works on my LAN.
    After I login to the CAG the correct URL appears in the browser, but I get a "Internet Explorer cannont display the webpage".

    Any ideas Carl?
    LVL 36

    Expert Comment

    by:Carl Webster
    Sorry but I am not a CAG person.

    Expert Comment

    It seems you have configured the gateway to show the web interface after logon, you need to configure a web interface site and set authentication at access gateway. On the gateway you need to re-configure the website to allow pass-through authentication.

    I have set this up with advanced access controller and a gateway 5.03 with web interface 5.4 (it is a bit different) but I’m sure that this will work on access gateway 4.6.3.

    Hope this helps or points you in the right direction. If you need more info i would have to dig in to it a bit and it might take a couple of days before I can check back with you, let me know!

    Assisted Solution

    think this might help!

    At the Web interface management

    1.      Click Start > All Programs > Citrix > Management Console > Access Management Console. If prompted, configure and run discovery.
    2.      Under Citrix Resources > Configuration Tools, click Web Interface, and under Common Tasks, click Create site.
    3.      Select one of the following and click Next:
    o      XenApp Web. Users log on to the Web Interface using a Web browser.
    If you are creating a Web Interface site on XenDesktop, select this option. Users log on using Citrix Desktop Receiver.
    o      XenApp Services. Users log on using Citrix XenApp Plug-ins. The Desktop Receiver is not supported if this option is selected.
    If you are configuring the Web Interface for use with Access Gateway Standard Edition and this option is selected, logon page authentication must be disabled on the Access Gateway. In addition, the Web Interface must be deployed in the DMZ.
    Note: If you select this option, do not perform Steps 5 and 6.
    4.      Keep the default Internet Information Services (IIS) site and path.
    If you selected XenApp Web in Step 3, the site path is /Citrix/XenApp and continue with Step 5.
    If you selected XenApp Services, the site path is /Citrix/PNAgent and click Next to complete the configuration.
    Note: If there are any pre-existing XenApp Web sites or XenApp Services that use the default path, an approporate increment is added to distinguish the new site.
    5.      In Specify where user authentication takes place, select one of the following:
    o      At Web Interface to have users authenticate using the Web Interface.
    Select this option if the Web Interface is deployed as a standalone server parallel to the Access Gateway in the DMZ.
    o      At Access Gateway to have users authenticate using the Access Gateway appliance.
    If you select this option, the Access Gateway authenticates users and initiates single sign-on to the Web Interface if it is configured on the appliance.
    6.      Note: If SmartAccess is configured on Access Gateway Enterprise Edition, this setting enables SmartAccess in XenApp or XenDesktop.
    7.      If you selected At Access Gateway in Step 5, in Authentication service URL, type the Web address to the Access Gateway authentication service URL, such as, and click Next.

    Configuring Access Gateway Settings for the Web Interface on XenApp 5.0 or XenDesktop 2.1

    After you create the Web Interface site, you can use the Access Management Console to configure settings for the Access Gateway.
    1.      Click Start > All Programs > Citrix > Management Consoles > Access Management Console.
    2.      In the left pane of the Access Management Console, click Citrix Resources, click Configuration Tools, click Web Interface and then click the Web Interface site.
    3.      Under Common Tasks, click Manage secure client access and click Edit secure client access settings.
    4.      In Specify Access Methods, select the Default entry and click Edit.
    5.      In Access Method, select Gateway direct, click OK and click Next.
    6.      In Address (FQDN), type the Access Gateway FQDN. This must be the same FQDN that is used on the Access Gateway certificate.
    7.      In Port, type the port number. The default is 443.
    8.      To enable session reliability, click Enable session reliability and click Next.
    9.      Under Secure Ticket Authority URLs, click Add.
    10.      In Secure Ticket Authority URL, type the name of the master server running the XML Service on XenApp or the Desktop Delivery Controller, click OK and click Finish. For example, type http://xenappsrv01/Scripts/CtxSta.dll.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    #Citrix #Citrix Policies #XenDesktop #VDI #POC #Citrix Univeral Printer Driver #Citrix UPD
    How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now