Forum Discussion

Rul_74331's avatar
Rul_74331
Historic F5 Account
Feb 10, 2015

ICA Traffic and Kerberos

Hi, In a Citrix envieroment, where APM is publising the services:

 

1- Has all the traffic to pass through the APM ?? I mean, there are lan users, after the authentication with the APM, can these user connect directly to the xenapp/app server, in order to release some performance to the APM?? . 2- If Citrix support Kerberos, could APM support also Kerberos to avoid the user to authenticate

 

Thanks,

 

3 Replies

  • No, if you enable the ICA proxy bypass mode, then APM is just presenting the resources, and the users connect to the Xenapp/Xendesktop directly.

     

    2 - re Kerberos - it's a much trickier animal - all depends on the Citrix versions and the required setup/scenario.

     

  • Rul_74331's avatar
    Rul_74331
    Historic F5 Account

    Thanks Michael,

     

    For Kerberos integration, the are using Citrix XenApp 6.5 (and also 7.6) on Windows Server 2008 R2. They uses 3 types of Citrix services :Storefront, Web Interface and services based on ICA client, all of them are sopported??

     

    Thanks

     

  • The only reason you'd want to use APM internally is to replace StoreFront/WebInterface - else you do not need APM and can just load-balance StoreFront/WebInterface internally.