What is VPN and How does it Works

Seamless failover between sites with Melio and NetScaler -

Melio, a new addition to the Citrix portfolio provides high availability of data and workloads such as XenDesktop and XenApp. can be scaled customers and to achieve high availability in a data center, or across multiple active-active geo-dispersed data centers.

Melio is an enterprise storage and data virtualization platform. It extends the benefits of virtualization to the storage layer (by data from physical memory decoupling) in the same way that server virtualization of the operating system of physical servers decoupled.

The Software Defined Storage feature improves the elasticity of the customers existing storage and server infrastructure and by NetScaler load balancing offers Melio seamless failover between sites without interfering with the user experience.

"I've already downloaded Melio for a customer POC. They wanted to have an active / active DR configuration for their XenDesktop platform. We leveraged Melio two NetScaler in a special configuration in file the persona data point clusters so we just need to have a XenDesktop site, in fact, instead of two for dynamic load balancing and GSLB for access. This technology with the appropriate amount of connectivity between the two locations 100mb a perfect solution for Citrix is ​​" says Walter Scott of Slait Consulting, CSA.

Interested in offering Melio? Please register for the Melio Early Adopter Partner Program

Technical training is now also available. Search Melio, go through the installation and user training, and complete it by your own Melio up cluster for high availability and scale-out of XenDesktop and XenApp in our cloud Demolab!

For more information about Melio please visit SalesIQ and our blog.

Get the most out of your Citrix XenDesktop deployment with All-Flash Pure Storage -

You are currently evaluating or XenDesktop solution considering your mobile workforce to allow? Or is your VDI deployment to slow by stalled infrastructure or costly and complex storage configurations?

Pure Storage, an industry leader in all-flash arrays, can help to bring your VDI project to life by superior supply end user desktop performance, simplified management and lower storage costs.

Join us for this informative webinar and learn how to accelerate XenDesktop implementations with the use of all flash memory and simplify. In particular, density, scalability and performance tests discussed with XenDesktop to pure storage systems. We will also talk about pre-tested and certified solutions that you can implement quickly and easily your XenDesktop environment grow with your business. Real-World Case Studies show be shared, as IT organizations more XenDesktop All flash memory with pure get

Date: Wednesday, August 26, 2015
Time: 09:00 to 10:00 pM PDT

register now

Refreshing! Re-branding NetScaler 11 with Storefront 3.0 Portal theme -

How do you give your NetScaler Gateway as a bit of a refresh, with a new look?

Well, you're lucky! Because that is exactly what we are going to learn how not to do in this post: do a slight rebranding of NetScaler Gateway login screen with Storefront 3.0 Theme

"How we can do that " we are so glad that you asked

Just go like this and you will be all set.?!

1. In the NetScaler GUI, go to NetScaler Gateway> Portal Themes.

2. On the left side, click "Add".

3. Give it a name and select "Green Bubble" as Template Theme.

4. In the Common Attributes section, select the box next to " change background image ".

5. Click Browse.

Switch to a storefront 3.0 server in the \ STF01 C $ Inetbpub wwwroot Citrix StoreWeb Media folder, and select the bg_x1.jpg file.

6. In the right column, change form background color to rgba (63,54,67,0.8).

8. Click "OK".

9. On top of the screen, click on Link to bind the newly configured topic and look at.

10. Select a Gateway Virtual Server and click Preview.

11. The login page appears with the new theme.

Got Framehawk? We have remote access tips and tricks! -

Our first publication of Framehawk was get on the forums a lot of positive feedback.

This month, the support has been extended to remote mobile users with the release of NetScaler Gateway 11.0.62, and the new version 6.0 of Citrix Receiver for iOS added Framehawk support.

Check out the latest Framehawk Administrator's Guide for updated instructions.

Framehawk UDP used for much performs his magic, which works a little differently from the TCP world we Citri-Xens (yes, I just made that word up) are used.

Thought I would some of the quick and dirty tips and tricks collecting in the area learned to help Framehawk accelerate proof-of-concept testing. I will update keep this site as we learn more, but feel free to add your own tips in the comments to add (that's what community is for!)

Standard Disclaimer before we continue: Citrix does not support or guarantee for the use of tools mentioned in this article. These steps need not be performed in the production environment, unless instructed by Citrix support to do this.

1. Check on the endpoint, the Framehawk used

Typically, the protocol for the end user is invisible because all they care about law user experience is. The DisplayStateGUI.exe can for administrators in early demonstrations to ensure that they have the correct settings to be useful. In its first release, kick Framehawk is only when certain conditions are met, as described in the Administrator's Guide. Citrix Engineering developed with this small program for their internal use, which exposes the log information at the end point. It runs a banner on Windows endpoint contains the state of the display channel, either Thin Wire or Framehawk (as "LFP" shown).

The more official way to do this to extract information using session details in Director, where a new metric ( "Graphics - Framehawk") has added the HDX Statistics:

So, here is where you download you can set the tool to use is available, without any guarantee or support, as it is, your non-production evaluation help: DisplayStateGUI.exe

2. Check Framehawk functionality on the VDA

another quick tip to execute a command to validate that were applied to enable the settings Framehawk on the virtual machine (where VDA is installed). Looking for these two pieces of information in the result:

• Component_Provider = VD3D
• IsActive = Active

Use the following command line entries (CLI) on the VDA to verify that the channel is active Framehawk

1. a prompt start (as an administrator) on the VDA.
2. Enter wmic to enter the command line, and press
3. Enter / namespace: .. \ root Citrix HDX and press Enter
4. Enter path obtained citrix_virtualchannel_framehawk_enum / VALUE and press Enter
5. ensure that Framehawk specific data (see above) is returned.

3. IPerf With Framehawk ports available through firewalls

to check Another note: iPerf is an open-source tool, freely available on the Internet. For more information about IPerf (including binaries and documentation) can be found here. Citrix does not support or guarantee for the use of this tool in a production environment.

IPerf is often used by network administrators to check network connectivity and performance under load. In this case, it makes sense, available to the defined UDP ports to confirm the connectivity between Citrix clients and servers to, especially in the presence of firewalls. Framehawk uses ports 3224-3324 by default (this can be changed in the policy). For remote access with NetScaler to enable its port UDP 443 needs open to any external firewall secure transport of datagrams. IPerf is run on two machines, in each case at the two ends of a network. simulate For the purposes of Framehawk UDP traffic, we recommend that are IPerf server mode to VDA and UDP traffic on the remote client running (with Citrix Receiver) outside the firewall network IPerf in client mode set . If the connection fails, it's time to pursue with the network and security teams to open ports on the firewall help check

IPerf use to Framehawk port availability .:

1. Download and install IPerf on the two test machines
2. Run IPerf in server mode on the VDA (referred to as "listening" mode):
. C: > iperf -s - p (PORT)
3. Run IPerf in client mode on the computer running Citrix Receiver is installed (hereinafter referred to as "Owner" mode) , with -u switch for UDP
C: -b > iperf -c (IPAddress) -p (PORT) -u (SIZE) m -l (MTU) -t (SECONDS)

the following example shows the output in the UDP port available:

c: Temp iperf-2.0.5-3- win32> iperf -c 54,204,250,164 -p 3222 -u - b 6m -l 1440 -t 10

--------------------

client connect 54,204,250,164, UDP port 3222

send 1440 bytes datagrams

UDP buffer size: 63.0 Kbytes (default)

- ----------------- -

[  3] local 53235 192.168.1.101 port connected to 54,204,250,164 Port 3222

[ ID] Interval transmission bandwidth

[  3] 0.0-10.0 sec 7.15 MBytes 6.00 Mbits / sec

[  3] Sent 5210 datagrams

[  3] Server Report:

[  3] 0.0-10.0 sec 7.15 MBytes 5.99 Mbits / sec 2,689 ms 0/5209 (0%)

[  3] 0.0 -10.0 sec 1 datagrams out-of-order received

the following sample output shows where UDP port has been blocked by the firewall:

c: Temp iperf 2.0 .5-3-win32> iperf -c 54,204,250,164 -p 3222 -u -b 6m -l 1440 -t 10

----- ------------ ---

client 54,204,250,164 port UDP port 3222

send 1440 bytes datagrams

UDP buffer size: 63.0 Kbytes (default)

--------------------

[1945026connected] local with 54.204 58947 192.168.1.101 Port .250.164 Port 3222

[ ID] Interval transmission bandwidth

[  3] 0.0-10.0 sec 7.15 MBytes 6.00 Mbits / sec

[  3] Sent 5210 datagrams

[  3]. ATTENTION: not after 10 attempts ack the last datagram received

Other considerations for a successful demos and evaluation

avoid these common missteps your Framehawk evaluation in a making laboratory environment successfully. In a true WAN environment, you would not run into these situations in most cases. They are relevant for simulated WAN (with some kind of WAN emulator to produce the loss and latency)

Consider the following best practices .:

• Set the bandwidth and latency on the network emulator before to connect.
• Disconnect and close the session every time change the bandwidth, packet loss or latency, to allow new calibration, by the Protocol during handshake.
• do not limit the bandwidth on the WAN Emulator. Emulators rarely replicate the opportunity for instantaneous peaks that are allowed in real WAN. Uncapped bandwidth is to demonstrate a more realistic user experience, and the average bandwidth will automatically limit.
• on iOS, switch automatically rotate and adjust automatically. Use in landscape mode for best experience

Note . The Framehawk virtual channel at the time will not be recalibrated in session if latency or bandwidth can be observed changes

Share your experiences

We would like you to listen to the innovative application- ~~ POS = TRUNC, which are now possible thanks Framehawk. This is a first version of the new protocol HDX and evolve is based significantly on community and customer feedback. Keep sharing your experiences, tip and tricks, and help questions on the newsgroup to others with the collective wisdom.

