Cisco ASA 5505 Configuration Manual page 1544

Configuring Browser Access to Client-Server Plug-ins
Preparing the Citrix MetraFrame Server for Clientless SSL VPN Access
The adaptive security appliance performs the connectivity functions of the Citrix secure gateway when
the Citrix client connects to the Citrix MetaFrame Server or Web Interface. Therefore, you must
configure the Citrix Web Interface software to operate in a mode that does not use the (Citrix) "secure
gateway." Otherwise, the Citrix client cannot connect to the Citrix MetaFrame Server.
Follow the instructions in the
before using the next section, if you are not already providing support for a plug-in.
Follow Steps 1 – 4 of
Interface (for XenDesktop), or you later upgrade to it, to avoid Cookies Required errors.
Creating, Installing, and Testing the Citrix Plug-in
To create and install the Citrix plug-in, perform the following steps:
Download the
Step 1
This file contains files that Cisco customized for use with the Citrix plug-in.
Download the
Step 2
Extract the following files from the Citrix Java client:
Step 3
JICA-configN.jar
•
JICAEngN.jar
•
You can use WinZip to perform this step and the next.
Add the extracted files to the ica-plugin.zip file.
Step 4
Ensure the EULA included with the Citrix Java client grants you the rights and permissions to deploy
Step 5
the client on your web servers.
Establish an ASDM session with the adaptive security appliance, choose Config > Remote Access VPN
Step 6
> Clientless SSL VPN Access > Portal > Client-Server Plug-ins > Import, and import the
ica-plugin.zip file.
Note
Step 7 Add a bookmark to the applicable bookmark list to make it easy for users to connect. Choose ica and
enter the following information into the Address field:
citrix-server/?DesiredColor=4&DesiredHRes=1024&DesiredVRes=768
See Add/Edit Bookmark List
Step 8 To test the plug-in, establish a clientless session with the adaptive security appliance and click the
bookmark.
Use the
Cisco ASA 5500 Series Configuration Guide using ASDM
67-80
"Preparing the Security Appliance for a Plug-in" section on page 67-78
http://support.citrix.com/article/CTX117597
ica-plugin.zip file from the
Citrix Java client from the Citrix site.
Users of clientless SSL VPN sessions cannot enter a URL in the Address box to get SSO support
for Citrix sessions. You must insert a bookmark as instructed in the following step if you want
to provide SSO support for the Citrix plug-in.
and Add Bookmark Entry
Client for Java Administrator's Guide
if you are configuring access to Web
Cisco Software Download
as needed.
as needed.
Chapter 67 Clientless SSL VPN
website.
OL-20339-01