100%(4)4 out of 4 people found this document helpful
This preview shows page 84 - 87 out of 110 pages.
•The Quarantine Group is a local group on the NetScaler that users receive temporary membership in by failing the client security check.
85 Exercise 5-4: Test ICA Proxy Connection and Fallback Policy (GUI) In this exercise, you will test the ICA Proxy configurations and launch XenApp/XenDesktop resources using the Citrix Receiver and the NetScaler Gateway. You will use the Configuration Utility to perform this exercise. With all the policies configured, test the ICA Proxy connection to XenApp and XenDesktop resources. Using the Contractor account will test the previously configured ICA Fallback policies. This exercise tests with the following users only, but based on the policy configuration, the following results should be received for different accounts: •ITAdmin1: oDuring Unified Gateway logon, user should receive the client choices page. Choice between: VPN, Clientless, and ICA Proxy oWhen connecting using the VPN: all backend resources area available over all ports; so both RDP and WEB connections will succeed (along with anything else). •Sales1: oThe Sales group was not defined as a AAA group on the VPN vServer. So after authentication, the sales1 account will only receive policies applied to the VPN virtual server. The current configuration, should result in an ICAProxy only connection (with no Choices page) •Contractor: oContractor is receiving the fallback policy. oWith WordPad running: Client Choices page will be displayed. Contractor will have a choice of VPN, Clientless, and ICA Proxy connections. However, due to the Authorization Policies, the VPN connection will only access to WEB content (HTTP/HTTPS) to the backend network and no RDP (or anything else). the WEB test will succeed; the RDP test will fail. oWithout WordPad running: the fallback policy is in effect and the Contractor user receives an ICAProxy only connection via the ns_quarantine group policies. In this exercise, you will perform the following tasks: •Test ICA Proxy Connections with Unified Gateway NOTE: The Win8VDA's in the lab are not configured with Power Management in the XenDesktop site. If you log on with multiple users without logging off the existing sessions (such as by disconnecting instead), you may run out of resources to connect to. If the StoreFront displays a no resources available message, try rebooting the Win8VDA1 and Win8VDA2 systems using XenCenter as a quick way of freeing up resources.
86 Test ICA Proxy Connections and Fallback Policy with Unified Gateway Step Action 1.Return to ExternalClient. Remain logged on as citrix. 2.Open WordPad (local to ExternalClient): Start > Run > wordpad.exe.(Launch it from Desktop) 3.Connect to the Unified Gateway at . (Use Chrome). Log into the Unified Gateway VPN portal page using the following credentials: User Name: contractorPassword: Password1 (Note: The web browser displays a notice that your computer needs to be checked before you can be allowed to connect and an instruction to "download the software that handles this check". Click on Download) 4.The EPA scan will be performed