Recap: iOSDevCamp 2015 -

About a month ago, iOSDevCamp hosted its annual hackathon at the headquarters eBay in San Jose, CA. The goal? Create a new app, company or even a new world! The atmosphere was electric and the town hall was ready to be filled with more than 0 participants for the long haul.

With Citrix as a sponsor had Octoblu team the opportunity to represent Citrix on the event. packaged We are giving with the aim of the team in iOSDevCamp an unfair advantage. gave

to San Jose bags of goodies (Octoblu T-Shirts, Price, micro controller and portable devices) and headed to kick-off, our own Chris Matthieu and shortly after an exciting short demo Octoblu to participants the introduction, we began to give one-on-one live demos of Octoblu streaming data between devices and APIs.

As the event unfolded, we meet with some great teams, talked about some crazy ideas and supported teams in their applications with Octoblu. We had teams Octoblu to tweet with text messages, send control speaker, detects movement and even a car (Tesla Model S) to control.

One of the winning teams and the winner of the Citrix Price developed an app Carpe La Vida, called the portable health technology uses to focus on road safety. The app uses to recognize a Myo-or any other portable device, if a driver has a seizure or falling asleep. The demo showed Carpe La Vida detect a seizure to use a Myo, text messages to emergency contacts, unlock the doors of the Tesla send while flashing signals to surrounding cars transmitting through the horn honking and emergency lighting. All powered by Octoblu.

This year's event was a great success and we learned applications Octoblu one weekend a lot of support from teams build. We want to say big thank you to the organizers for the opportunity and to the participants, keep calm and chop.

To enable / disable HDX Session Idle & Disconnect Timer on Linux VDA -

Overview

The Linux VDA supports idle times for controlling how long a HDX session can be idle can, before it is disconnected, and separate timer for controlling how long can remain separate ends a session before. If an idle timer expires for a session, since no user interaction with this session, the user will receive a warning message informing them that they will be separated in five minutes.

This timer is not enabled by default, which means sessions can remain idle or disconnected state indefinitely.

Today we will talk about how to enable, configure, and disable idle / disconnect timer on the Linux VDA.

[1945001Anleitung]

Ask a Idle Timeout

to an idle timeout with the following command:

  sudo / usr / local / bin / update ctxreg -k  "HKLM / system / CurrentControlSet / Control / Citrix / WinStations / tcp"  -v "MaxIdleTime" -d   

The timeout value is specified in minutes , indicates how long a session can remain empty before the user sees the warning message. The session will be disconnected five minutes after this. The five-minute warning interval is not configurable

. NOTE:. This change will not affect any existing sessions, created only after those

Ask a disconnect timeout

You can release timeout issue the following command:

  sudo / usr / local / bin / ctxreg update -k  "HKLM / system / CurrentControlSet / Control / Citrix / WinStations / tcp"  -v "MaxDisconnectionTime" -d   

, the timeout value is specified in minutes, indicates how long the session before remain separate completed.

. NOTE: This change will not affect existing sessions, and only after those created

disable idle and disconnect Timer

either disable this timer, set its timeout values ​​to 0.

  sudo / usr / local / bin / ctxreg update -k  "HKLM / system / CurrentControlSet / Control / Citrix / WinStations / tcp"  -v "MaxIdleTime" -d 0 sudo / usr / local / bin / ctxreg update -k  "HKLM / system / CurrentControlSet / Control / Citrix / WinStations / tcp"  -v "MaxDisconnectionTime" -d 0  

- With Octoblu activate the facade workflow approval process

If you have 3.0 following along with Richard Hayton recent posts on the publication of storefront, you have probably noticed that we allow storefront with a set of APIs to configure and use it in the way that best match your environment.

, the blog post series is great, and I recommend to check out, as this article is based on them. You can Richards posts here, but be sure to read X1 DIY approvals and Citrix Recipe Box. Storefront approvals, as they are based on what we are talking about today

Because this article contains several sub-parts, we will make this a series of articles, we can down detail in so break each of the steps. With that said, let on Octoblu receive so that your users to access applications to process request, via the storefront API

Overview and Setup .:

This is be more of a general overview of the process and a high level how-to technical articles, and we show you how the storefront / Octoblu up and running integration.

The scenario is that we. A number of applications that we want to display to all users, but only to provide access when the user requests the application A typical approval workflow, handle the workflow engines.

There are a few steps that we need to perform to enable storefront to understand that an application needs to ask for permission. I have the below. Enable to set

• applications showcase sketched state in a holding pattern.
• Set to enable the approval process
• Build a monitoring application subscription database for "pending" application to search the published application.
• Build a Octoblu workflow that handles the process flow for the request, approval. or an application under Deny
• Build / Deploy intermediate page that allows a manager to approve the request

First step :. Activate showcase for workflow

There is an adjustment DLL that we make available that you must fall 3.0 directory in your storefront. Richards Blog (X1 DIY approvals) are the instructions, but I have copied here, as well.

1. Visit to allow the directory to the store for the workflow. For example, C: inetpub wwwroot Purple
2. Edit web.config in this directory and add the following to the end of section
   
3. Download the DLL from here and there into the bin directory store (for example, C: inetpub wwroot purple bin)

step Two: Setup to enable a published application (s) workflows

Now that we have configured storefront, we need to modify the published application (s) so that storefront, knows that it is a workflow-enabled application. have to ask in the description of each requested published application that you want the user to access: This is achieved by adding "WFS keywords". Below is an example of the Properties screen of a published application that did the Description field with the appropriate keywords

Step Three :. Setup application storefront monitoring for the application to see requests.

Now that we our storefront and XenApp / XenDesktop configured application, the next step is to create an application that monitor the facade database and searching for applications that are in a "PENDING" and then trigger the Octoblu workflow and wait for a response. The basic sequence is below.

• Monitor storefront subscription database for all subscriptions to the "Pending" state.
• register with the Octoblu service to receive messages.
• For each "Pending" application, call the Octoblu workflow defined.
• process received messages from Octoblu and based on the response, either change to subscribe to the pending status of the application or remove the subscription.

Because this application is the reduction on its own an entire blog, we will build a follow-up blog on the drill-down to such use. Meanwhile, we have the application open source and our GitHub account. You can download it here https://github.com/citrix/Citrix-Storefront-ApprovalMonitoring

* If you can download it, it will run on your storefront server to start pending monitoring applications.

, it is a brief screenshot of the monitoring application and download after you find need to change a few pieces. The code for the specific check-out where to add the following items.

1. Add the workflow endpoint in the code.
2. Add your device UUID / token into the code. (Check out our Visual Studio from extension to enable you to use as a device in Octoblu)
3. Add the e-mail you want to obtain the consent of emails. We built it in this way for you to check the operation quickly

Fourth step: .. Build / provision of intermediate side to process the workflow needs

to enable fast managers to approve or deny requests on we should ask a simple web interface available that you can deploy on a web server to allow managers to approve or deny the user request. We have a skeleton page provided to the GitHub you download from this website you will https://github.com/citrix/Citrix-Storefront-ManagerApprovalSite

* If you need this software to update the code , Add your workflow endpoint. Look at the html for further instructions.

under the screenshot of the interim approval site. As you can see, there are buttons for approving or denying the application

Fifth Step: .. Align the Octoblu workflow for requesting application access

the final step in this post when the create the Octoblu workflow that the request and approval / denial process will handle. We have a plan made available to start download. You can access

https://app.octoblu.com/bluprints/942daf81-6d50-4fc3-ab66-e7ab415fee69

The workflow design here as a general overview - the workflow for some looks data that has been posted to the workflow. It will then determine whether the request is a "use requirement" is or if it is an approval / denial of request. Based on the type of request, the workflow route at different paths. One interested note is that this workflow communicates back to the monitoring application (step 2) to inform them of what it needs to do.

to this workflow to import into your instance of Octoblu own and start your node work through and see how we built the request process

Following is a brief screenshot of the existing workflow .:

as a final note, this article is meant to provide a better overview of the process and some technical information on how it was implemented. We work additional sites on delivering on each of the steps to drill down to have a better understanding of the whole process, but in the meantime, download the code and workflow and let us know what you think.

