Citrix for secure web services

I am wondering if citrix can be used for secure web services. I have read through much of the documentation I can find but have a couple outstanding questions.

1.) is it possible to encrypt traffic between the Citrix server and the application server?

2.) is it possible to configure Citrix to use HTTPS and not HTTP?

Please provide links to documentation.

Thanks in advance

LVL 17

Marius GunnerudSenior Systems EngineerAsked: 2011-10-10

Who is Participating?

Solutions

LVL 37

Carl WebsterConnect With a Mentor Commented: 2011-10-11

SSLRelay is used to secure the traffic between the web interface server(s) and the XenApp servers. SSLRelay is probably one of the least implemented features. Citrix Consulting has a whitepaper available about the Top 10 things they find when doing assessments. Not implementing SSL Relay was in that list.

Found it: http://support.citrix.com/servlet/KbServlet/download/18928-102-19722/Top%2010%20Items%20Found%20by%20Citrix%20Consulting%20on%20Assessments%20v2.pdf

Issue #8

LVL 37

Carl WebsterCommented: 2011-10-10

1. Sslrelay
http://support.citrix.com/proddocs/topic/web-interface-impington/wi-ssl-relay-gransden.html

2. Citrix secure gateway or citrix access gateway or citrix netscaler vpx or netscaler appliance.

LVL 17

Marius GunnerudSenior Systems EngineerAuthor Commented: 2011-10-10

Thanks for the reply. However it seems that Citrix will only encrypt between client and server over an unsecure network if the client has a certificate is installed on the client machine. I have though of this solution but unfortunately it is not an option as there are hundreds of clients. Is my assumption correct or have I missed something?