AppController 2.5 Implementation Tips

AppController 2.5 Implementation Tips -

AppController is a component of the suite Citrix CloudGateway Enterprise orchestrating access to enterprise cloud applications. These applications can take many forms, including mobile applications, Software-as-a-Service hosted in public clouds, and web links. Below I provide some tips to help in the implementation of AppController 2.5 (which is the latest version from the publication of this blog).

Related System

including parameters such as host name, SSL certificates, and catering

TIPs :.

• Take a snapshot of the hypervisor level after the initial installation so you can easily return to this basic level if the configuration or polyvalence efforts go awry.
• host name can not contain special characters in the application signing certificate AppController.
• host name must match an SSL certificate.
• cert the system must be chained to the CA / (s).

Active Directory Related

Including settings such as the server (Domain Controller), DN base and service account credentials

PIL :.

• The AppController supports integration with a single domain. Several areas require several AppControllers. NetScaler Access Gateway can be configured to allow users to access a single FQDN still be directed to their respective fields of AppController through the use of global groups. See CTX116169 for more information http://support.citrix.com/article/CTX116169
• All user accounts must have a name, surname and email address configured or they will receive a permission error when attempting to launch applications. The account linking Administrator must also have the email address configured or fail directory integration.
• Only LDAP (TCP 389) can be configured via the wizard that must be completed in the beginning. By following LDAPS (TCP 636) can be configured through the full menu of the administration.
• If the domain name server is a DNS entry for balanced load the initial import can work, but attempts to link fail later. Otherwise you can use the IP address of a load balancer LDAPS on Netscaler with specific domain controllers configured as services. See CTX135092 for more information http://support.citrix.com/article/CTX135092

network-related

Including parameters such as IP address, and @ Workweb NTP server

TIPS :.

• Use private IP addresses that the system, if possible. When trust settings are configured for NetScaler Access Gateway does not allow SSO public addresses. If the public addresses to be used the NetScaler can be configured with an SSL bridge to the AppController. View NetScaler traffic management document for more information.
• NTP must be configured or SAML authentication may fail for SaaS sites if the time difference is significant.
• When trust settings are configured for NetScaler Access Gateway must be able to deliver to all application sites. It acts as a proxy for the client once the application is launched.
• After installing the application @Workweb ensure that its network policy is set to "tunneling", otherwise the application links that depend on access to the intranet, and were able to run in the native browser of the device will fail.

Matt Brooks

Architect
Worldwide Consulting Solutions
tweetmattbrooks

Tweet