As always, feel free to reach me on twitter (@johnmcbride) or leave a comment on the post with questions or comments.

John McBride / Developer Advocate

Como reduzir o custo ea complexidade de implementar Espaços de trabalho e móveis virtualizadas aplicações? -

para responder a ESSA frequente pergunta de clientes nossos, iniciamos to trabalho Conjunto com a Nutanix.

a Nutanix to parceiro Citrix Ready, é um Provedor Privado de infraestruturas hiperconvergentes que são vendidos no mundo inteiro por distribuidores e Fabricantes de equipamentos originais, como a Dell. Como resultado de nossa colaboração, uma solução conjunta - que o inclui Nutanix Acropolis, XenApp XenDesktop e - estará disponível em setembro. Quais os Serao Benefícios dessa parceria para clientes nossos e Parceiros?

• O cliente Podera contar com uma simples solução, escalável e rentável para implementar a virtualização de Espaços de trabalho e aplicativos, garantindo uma ótima experiência para o USUARIO. Além disso, a solução também simplifications implementação de Redes virtuais usando o Citrix NetScaler, Além da sincronização e compartilhamento de Arquivos com o Share File. Não menos importante, a solução conjunta reduz o custo ea complexidade de gestão em aproximadamente 70%.

• Os Parceiros de ambas as empresas de poderão aproveitar ciclos de venda corn rápidos, além de configurações simplificadas durante a fase de implementação e maior desempenho. Isso deve tudo mais garantir satisfação para seus clientes.

Para saber mais sobre a parceria com a Nutanix, convidamos para um Webinars que será realizado em 22 de setembro, [noqualserápossivelconhecermuitomaiscom Christian Reilly e Kees Baggerman as Nutanix.

Load Balancing redefined: NetScaler integration with IBM Cloud Orchestrator -

This was one of the most interesting projects in my long career with Citrix and, more specifically, with NetScaler

In more than 11 years I have seen NetScaler grow from a niche product to one that serves a much wider range of applications. As part of my role as Senior Director of Product Management, I am responsible with a wide strip of partners to find creative solutions and help our joint customers.

Citrix recently the NetScaler Content Pack IBM Cloud Orchestrator, , in which we define tackled on an interesting journey towards, Load Balancing and ADC requirements for all applications cloud. IBM and SoftLayer are marquee customers NetScaler and we work together as a business and technology partners. The NetScaler content package for IBM Cloud Orchestrator was developed and delivered to work with IBM engineers in Bangalore to help our joint customers with all their needs ADC while they build their public, private or hybrid cloud infrastructure. See Mike Ballengee blog published to learn more about the announcement.

Here's more about how you can use the Content Pack, and also focus on some of its cool features.

manage
• Start with Load Balance device
  • Register NetScaler device
    • Make basic management information such as IP, user, pass, etc.
• Unregister NetScaler device
  • Select to deregister. the device you

you want to set up the device, the next step is to load balancer instance after registering or configure.

As you can see here, the load balancer instance configuration via the new Admin partition infrastructure is passable NetScaler. This means that you define Soft ADC instances on NetScaler virtual or physical devices.

This infrastructure gives you the flexibility to carve a single NetScaler appliance in 512 independent instances that can be used for certain purposes, while the instances define, you need to provide bandwidth connection limit and storage requirements. This practically defines how many soft instances that you can have on a device. All these instances are discarded at the network level, data plane and management plane. This is extremely useful to share infrastructure for enterprise app deployment or service provider applications where you need the ADC appliance or infrastructure across multiple apps or tenants.

While you define the Soft-ADC instances, enter the VLAN associate for the traffic flow, which helps to separate the traffic between instances. This infrastructure also allows you to IP-duplication across instances have required together for the cloud-based scenarios.

You can always go back and change the instance parameter setup in the beginning, including changes to VLAN association had. The content pack allows the establishment of central measures load balancing and also allows you to configure the SSL certificate / key and other parameters. SSL is a given use cases for cloud security of significant value is must have.

Another interesting feature of the content package is the ability to define Content Based LB pools . Content-based pools function at Layer 7, where the definition and selection pool on L7 properties based incoming traffic. For example, you can tell if URL contains "XYZ" then select that pool and similarly you can use any other parameters of the payload to define pool selection guidelines. These guidelines are based on NetScaler advance policy infrastructure language and are extremely efficient and user friendly. You can also priority to the policy in connection that provides additional flexibility in decision making.

These are some of the great features that distinguish NetScaler integration with IBM Cloud Orchestrator. We truly believe this integration unique value for our customers and partners with our technology provides various forms of cloud infrastructure to help build.

Storefront 3.0 scalability -

Shortly after I my Storefront 2.6 scalability wrote articles we published Storefront 3.0. And we finished our first round of internal hard-core performance and scalability tests recently, so I have to share some of the results and updates.

Let's get to it, shall we?

SSS, General Sizing & Deployment Guidance

This has not changed a ton 2.6 to 3.0, although generally we have some great performance improvements made across the board in 3.0, and we can now support about 10-20% more connections per storefront box. But I would still recommend obtained starting with 2 or 3 Storefront nodes with 4 vCPUs and 8GB of RAM and this should be at about 150-0k connections per hour (with a registration rate of 50 requests per second). And before where we 5 "capping" the number of nodes in a server group recommended that we are comfortable and can support up to 6 nodes in a single server group (I need another entire article in the " to explain why "behind it, but believe me right now). But the VM specification still seems to be the sweet spot, and most customers where they need to be. So what has changed?

Auto-Provisioned Apps with RfW

The scalability of auto-provisioning applications RfW where storefront is rolled to new user that has been in 3, 0 compared with 2.6 significantly improved. We have some core tweaks storefront, which reduces the number of round trips on the various delivery services, the improves response times by 80% and the overall system throughput by 140% ! To put this in perspective, if you can now provided 5 car apps somewhere in the neighborhood of 125k connections per hour in 3.0 support (compared to 60k in 2.6.). And if you have 100 auto-provisioning applications will be rolled out for new users, we can be reached in about 15k connections per hour now, while facing with 2.6 we fought really consistently log on users and enumerate resources and experienced outages from time to time , So this is a great improvement worth mentioning and very important for those RfW use with auto-provisioning applications.

Garbage Collection

We realized in SF 2.6 that we had a problem with the overall system throughput. As it turned out, we were the default workstation garbage collection (GC) is used. So one of the most important changes we made was in the 3.0 version to implement server GC, which is a recommended practice for ASP.NET applications on multi-core server actually. This led to increased throughput anywhere from 5% to 28% tested depending on the specific component.

Memory usage

If you remember from my last article, I said that RfW for each user / resource versus Native receiver requires much more memory. We are pleased to report that we have worked hard to reduce the storage for each user / resource of 3K in 2.6 to 650 bytes in 3.0! As a result RfW scalability is much closer to india receiver scalability now (only ~ 15% difference is now in version 3.0).

Credential Wallet

This is something that has caught us Post-Release 2.6 and above 3.0, fortunately walked out the door. We found a problem with the Credential Wallet service under extremely high load. More specifically, we ran through the CW service a bottleneck in when an approximately 0k Auth Token ~ issued individual SF 2.6 server at any given time (basically you were limited to about 0k active user sessions). Fortunately, only 1 or 2 customers in the world ran into this issue. But we are happy to report that the problem with the CW service has been fixed in version 3.0 and we have successfully tested 400k user authorization token up .

