Citrix Gateway

Configure load balancing servers for Citrix Endpoint Management or Citrix XenMobile Server

After using theCitrix ADC for Citrix Endpoint Managementwizard for initial setup, use the Citrix Gateway configuration utility to configure load balancing, as described in this section. For Citrix Endpoint Management, use SSL Offload. For Citrix Endpoint Management Server, be sure to refer to the recommendations for load balancing modes under “Deployment Summary” inIntegrating with Citrix Gateway and Citrix ADC.

To use SSL bridge mode for Citrix ADC VIPs

Use SSL Bridge mode if Citrix Endpoint Management is in the DMZ. When you load balance Citrix Endpoint Management with Citrix ADC VIPs in SSL Bridge mode, Internet traffic flows directly to the Citrix Endpoint Management server, where connections terminate. SSL Bridge mode is the simplest mode to set up and troubleshoot.

  1. Before configuring SSL Bridge mode, go toCitrix Endpoint Management App Management Settingsand verify thatCommunication with Citrix Endpoint Management ServerisHTTPS.

    Settings

  2. After you log on to the configuration utility, on theHometab, inMDM Server LB, clickConfigure.

  3. UnderLB Virtual Server for Device Management, inName, type a name for the server.

  4. InIP Address, type the IP address for the virtual server and then clickContinue.

  5. On theLoad Balance Citrix Endpoint Management MDM Serverspage, repeat Steps 3 and 4 and then clickCreate.

  6. Verify that the settings are correct and then clickDone.

    Verify the settings

  7. To verify the load balancing configuration, go toTraffic Management > Virtual Servers.

    Virtual servers page

To use SSL Offload mode for Citrix ADC VIPs

Use SSL Offload for Citrix Endpoint Management. Also use SSL Offload, if necessary to meet security standards, when the on-premises Citrix Endpoint Management is in the internal network. When you load balance Citrix Endpoint Management with Citrix ADC VIPs in SSL Offload mode, Internet traffic flows directly to the Citrix ADC appliance, where connections terminate. Citrix Gateway then establishes new sessions from the appliance to Citrix Endpoint Management. SSL Offload mode involves more complexity during setup and troubleshooting.

  1. Before configuring SSL Offload mode, go toCitrix Endpoint Management App Management Settingsand verify thatCommunication with Citrix Endpoint Management ServerisHTTP.

    Verify HTTP communication

  2. Log on to the configuration utility. On theHometab, inMDM Server LB, clickConfigure.

  3. UnderLB Virtual Server for Device Management, inName, type a name for the server.

  4. InIP Address, type the IP address for the virtual server and then clickContinue.

  5. On theLoad Balance Citrix Endpoint Management MDM Serverspage, repeat Steps 3 and 4 and then clickCreate.

  6. Verify the settings and then clickDone.

  7. When prompted to add a server certificate, choose the server certificate and clickContinue.

    Click to add certificate

  8. Specify the CA certificate and clickContinue.

    Select the CA certificate

  9. Keep the same Citrix Endpoint Management IP address. ClickDone.

    CEM IP address

  10. To verify the load balancing configuration, go toTraffic Management > Virtual Servers.

    Validate on virtual servers page

Configure load balancing servers for Citrix Endpoint Management or Citrix XenMobile Server