Creating Resource Profiles Using Citrix Web Applications for Citrix 4.6

Transcription

1 Citrix Templates > Creating Resurce Prfiles Using Citrix Web Applicatins Creating Resurce Prfiles Using Citrix Web Applicatins fr Citrix 4.6 NOTE: If end-user selects "Embedded client" frm "Client preferences" when accessing Citrix, then the sessin will nt be launched. The Citrix Web template enables yu t easily cnfigure Citrix access using the Juniper Citrix Terminal Services prxy, JSAM, r WSAM (as explained in Citrix Templates). T create a resurce prfile using the Citrix template: 1. Navigate t the Users > Resurce Prfiles > Web Applicatins/Pages page in the admin cnsle. 2. Click New Prfile. 3. Select Citrix Web Interface/JICA frm the Type list. 4. Enter a unique name and ptinally a descriptin fr the Citrix resurce prfile. 5. In the Web Interface (NFuse) URL field, enter the URL f the web server that hsts yur ICA files using the frmat: [prtcl://]hst[:prt][/path]. Fr instance, enter the URL f an NFuse server, the Web interface fr a Citrix Metaframe Presentatin Server, r a Web server frm which the IVE can dwnlad Citrix Java applets r Citrix cab files. (The IVE uses the specified URL t define the default bkmark fr the Citrix resurce prfile.) Yu may enter a directry URL r a file URL. Fr detailed guidelines n hw t frmat Web resurces, see Defining Base URLs. 6. Specify which type f Citrix implementatin yu are using in yur envirnment by selecting ne f the fllwing ptins: Java ICA Client with Web Interface (NFuse) Select this ptin if yu have deplyed the Citrix Web Interface fr MPS (i.e., NFuse) t deliver Java ICA clients. Java ICA Client withut Web Interface (NFuse) Select this ptin if yu have deplyed a generic web server t deliver Java ICA clients. Nn-Java ICA Client with Web Interface (NFuse) Select this ptin if yu have deplyed the Citrix Web Interface fr MPS (i.e., NFuse) t use any f the different clients (Java, ActiveX, lcal). (Select this ptin) Nn-Java ICA Client withut Web Interface (NFuse) (Read nly) If yu have deplyed a nn-java ICA client withut the Citrix Web Interface fr MPS (i.e., NFuse), yu cannt create a Citrix resurce prfile thrugh this template. Instead, click the client applicatin prfile link beneath this ptin. The link brings yu t the Client Applicatin Prfiles page, where yu can create a SAM resurce prfile. Fr instructins, see Specifying Applicatins and Servers fr WSAM t Secure. 7. Frm the Web Interface (NFuse) versin list, select which Citrix versin yu are using. (The IVE uses this value t pre-ppulate the Frms POST SSO values in yur single sign-n autplicy. Fr mre infrmatin, see Specifying Remte SSO Autplicy Optins.) (Select 4.5 frm the Versin list) 8. In the MetaFrame servers sectin, specify the Metaframe Servers t which yu want t cntrl access and click Add. When specifying servers, yu can enter wildcards r IP ranges.

2 The IVE uses the values that yu enter t autmatically create a crrespnding resurce plicy that enables access t the necessary resurces: If yu chse Java ICA Client with withut Web Interface (abve), the IVE creates a crrespnding Java ACL resurce plicy that enables Java applets t cnnect t the specified Metaframe servers. If yu chse Nn-Java ICA Client with Web Interface (abve), and then yu select ICA client cnnects ver WSAM JSAM (belw), the IVE creates a crrespnding SAM resurce plicy that enables users t access the specified Metaframe servers. If yu chse Nn-Java ICA Client with Web Interface (abve), and then yu select ICA client cnnects ver CTS (belw), the IVE creates crrespnding Terminal Services and Java resurce plicies that enable users t access the specified Metaframe servers. (Select this ptin) 9. (Java ICA clients nly) If yu have deplyed Citrix using a Java ICA Client, select the Sign applets with cde-signing certificate checkbx t resign the specified resurces using the certificate upladed thrugh the System > Cnfiguratin > Certificates > Cde-signing Certificates page f the admin cnsle. (Fr instructins, see Using Cde-signing Certificates.) When yu select this ptin, the IVE uses all f the allw values that yu enter in the resurce prfile s Web access cntrl autplicy t autmatically create a crrespnding cde-signing resurce plicy. Within this plicy, the IVE uses the specified Web resurces t create a list f trusted servers. 10. (Nn-Java ICA clients nly) If yu have deplyed Citrix using a nn-java ICA Client with a Web interface, yu must use the Juniper Citrix Terminal Services prxy, Secure Applicatin Manager, r Netwrk Cnnect t secure traffic t yur Metaframe servers instead f the Cntent Intermediatin Engine. T secure traffic thrugh Netwrk Cnnect, see instructins in Netwrk Cnnect. T secure traffic thrugh the Juniper Citrix Terminal Services prxy r the Secure Applicatin Manager, select ne f the fllwing ptins in the ICA Client Access sectin: ICA client cnnects ver CTS Client Select this ptin t secure yur Citrix traffic thrugh the IVE Citrix Terminal Services client (if yur users are using Active X clients) r Java rewriting engine (if yur users are using Java clients). (When yu select this ptin, the IVE autmatically enables the Terminal Services ptin n the Users > User Rles > Select Rle > General > Overview page f the admin cnsle.) NOTE: If yu select this ptin, we recmmend that yu disable Citrix client dwnlads thrugh the Citrix Web Interface. Otherwise, users culd inadvertently start tw different windws dwnlading tw versins f the Citrix client simultaneusly ne thrugh the IVE (which autmatically attempts t dwnlad the Citrix client if ne is nt present n the user s cmputer) and ne thrugh the Citrix Web Interface.