X1

Now that receiver X1 is we, as luck would impact storefront look scalability. As expected impact on the scalability of the "Day 1" quite extensive as we ~ 0 files total are download. Compared to the web receiver API testing storefront throughput is reduced by almost 100%, if it bring about X1 application and a receiver's website at a rate of 100 requests per second. It is important to keep in mind that these results are valid only for the day 1 scenario where every user downloads the entire receiver site. On the following days or registrations of the site would be cached and scalability or throughput would not be affected. As is the case when using RfW when using X1, environments should be designed, an additional 650 bytes for StoreFront 3.0 per resource on the base 4GB of memory to enable request. This is one of the reasons why I recommend 8 GB for each VM storefront out of the gate. Another note -. We activated Integrated Caching on the NetScaler for that special X1 test, so that we could provide the caching of static content like JS, CSS, JPG and GIF files

future tests - site aggregation, PNAgent, IMA / XML

course there is always more work to do. We have begun to look at some other advanced scenarios, such as shops and Site aggregation influenced storefront scalability as legacy PNAgent affects scalability and like all those numbers could change if we 6.5-based IMA / XML farms compared to FMA are enumerating based websites (these all tests was based on the latest state). Once we put these things by our performance laboratory and have some numbers, I'll be sure to provide a further update.

special thanks

Once again, a special thanks and shout-out led to our System II Test team in the UK by Martin Rowan . OlgaK deserves a ton of credit for these tests storefront in particular. I indicate only a lot of test results and come up with size recommendations and leading practices that IMO is the easy part. All the hard work and months of testing conducted by Martins team, and none of this would be possible without them.

Prost, Nick
Nicholas Rintalan

Lead Architect & Director - Americas, Citrix Consulting Services (CCS)

Citrix Ready Spotlight Video Contest 2015 - Winners announced -

In Citrix Ready, we have an exciting two months spent 2015 Spotlight Video Competition Hosting personally it was to see a lot of fun, to promote and make the video finished. Submit A big thanks to all participants for such creative videos. It is now time to announce the winner of the Spotlight Competition. So, here it goes!

Praim, pure storage and triCerat take the top spots.

Check how triCerat the Admin Andy is fighting for truth, justice and the IT-way; and how Pure Storage announces the news, offers hope for virtual desktop users suffer SVS (slowly VDI syndrome). Even Nadia of Praim is successful in the turbulence in by an IT man caused office handling that busy playing is. You see a look at the video how to move these stories out, and finally save the hero of the day.

seem to have the audience, these videos have garnered a large number of votes due. Congratulations to the winners! We admire not only the video, but also products that you have created and integrated to Citrix technologies.

As part of the prize, the winners take away a few exciting Demand Generation Campaign, a podcast with DABCC and a campaign with TechTarget. While Joint Podcast will help the interoperability of partner products and Citrix technologies, to highlight that campaign with TechTarget is leading produce quality.

Take a look at the winning videos: http://www.citrixreadyprogram.com/spotlight_contest_video/vote/index-winners.php

Subscribe to our YouTube channel for more such videos

Free XenMobile Course Preview of Citrix Education -

Try it before you buy it!

The new course release of Citrix Education, CXM 303rd Deploying enterprise mobility solutions with Citrix XenMobile partners and customers with the capabilities, 10 enterprise solution

During the five-day course allows the installation, configuration and integration of components in a Citrix XenMobile provide students and configure to the XenMobile Enterprise components apply principles enroll mobile devices install mobile applications and terms of use Manage device and application use in a laboratory environment. In addition, issues such as additional Citrix to integrate products and applications as part of the solution and how some of the common issues of implementation discussed fix.

If you are not sure if this is course for you, please course architect Matthew Brooks, the right to participate for a free, one-hour webinar. During the webinar, Matt an overview of the first two modules of the course will be " Introducing XenMobile " and " XenMobile architecture " gives you the opportunity to evaluate course content in front of committing full class.

, the participants of the webinars are also for special offer of Citrix Education !

Register. For the webinar here considered

See Citrix optimized app delivery to AWS at re: Invent -

may While the cloud provide powerful financial, operational and economic benefits, the return on your cloud strategy can rest on something as simple as the reliability of Internet connectivity to your offices. Too often, making concerns about how to manage effectively to protect and the performance can be maintained by business-critical applications their local applications to the cloud companies migrate hesitant. Join Citrix at AWS re: Invent - Las Vegas, 6 to 9 October 2015 booth # 741 to learn how we solve this problem

As part of the core Citrix philosophy of "anyness". we are helping customers regardless committed where they run their applications, or where or how they are delivered. be performed for customer applications on AWS and other cloud environments, Citrix offers the tools and visibility of application availability and mobile compatibility with a wide usability combined to ensure. With Citrix NetScaler and Cloud Bridge to optimize your public or hybrid cloud infrastructure and manage, secure and maintain the performance of native and virtualized applications everywhere they are accessed and used.

NetScaler Unified Gateway ™

NetScaler optimizes, secures and controls the deployment of applications of AWS and other cloud environments. 11.0 NetScaler now includes new features with specific value for customer applications in AWS run

• Unified Gateway -. NetScaler Unified Gateway consolidates remote access infrastructure IT to simplify and simultaneously allow users to access virtualized, native, web and cloud applications from any kind of device. For customers, XenApp or XenDesktop on AWS, NetScaler with ongoing Unified Gateway provides more intelligence, flexibility and security for applications, wherever they are accessed and used.

• Support for TLS 1.2 - As businesses face unprecedented threats to their data, offering NetScaler greater protection than ever with support for TLS 1.2- encryption protocol. This provides a secure channel for all types of communication, whether. Between local data centers and the cloud, or between mobile users and companies

These new features complement NetScaler performance optimization and security features enabled by global server load balancing (GSLB), site-level load balancing, SSL offload and Web application firewall to protect against threats from DDoS attacks, SQL injection, cross-site scripting and buffer overflow including. Increased visibility helps manage IT traffic and balance workloads with granular insight into application performance.

Because NetScaler the same binary. In various form factors and platforms-cloud or on the premises, whether physical or virtual customers enjoy a high reputation uses and feature-speed, no matter how or where they run their applications Learn more about the new features of NetScaler security features and an enhanced user experience: www.citrix.com/netscaler.

Cloudbridge with Virtual WAN

Cloudbridge are companies network managers the flexibility to implement an app from the datacenter or from the AWS cloud with the high degree of reliability and visibility. An encrypted IPSec connection of data center cloud ensures high security. Network optimization and application acceleration capabilities accelerate minimizing data transfer and network costs. These features include TCP flow control, data compression, deduplication, video caching and optimizing chatty protocols. Hop-by-hop visibility IT system to monitor health and helps the sources for app delivery problems.

Virtual WAN, a new edition of Cloudbridge published with Citrix Cloud Bridge 8.0, provides an even higher availability, scalability and cost benefits through virtualization multiple network connections, including both MPLS and cheaper broadband connections as a single connection to act. This ensures high performance for applications, whether delivered from the data center or the cloud even in case of a failing network connection. Visit to learn more about this site Cloudbridge and WAN Virtualization: www.citrix.com/cloudbridge.

Together Cloudbridge and NetScaler ensure the availability, security and performance, you need to mobilize apps in the cloud, without having to worry about the quality of the network connection. For the user that uninterrupted productivity wherever their work takes them and the agility to use resources wherever your business takes you

Come Citrix on AWS to see Re :. Invent booth # 741 to learn more about using Cloudbridge and NetScaler availability, security and visibility for applications in the cloud, to ensure that is running.

Determine number of Citrix users -

When planning for the future, customers often want to know how many unique users actually their Citrix environment (s).

When a customer with the user / device licensing model, so the customer is, by can begin C: Program Files (x86) Citrix Licensing LS udadmin -list of the command line of the Citrix license server, based on Citrix documentation: license administration commands.

For customers who can not use this option, for example, customers who have the same or mixed licensing models customers who have multiple sites / farms, or those who want to set a certain period of time to users monitor, this blog provides the steps for an organization to determine exactly how many people in a given period, to retrieve a Citrix environment.

security protocols are a great place to find login / authentication information. Since the user must go through a web server to access a XenApp / XenDesktop session, the security protocols on a storefront / Web Interface server provide information about each user who logs in a Citrix environment. Specifically, Event ID 4624 indicates when a successful Registration following Microsoft Support .: Description of security events in Windows 7 and Windows Server 08 R2

Thus, by displaying the properties of Event ID 4624 on the security protocols of the Web server administrators can view account names that successfully accessed a Citrix environment. organize multiple applications from multiple web servers, but the security protocols in a customizable spreadsheet tool such as Microsoft Excel requires to be exported.

Unfortunately save event logs to open a CSV file or the file directly in Excel, do not produce all the necessary information from the Event Viewer, including account names. to obtain a remedy, the account name of the security protocols in Excel is to save the logs as a text file to copy the data to Microsoft Word and then copy the data back into Excel. These steps are described in detail below

. Note: Before you try these steps, determine the time users to evaluate (ie 1 August 2015 to 5 August 2015) and the storefront / Web Interface servers that allow users to access Citrix (ie WebInterface1, WebInterface2 , StoreFront1, StoreFront2). Microsoft Word and Excel are the following exercise complete required.

1. Navigate to the Event Viewer for a Citrix Web servers in the environment and perform the following steps to obtain the logs show the account logins:

1. Filter the security protocol for the period under scan [1945003BenutzerdefinierteBereich] (ie 1 August 2015 until August 5, 2015)
2. Enter the event ID as 4624
3. search for matching keywords audit success
   Note: for large environments, the Custom range field may need for the August 1 smaller logs (ie a protocol to be divided, 2015 to August 2, 2015 and a second protocol for August 3, 2015 to August 5, 2015).

2. Save the log as Text file (ie WebInterface1.txt) and complete the following steps to provide the necessary data to get to Microsoft Excel:

1. Open the text file with Notepad
2. copy all the data from the editor and paste it into a blank Microsoft Word document [1945009(ieWebInterface1txt)]
3. Copy all data from Microsoft Word and paste it into a blank Microsoft Excel sheet
   Note: If all the data does not fit on one page of Microsoft Excel, a subsection of the data from to copy Microsoft Word into a Microsoft Excel spreadsheet. Then, copy a different section of Microsoft Word to another Microsoft Excel spreadsheet. Continue until all the data from Microsoft Word is entered in Microsoft Excel.

3. From Microsoft Excel, follow these steps complete no longer remove unnecessary data: Delete

1. lines 1-3
2. Delete column C
3. column A delete references to filter all the data in columns A and B, then filter column A

4. Mark by account name:

. 5 Copy the account name (column B) in a new worksheet in column A

Note: If Repeat step 5 for other Web servers, please add the copied account name in this worksheet. Do not create separate worksheets for each Web server.

6. Repeat Steps 1-5 for each Citrix Web servers in the environment.

7. Highlight column A and remove duplicates to remove users who are logged in multiple times.

8. View users who accessed Citrix (ie 5 users)

Note: .. Check list of users, to ensure that no computer accounts listed

[1945002Zusätzlich]

, I would like to thank the following people for their contributions: Nick Rintalan, Andy Winiarski, Dan Ruggiero, and Lee Milam

up. the next time

Steve Krueger,
Citrix Lead Sales Engineer

Citrix wins a NetApp Innovation Award with AFF FlexPod -

every company is focused on rapidly introducing new technologies online today, with higher quality, value-added and drive Citrix is ​​no difference ,

If we needed to accelerate our development cycles, the NetApp All Flash FAS in a FlexPod platform, a converged infrastructure solution from NetApp and Cisco, made it possible for us to perform faster automated testing, reliable, in a large scale. Now NetApp has distinguished our work with 2015 NetApp Innovation Award. We are proud of the success of our engineering team, but we are also excited to present our project to the benefit of other organizations that may benefit from a similar approach.

We will be discussing the project in detail in NetApp Insight® in Las Vegas, Nevada October 12 - 15 come see for yourself

, the business case for our FlexPod with NetApp All Flash FAS implementation was simple. In order to accelerate our development cycles, we had wasted inconsistent eliminate build leading and focus on more automated test execution results triage time. This is called for a more robust infrastructure platform.

We were already familiar with the benefits of FlexPod, a now proven solution its fifth anniversary and is celebrating more than $ 3 billion in sales. Citrix has had a long and productive relationship with NetApp, and we have always made extensive use of NetApp storage solutions. Nevertheless, we have to evaluate our due diligence in a variety of Flash storage solutions and NetApp chose based on both its performance, flexibility and rich data management capabilities as our existing partnership.

Introduction NetApp All-flash arrays in our software development process reduces memory latency time ~~ POS = HEADCOMP up tenfold, so that we have the response times to our developers in the range of 0.3 to 0.5 ms to deliver. With reliable sub-millisecond latency and support for NFS, the solution was the perfect solution for our needs; it is no coincidence that virtual desktops are a popular workload on FlexPod.

The results validated our choice. The solution makes it possible to build for our developers automated tests quickly and lead to as many as 125 automated tests simultaneously high consistency and reliability. That gave our engineering team's scale-out capacity, performance and uninterrupted operations, it needs to provide new features in our flagship XenApp and XenDesktop product lines with high speed and quality.

more about our FlexPod project out in the detailed study NetApp case and Net App Innovation Award Press Release.

We hope that you will be able to join us at NetApp Insight for NetApp Innovation Award ceremony on 13 October 2015 our FlexPod project to celebrate along with other transformational services. More importantly, we ask you to visit us at the event, booth # 401 to learn more about the great work we with NetApp and Cisco on FlexPod and find out who done, how in similar benefits the organization can achieve.

AceIQ makes CleanSweep Citrix specialist tracks -

partners who know drifting towards monumental success, how to deliver value to the customer.

These partners can secure their strategic business and IT discussions with technical skills and knowledge. Citrix specializations enables partners to increase customer satisfaction, drive by technically focused commitment.

Citrix has so much simpler solution

partners to differentiate the only complete solution for the customer access to information issues and make business generalist competitors and customers of partner expertise in a technical competence benefit, end-to-end sales capability and service delivery in the areas of virtualization, mobility and networking.

Sweden Golden Globe recognition of Citrix specializations

AceIQ a Swedish Platinum Partners first in the Nordic countries was to make all four Citrix specializations and in the first group in Northern Europe, EMEA and worldwide.

Citrix CEO Mark Templeton congratulated on this achievement AceIQ CEO and co-founder, Håkan Andersson : "I have the founder of AceIQ for many years follow luck their Citrix travel and I am now happy that she is the first company in the world and the first in the Nordic countries, which have completed the requirements for our technical program. I believe that this is of which only the beginning, what we have driven by this and expanding companies from Sweden see. "

Andersson has a long history with Citrix.

asked for his perspective on the remarkable success of the company, he said: "Access to information is becoming increasingly important all the time, and Citrix is ​​the only complete solution for solving customer information access issues and make business so much simple has. "

He quoted XenMobile as unique offer for mobile companies of today, welcomed the recent renewed emphasis on XenApp to be the best and most cost-effective App Delivery platform , which stated on the Popularity of Citrix Workspace Suite .

In addition, I am excited to just $ 700,000 deal closed with a multinational customer for XenMobile companies and Citrix Workspace Suite licenses Add AceIQ.

Surpassing challenges and increasing success

founded in 2010 and achieved AceIQ platinum status in just four years, and now serves large enterprises and medium-sized businesses with a variety of challenges. A common scenario is the need to support mobile employees.

Specialist allows AceIQ his technical skills in the mobility management to prospects and customers to demonstrate. In addition, will provide with great success AceIQ private cloud solutions on Cloud Platform and Cloud Portal for companies based that are hesitant to use public cloud services.

When it comes to the production of AceIQ target verticals Citrix offers the possibility of one device to another in the production running around while engineers HDX 3D Pro benefit , which makes it much faster and easier, their projects to run.

Andersson said his company delighted and the demand for its services preparing for the future by hiring highly qualified Citrix specialists , and the creation of a trainee program for new people promise.

"We are happy to call us a Citrix specialist partners . It is important to show customers that we are always at the forefront with Citrix technologies."

to Specialist Step up

I strongly encourage partners to begin your specialization trip today. If you are a Citrix partner currently, visit for more information about Citrix specialist Citrix Partner Central. If you are already a member of the Citrix Partner Network are not, be a partner and grow with us

---

Stay connected - follow us on Twitter at @CitrixSpecial and @CitrixPartners ; on LinkedIn at Citrix Partner Network and Facebook at Citrix Partner Network .

9 thoughts on Workspace supply chain management -

How Citrix Workspace cloud is Adding It's Business Value

The role of the CIO - in fact, for all IT - changing. will be jobs that used tactical engineering and integration of technology in morphing strategic positions instead integration external services. As I have already observed in the past, turn provide CIOs IT chain managers, and it is happening now more than ever.

This is one of the basic assumptions we when Citrix Workspace cloud to develop. Unlike monolithic IaaS or PaaS Cloud, Cloud Workspace is developed to a be integration of services and management platform . It focuses on the integration in a number of infrastructure and workspace to facilitate services that may be located in different places and / or Cloud respectively. The result is a new IT integration platform based on the provision of business located (not technology) focused results.