3 ICA client cnnects ver WSAM Select this ptin t secure traffic using WSAM. (When yu select this ptin, the IVE autmatically enables the Secure Applicatin Manager ptin n the Users > User Rles > Select Rle > General > Overview page f the admin cnsle.) ICA client cnnects ver JSAM Select this ptin t secure traffic using JSAM. Then, cnfigure the fllwing ptins: i. Number f Servers/Applicatins Enter the lesser f the fllwing tw numbers: maximum number f Citrix servers in yur envirnment r the maximum number f published applicatins that a user can pen simultaneusly. Fr instance, if yur envirnment cntains ne server and five published applicatins, enter 1 in this field. Or, if yur envirnment cntains 20 servers and 10 published applicatins, enter 10 in this field. The maximum value this field accepts is 99. ii. Citrix Prts Specify the prts n which the Metaframe servers listen. (When yu select the ICA client cnnects ver JSAM ptin, the IVE autmatically enables the Secure Applicatin Manager ptin n the Users > User Rles > Select Rle > General > Overview page f the admin cnsle.) NOTE: Yu cannt enable WSAM and JSAM fr the same rle. Therefre, if yu try t create a Citrix resurce prfile that uses ne f these access mechanisms (fr instance, JSAM) and anther prfile assciated with rle already uses the ther access mechanism (fr instance, WSAM), the IVE des nt enable the new access mechanism (JSAM) fr the rle. Als nte that yu can nly use WSAM r JSAM t cnfigure access t ne Citrix applicatin per user rle. 11. If yu want t allw users t access lcal resurces such as printers and drives thrugh their Citrix Web Interface sessins, select the Cnfigure access t lcal resurces checkbx. Then, select frm the fllwing ptins: Select Cnnect printers if yu want t enable the user t print infrmatin frm the terminal server t his lcal printer. Select Cnnect drives if yu want t enable the user t cpy infrmatin frm the terminal server t his lcal client directries. Select Cnnect COM Prts if yu want t enable cmmunicatin between the terminal server and devices n the user s serial prts. NOTE: T cntrl access t lcal resurces exclusively thrugh yur Citrix Metaframe server settings, de-select the Cnfigure access t lcal resurces

4 checkbx. When yu select de-select ptin, the Metaframe server settings take effect. Or, if yu want t selectively verride Citrix Metaframe server settings fr the bkmark, select the Cnfigure access t lcal resurces checkbx and then specify the lcal resurces t which yu want t enable r disable access. Nte that if yu enable access t a lcal resurce thrugh the IVE, hwever, yu still must enable access t it thrugh the Metaframe server as well. When yu enable lcal resurces thrugh the terminal server, each user can nly access his wn lcal resurces. Fr instance, user 1 cannt see user 2 s lcal directries. 12. In the Autplicy: Web Access Cntrl sectin, create a plicy that allws r denies users access t the resurce specified in the Web Interface (NFuse) URL field. (By default, the IVE autmatically creates a plicy fr yu that enables access t the resurce and all f its sub-directries.) Fr mre detailed instructins, see Defining a Web Access Cntrl Autplicy. 13. If yu selected ne f the Web interface ptins in abve, update the SSO plicy created by the Citrix template in the Autplicy: Single Sign n sectin. (Single sign-n autplicies cnfigure the IVE t autmatically pass IVE data such as usernames and passwrds t the Citrix applicatin. The IVE autmatically adds the mst cmmnly used values t the single sign-n autplicy based n the Citrix implementatin yu chse.) At minimum, yu need t select the Autplicy: Single Sign n checkbx, duble-click the Value in the Dmain clumn, fill in the apprpriate dmain, and click the check mark n the right side f the clumn. Fr mre detailed instructins, see Specifying Remte SSO Autplicy Optins. (Enable the single-sign n checkbx) Once yu select Single sign n, In the pst headers sectin there will be a Ckie header that gets ppulated autmatically. Edit that Ckie header and update the value f the ckie with "WINGSessin=remteClientDetected=Aut(Ica-Lcal)&icaClientAvailable=True". 1. Or, if yu selected the nn-web interface ptin, yu may ptinally create yur wn single sign-n autplicy using instructins in Defining a Single Sign-On Autplicy. 2. Click Save and Cntinue. 3. In the Rles tab, select the rles t which the Citrix resurce prfile applies and click Add. The selected rles inherit the autplicies and bkmarks created by the Citrix resurce prfile. If it is nt already enabled, the IVE als autmatically enables the Web ptin in the Users > User Rles > Select Rle > General > Overview page f the admin cnsle and the Allw Java Applets ptin Users > User Rles > Select Rle > Web > Optins page f the admin cnsle fr all f the rles yu select. 4. Click Save Changes. 5. (Optinal) In the Bkmarks tab, mdify the default bkmark created by the IVE and/r create new nes using instructins in Defining a Web Bkmark. (By default, the IVE

5 creates a bkmark t the Web interface (NFuse) URL defined in the Web Interface (NFuse) URL field and displays it t all users assigned t the rle specified in the Rles tab.)