While thinking about this as part of Workspace cloud, I have noticed a number of generalizable principles across multiple applications, as well as some of specific Principles for the development of secure mobile workspaces:

General principles - for IT chain integration

[1945008liefern]

build, not build - more than ever, IT itself must provide the classic buy-versus-build question: in the business of building / operation any [theyseinsollte software at all? If so, what compelling business or competition requirements (ie data sovereignty, security) drives the decision? If a driver does not exist, must the IT vendors can operate non-critical services

2. Consume services, produce no applications -. There should be a consumption adopt model for services not in the business of running applications be. Your time should be spent on higher-value activities such as integration and workflow services to provide services to

3. Think Hybrid think first SaaS first -. No single cloud or outsourcing approach for all. Each modern strategy for service management and outsourcing must assume hybrid cloud and has to take multiple SaaS vendors. Like any other vendor strategy, has IT changes over time will happen to take, thereby limiting vendor options open.

4. The object is to focus on business results, not the technology - Today, IT goals must additive to the business to be - not simply play a supporting role. In the past, often focused on reducing costs, but today they should be located more focused on strategic company activation. So, if you think about sourcing and integrating services, the objective should be to enable line-of-business -. to shave No cost

Specific principles - for workspace Integration

a workspace Supply Chain in the building, we turned here at Citrix, these principles developed tools companies them to help exploit. The following design principles for Workspace cloud extends the four above-mentioned principles in a platform that is fast, easy and flexible to use:

5. assembly of core services enable - For the average information worker include a digital workspace of different services that can be purchased from different places, such as desktops, applications, storage, device control, access control. The core of each chain workplace supply should by most / all of these exist. Some may be inherently SaaS cloud services - others might be local. It all depends on constraints such as security, compliance, technology "bench strength", and of course economics

6. Anticipate the need for multiple services and multiple workspaces . - Can be used, the average information worker many applications and services, and each worker type require well different amounts and combinations of these. Therefore, dozens expect if not to integrate hundreds of applications in different families Workspaces -. Place a worker for each type

7. choice - As a Supply Chain Manager, IT must ensure that the manufacturer of choice is preserved. This principle extends beyond where SaaS services are from and continues on to the IaaS resources as well as live. You want to keep control of where the data, IP and confidential information is. For example, hook-up in a single cloud for execution of service used, you may not have the long-term flexibility you need or require.

8. Rate Floating technology on value rather than on driving costs down - As a strategic enabler of the IT supply chain managers should understand Line-of- Business needs now and in the future are. For example, rather than go at the expense of the management of desktop hardware, it takes more energy to concentrate on more value in transportation - making desktop access mobile, accessible and safer. Focus on value-add services assemblingin like file sync and sharing, mobility applications and / or Unified Communications

9. Do not forget :. be your boss found employee productivity must - In the end, it should enable the goal of workers to better do their job. Focus on productivity, user satisfaction, flexibility. Tools such as Workspace cloud are designed around these principles:

• - speed response to the needs of employees or the competitive pressure
• Simplicity - ease of selection and integration immediately new services or functions
• choice - the ability to source services from any cloud

How Citrix helps

Citrix Workspace cloud is more than a new delivery mechanism for Citrix technologies. It is a platform to accelerate and simplify IT, quality service Assembly helps. In the coming months you will see Citrix to add even more types of services -. Increasing the width of the control it is if high-quality workspace services that absolutely your employees inspire

Linux Virtual Desktop: Complex Active Directory environments -

Linux Virtual Desktop 1.0 supports both single and multiple Active Directory domain environments, but is limited to a single forest. We have sorted this. The new Linux Virtual Desktop Version 1.1 now supports most complex cross-domain and cross-forest topologies and is very close parity with the Windows VDA function.

user on the Linux VDAS registration via storefront can now reside in any trusted domain or forest. Transitive trusts, one-way trust relationships, selective authentication and all domain functional level of Windows Server 00 Native or higher (with the exception of Windows Server 03 Interim) are now fully supported.

Linux VDAS communication with Delivery Controller on forest boundaries is also now supported. It only difference between the Linux and Windows VDA is that the Linux VDA these relationships Forest Trust requires to be two-way. Support for one-way trusts to the Windows VDA is to "fall back" Kerberos to NTLM authentication, which is less than ideal from a security standpoint. We decided to implement not NTLM-enabled services in Linux VDA. Note that this only applies to VDA communication with controller; VDA domain has only a one-way outgoing trust with the user domain.

The good news for Linux virtual desktop client, which is to migrate their single domain / forest PoC environment into a complex cross-forest production environment that the process is fairly straightforward. If the forest or external trusts exist, DNS is properly configured, and the underlying Linux Active Directory integration works as it should, then the Linux VDA should just work. No special configuration is required VDA.

It is also worth noting that if you are struggling with Winbind or have concerns about how well these stand up in the production process to the commercial alternatives want to consider. Centrify Direct Control (including its free Express Edition) and Products Services Quest Authentication Dell are two leading enterprise-class alternatives that are worth a review. We recently support for Centrify in Linux Virtual Desktop 1.1.

To read more of the Linux Virtual Desktop Team, you should check all of our posts here.

Troubleshooting WorxMail APNs -

WorxMail APNs Troubleshooting

To a real-time e-mail sync with experience have WorxMail, you must WorxMail with APNs to enable. You can find the same steps here to enable.

post configurations when you perform any problems with WorxMail APNs message, this blog will help you to debug the problem.

using make to start safely, have you take care of the requirements made necessary for WorxMail APNs

Reference Documentation .:

1. http://docs.citrix.com/en-us/worx-mobile-apps/10/xmob-worx-mail/xmob-worx-push-notifications.html
2. https://www.citrix.com/blogs/2015/06/11/mobility-experts-a-step-by-step-guide-to-configuring-worxmail-apns
3. http://support.citrix.com/article/CTX0971
4. http://support.citrix.com/article/CTX201026

There are several moving parts, the badge in WorxMail APNs notification update process involved.

1. WorxMail with the right push notification configurations.
2. iOS device.
3. APNs server
4. Citrix push registry cloud server
5. Exchange Web Services
6. Citrix listener service cloud servers.

To have the APNs work on WorxMail, we need all of the above parts setup and communicating properly. During the first time usage (FTU) establishment of WorxMail is WorxMail communicate with Exchange Server to synchronize email with Active Sync protocol

Quick river .:

Step 1:

under the FTU setup when the WorxMail configured with APNs, as prescribed in the above articles setting then first WorxMail will register for remote notifications with APNs server and turn device (WorxMail) gets from APNs Server a device token. Now WorxMail will register with Citrix Push registration server to the device token received, again WorxMail is registered with EWS for subscription ID (for a push event). In the process of registering with EWS site EWS is the request with 401 authentication challenge now responds WorxMail the authentication request with credentials that it has from the FTU. Following the successful EWS Authentication is a subscription id WorxMail (mapped to the device ID) return

Level 2 :. Every time a new email arrives in the inbox of the end user is an EWS push notification to send the subscribed units of Citrix listener service, Citrix listener service will be notified to send a message to the APNs Apple server. Apple server in-turn will notify the unit and update the badge WorxMail still.

After you have done all the configuration on which WorxMail, Post downloading Worxmail have configured, but you see no push notification badge update under checkpoints WorxMail come, then troubleshoot the problem will be helpful

point 1 :. to start WorxMail logs from the device for analysis, to collect. Once you have the logs to extract them in a folder, navigate to the folder WorxMail and search for "CtxLog_MailConfiguration" log file.

Once you open "CtxLog_MailConfiguration" log file associated with - you should push notifications listener service token (token contains alphanumeric characters 64 characters) can see. This token value should not "zero". If you set this token value to zero, then you can directly confirm away that WorxMail APNs not working

Point 2: WorxMail requests for APNs token

[1945001Navigieren] to diagnosis folder inside the WorxMail folder and open the current log file. As per flow is first WorxMail Request for APNs token. To confirm that the WorxMail have received the token, you should look for the following set of protocols which confirms that the WorxMail is able to obtain the device token from APNs

2015- 09-19T18 :. 50: 02859-0400 WorxMail INFO (4) requesting iOS device token
2015-09-19T18: 50: 02884-0400 WorxMail INFO (4) didRegisterForRemoteNotificationsWithDeviceToken - receiving device APNS token
2015-09-19T18: 50: 02884-0400 WorxMail INFO (4) obtaining device token successfully

Received token (for reference only)

deviceActiveSyncId = 56eeb7223240dbb63b124273a25fb3c6a0bf7932827965de08585cdaf78fb54;
deviceNotificationId = 1fe3ff5c6684581af6922f0cff92376dc468216bca7ea87531877b0980daf5b3;
= EMAILID 796b83a75c32179d4b025afbf187872d31fb5ec9be3ac2f3feae9336d77b0378;
},URL=https://us-east-1.pushreg.xm.citrix.com/tenant/123456780

Checkpoints:

1. If you from the WorxMail received not the device see token, make sure WorxMail is able to reach the Apple Push Notification Server
2. If They have. WorxMail network policies to "tunnel to the internal network," make sure your NetScaler is able to achieve the Citrix Push registration listener service.
3. If your NetScaler server can not respond to the push registry listener server, try splitting allow tunnel to the NetScaler policy so that the WorxMail can use the device DNS to discuss the APNs

show. 3: WorxMail register with Push Registry Service

Add to WorxMail protocols, you can see when the WorxMail with push listener service registered (in this case, the push registry server URL "https: // us -east-1.pushreg.xm.citrix.com ") with device IDs that it has received in the previous step. If the WorxMail can reach https://us-east-1.pushreg.xm.citrix.com, then you can see the Device Registration

Note . Push your registration service URL could. otherwise based on the configuration that you in WorxMail MDX guidelines have
2015-09-19T18: 50: 0204-0400 WorxMail INFO (4) commission status = ProvisionStatusRegisteringForPushNotifications
2015-09-19T18: 50: 03312-0400 WorxMail INFO (4) device Registration successfully with tokens from the server fce470ad6f11f0d3d9494e65c19868bda92091dff1dae38c4a4234e58f7e5dce

checkpoints:

1. If you happen to the push registration server can not be seen on the device registration, then make sure WorxMail is able to speak URL to Citrix push registry (*. pushreg.xm.citrix.com).
2. If you WorxMail network policies to "tunnel to internal network" then make sure that your NetScaler can be reached able Citrix Push registration listener service.
3. If your NetScaler servers at the push registration server can not talk, try enable split tunneling on the NetScaler policy so that the WorxMail can use the device DNS, talk registration server to push

Note (Imp.): if you have tunnel from Split, then you need to add the Citrix push registration server (us-east-1.pushreg.xm.citrix.com:443) on as expected background network services (MDX Policy) for WorxMail synchronization function.

Point 4: WorxMail Subscription EWS

WorxMail is registered with the EMS server, as part of EWS a 401 authentication will provide challenge that will try WorxMail to react with the credentials. After successful authentication EWS a subscription ID WorxMail offer. You can confirm the following protocols, see the subscription ID in

2015-09-19T18 :. 50: 03313-0400 WorxMail INFO (4) EWS operation name = SubscribeToPushbaseEventNotification
2015-09-19T18: 50: 03314-0400 WorxMail INFO (4) Commission Status = ProvisionStatusSubscribingForPushNotifications
2015-09-19T18: 50: 03.846- 0400 WorxMail INFO (4) inner block closure for operation = SubscribeToPushbaseEventNotification
2015-09-19T18: 50: 03846-0400 WorxMail INFO (4) receive an HTTP status code 0 for operation = SubscribeToPushbaseEventNotification
2015-09-19T18: 50: 03,846 -0400 WorxMail INFO (4) Received response string contents for operation = SubscribeToPushbaseEventNotification
2015-09-19T18: 50: 03848-0400 WorxMail INFO (4) EWS Subscribe event notification successfully
2015-09-19T18 to press: 50: 03848-0400 WorxMail DETAIL (5) subscriptionId : - GQBmdGxwZXgwMWNhczAzLmNpdHJpdGUubmV0EAAAABEsUvAkwt1IsKpqHhaQgA5F4ZVHnWDSCA ==

points to Check:

1. ensure WorxMail be reached by the Exchange server EWS site.
2. Ensure EWS site same with the same authentication method as Active Sync server is enabled. Basic authentication, NTLM authentication, etc.
3. Verify certificate that is bound to the EWS website, familiar

Point 5 :. WorxMail receives inbox folderID and the number of unread EWS

Post Authentication EWS site, WorxMail will get the folder ID that is enabled for push notifications. .: 50: 03848-0400 WorxMail INFO (4) EWS operation name = GetFolder
[1945013SiekönnendasgleichemitdemfolgendenSatzvonProtokollen

2015-09-19T18 confirm] 2015-09-19T18: 50: 03,849 -0400 WorxMail INFO (4) commission status = ProvisionStatusGettingFolderIdForPushNotification
2015-09-19T18: 50: 04436-0400 WorxMail INFO (4) Within final block for operation = GetFolder
2015-09-19T18: 50: 04437-0400 WorxMail INFO (4) receive an HTTP status code 0 for operation = GetFolder
2015-09-19T18: 50: 04,437 -0400 WorxMail INFO (4) Received string content answer for operation = GetFolder
2015-09-19T18: 50: 04438-0400 WorxMail INFO (4) Got folderId inbox
2015-09-19T18: 50: 04439-0400 WorxMail DETAIL (5) folder ID: - AQAWAGNocmlzLmJ1cmtlQGNpdHJpeC5jb20ALgAAA4tYHB9LXmFGujrRkElxHqIBAH2WBaHLe7JPv8/7wkthmdIAAAEPU8YAAAA=

Item 6: WorxMail updates the listener service

WorxMail turn update the listener service

2015-09-19T18 :. 50: 04442-0400 WorxMail INFO (4) Commission Status = ProvisionStatusUpdatingListenerServiceForPushNotifications
2015-09-19T18: 50 :. 04.752-0400 WorxMail INFO (4) call success factor for listener service updat e

Checkpoints:

1. Make sure Exchange server is able to Citrix reach listener service

More important (* mailboxlistener.xm.citrix.com.). Points:

are

1. WorxMail with APNs only at the time of the FTU. For some reason, when APNs not work you need to download the application again and then reconfigure that of the FTU.
2. For some reason, when WorxMail contact EWS site not for large amount of time, then the Exchange server will terminate the subscription ID, then WorxMail a new connection is initiated again for a new subscription ID Request ,

If you need more help on the same, you can always Citrix Support @ https://www.citrix.com/support.html

Use the "Power" ful power of choice -

There is something I like would you know everything about me. I'm a geek and proud of it!

so it should not surprise you if I say I'm a big fan of Star Wars (Episodes IV to VI, that is)! After Luke, Leia, Han (yes, we are on a first name) grew up and Chewy (as he likes to be called by his closest friends), it was great (to see an emphasis on old) the faces of our old friends in the latest trailer for the new film.

in my opinion, what makes Star Wars so successful is that the films are not as a character or a singular heroes, but that every character is important and necessary to their own critical moments. What would have happened if Han Solo not protect in sweep hatch back when he tried to blow up the Death Star? The films are more than just an individual, it is about an alliance of rebels to work together to create a successful outcome. In short, they are about the power of teamwork

At Citrix, we follow these same beliefs. That multiple pieces (or characters) are needed to a successful solution to build (or the Empire defeat). This means that the capacity need to choose the right infrastructure and software for your business, allowing you to create your success. You do not want all aspects of your solution are simply forced from one place to source, because that is what a seller wants you to do. Providers know how big to make technologies, but you know your business best. Why settle for just one?

Citrix has always understood the value and importance of choice and our clients the opportunity to create solutions that meet their changing needs. In our 25+ years as a company, partnering has always been part of our DNA. It is at our core and we know how to do it right. We are open and we are working with our partners - like the Rebel Alliance - to drive toward a common vision. In the case of IT, it's great to deliver solutions to our customers the choice and needs to be built.

While other vendors only scratch the surface of what it means to be open, Citrix has ALWAYS focused customer choice to the provision. Especially with Citrix Ready, our partners verification program that supports all types of partners and Citrix products. Often copied but never equaled, our affiliate program (also known as Rebel Alliance) is the embodiment of the customer's choice. I know I was on the team that brought it into being eight years ago. Customer choice was the number one reason why we created the program and the results speak for themselves. The program has 11x more partners and there are 10 times more Citrix products verified as Citrix Ready market marked as on the other side (the "Dark") side compared to those.

Why was this a big focus for us? Since Citrix customers have different requirements and these requirements change over time understands Citrix Ready has been purpose-built customer to enable to adapt their changing needs with reliable and verified technologies -. to end of hypervisors applications to public clouds to servers points to printers and peripherals ... I've just started'm getting. The most important thing about this partner ecosystem that provides customer DIAL . And today a decision does not mean, lock in -. It is simply a way to get started and adjust if necessary

Another incredibly important example of our support for the choice of the customer is our partnership with Microsoft . We are the Han and Chewy partnerships.

We have partners for almost as long as Citrix has been in business. Citrix understands that for many of our customers Microsoft applications and infrastructure solutions businesses are crucial and are not going away any time soon. The close partnership with Microsoft provides a high quality customer experience and offers unique technology integration and interoperability. We are oriented to work in our goals, our sales team, and we understand roadmaps of the other. We drive success for our company and more importantly, our customers.

Our customers are excited about Windows 10 and Citrix has worked to offer our solutions to ensure the best experience and complexity for our customers easier as they make the transition.

Microsoft knows this and invited us in their Windows 10 Launch Tour to participate globally. VMware will not be there. Another place VMware will not be? The Azure Marketplace. (Curious why? Guess who does not support Azure.). But XenApp, XenDesktop and NetScaler are there! As you can see, our partnership is REAL and our cooperation goes far beyond APIs and unilateral while someone else Keynote statements made. Microsoft recently reinforced the strength of our partnership and the lack thereof with other on a Citrix event last month.

I call drop others could and all the great opportunities we list with our broad ecosystem of industry work leading partners, and we are! But, I will instead refer you to other great blogs our partnerships and technology cooperation presents: Cisco, Nutanix, Intel, Google and Samsung.

I could about the out-of-the-gate ecosystem support we have received for Citrix Workspace cloud and partner CLM plans, but again, I will save for another time speak. What I is say that our partnerships, our technical cooperation, and our solutions all on behalf of clients are choosing, and that is "power" ful.

So how do you create march into battle your end-user computing solution, know that Citrix understands the need choice.

We know that you need a whole squadron of technologies, not just one, work together to create success. know Citrix and our partners, IT and the requirements are and this Therefore, we have to put together to work with our partners selection for customers. Do not get to the dark side in sealed. Instead, the power of choice will be to be with you. (Yes, I told you, I was a geek)

Citrix NetScaler two-factor integration -

Overview

two-factor authentication is standard in most environments where users are prompted for something they have and what they know. Generally, two-factor authentication is integrated on the NetScaler with radius where the RADIUS server is LDAP integrated but we have to see some scenarios where Active Directory and RSA infrastructures are not integrated, so that the user name different for both authentication methods are.

This case study identifies a new commitment with this particular request. The access scenario below detail the use case and the use of responder guidelines along with AAA requirements for this customer.

access scenario

• to meet, if initially on the URL a user connects https://access.company. com they will be presented with the NetScaler Gateway login screen that prompts only for Active Directory username and password. Assuming the authentication successfully extracted AD groups.
• When a user not belong to the AD 2Factor Auth Group (the group that includes the two-factor user), they are directed to a storefront LB VIP (Last on the NetScaler balanced) and then to experience a seamless single sign-on with storefront and their desktops.
• When a user does belong to the AD 2Factor- Auth group, they are redirected through a NetScaler Responder Directive to a separate storefront LB VIP (also load balancing on the NetScaler ), the additional authentication is required. This showcase LB VIP is as a front end with a AAA TM VIP, they will be prompted for their RSA user name and PIN + token code.
• Assuming that the authentication is successful, they are then forwarded to the showcase, where they log back in with their AD user name and password, completing the process. If this authentication is successful, it is to be presented with their desktops.
• If the user selects " Log ' NetScaler ensure Rewrite directives that their local authentication cookies have expired, so they need to re-authenticate access continue. As this is the case with Balancer storefront load authentication users must deploy both RSA and Active Directory credentials again the 2-factor requirement maintenance

Fig. 1: user flow

Note : by the responder policy redirect actually the endpoint device both storefront Load Balancer must be 2 and the AAA-VServer redirection through the end point, in addition to the initial NetScaler Gateway VIP access depending on the application can run the. to fall to secure policy crafted traffic that made using regular expressions conditions do not meet.

guidelines and actions

the following CLI entry was used to the NetScaler Gateway vServer

• add vpn vserver nsgateway_vpn_vserver SSL 10.0.0.150 443 -icaOnly oN -Listenpolicy No

to create the responder policy checks for a user who is a member the Active Directory group "AD 2Factor auth". If a user on the NetScaler Gateway authenticate action of the responder is a member then bound to the political triggers. In this case, the Responder Action is a redirect to another URL before the session policies are applied.

The following CLI messages were used to create the Responder policies and measures and to bind, the two-factor redirect users after they have authenticated with LDAP on NetScaler Gateway VServer

• responder action RSA_Redirect_Action redirect "" https Add: //company.com/Citrix/StoreWeb "HTTP"
• responder policy RSA_Redirect_Policy add ".REQ.USER.IS_MEMBER_OF (" AD 2Factor Auth ")" RSA_Redirect_Action
• bind vpn vserver nsgateway_vpn_vserver -policy RSA_Redirect_Policy -priority 100 -gotoPriorityExpression END -type REQUEST

Load balancing vServer operates in conjunction with the authentication vServer the second factor authentication to provide (RADIUS in this case). Authentication is performed on the load balancing enabled VServer and redirects the user to the tmindex.html where they carry out the authentication with the configured service. If successful, the user is through the back-end server behind the load balancing forwarded VServer the configured LB and persistence methods.

The load balancing vserver is configured from the following CLI commands

• Add lb vserver twofactorsflb.company.com_vserver SSL 10.0.0.151 443 -persistenceType SourceIP -Listenpolicy No -cltTimeout 180 -AuthenticationHost RSAServer.company.com -Authentication ON -authnVsName RSA_Auth_VServer -comment "RSA IB VIP"

authentication vServer was add the following CLI commands create

• authentication vserver RSA_Auth_VServer SSL 10.0.0.152 443 -AuthenticationDomain company.com

If the user was a member of the AD 2Factor auth group selects "Logoff" from the storefront interface a number of policy Rewrite their associated actions trigger. These actions, the edit AAA cookies on the user the expiration date in the past set endpoint. This immediately makes the cookies invalid, so that the user must perform again the AAA and Storefront authentication.

The following CLI messages were used to create the rewrite policies and measures and to bind that the AAA Cookies ends at the user endpoint when "Logout" at Storefront selected. They are versions of OWA Logout changed policies and actions http://blogs.citrix.com/2011/11/11/ensuring-secure-logout-for-your-application/ found in the Citrix blog Abhilash Verma.

• Add Rewrite action RSA_EXPIRE_TMAS_COOKIE_Action insert_http_header Set-Cookie "" NSC_TMAS = xyz; Domain = .company.com; path = /; expires = Wednesday, 09-Nov-1999 23:12:40 GMT; Secure ""
• Rewrite action RSA_EXPIRE_TMAA_COOKIE_Action insert_http_header Set-Cookie add "" NSC_TMAA = xyz; Domain = .company.com; path = /; expires = Wednesday, 09-Nov-1999 23:12:40 GMT; HTTP.REQ.URL.CONTAINS ( "/ Citrix / StoreWeb / authentication / logout ") "RSA_EXPIRE_TMAS_COOKIE_Action
• Add Rewrite policy RSA_EXPIRE_TMAA_COOKIE_Policy" "" Rewrite Policy RSA_EXPIRE_TMAS_COOKIE_Policy
• Add "Secure HTTP.REQ.URL.CONTAINS ( "/ Citrix / StoreWeb / authentication / logout ") "RSA_EXPIRE_TMAA_COOKIE_Action
• bind lb vserver SF_RSA_LB_VS -PolicyName RSA_EXPIRE_TMAS_COOKIE_Policy -priority 0 -gotoPriorityExpression NEXT -type RESPONSE
• bind lb vserver SF_RSA_LB_VS -PolicyName RSA_EXPIRE_TMAA_COOKIE_Policy -priority 100 -gotoPriorityExpression END -type RESPONSE

Citrix Receiver for Android :. Version 3.8 - Released -

Citrix is ​​pleased to announce that Receiver 3.8 for Android is now available A number of improvements and features are now available, including:

• In session, from right to left text support for languages ​​like Hebrew
• Extended support for desktop replacement target. , Equipment - used second screen, allowing you to use a wider variety of devices to a docking station or a HDMI-out dongle
• New HDX Engine improves the user experience: You will not have to scroll and pan as much as virtual applications and desktops use.
• Robust improvements for the connectivity and efficiency.

[1945004[

Of course you can also get the features and enhancements of the latest 3.7.x versions too, including:

[display

• Improved Fit operating permit applications are displayed in full screen on most devices.
• screen mirroring to the attached monitors on some devices.
• in Session menu bar hidden support for the Korea LG CNS-set-top box, including
• Enhanced SSL security including support for TLS 1.1 and 1.2 and the ability to limit connections to specific versions in the settings.
• Support for Android 6.0 (marshmallow)

for Android Citrix Receiver is just one of our receiver products on the customer choice to run applications offer their choice of endpoints. You can learn about the range of choice and functionality in receiver Featurematrix more.

update

Android users to the latest receiver version of the Google Play Store (preferred) or on the download page. For questions and suggestions, please use the Receiver for Android discussion area. Android receiver can also be found useful documentation and advice on the online site.