Exchange config for the NetScaler with AAA Authentication
Below is the NetScaler configuration for an Exchange environment.
Below is the NetScaler configuration for an Exchange environment.
There is an undocumented regkey setting required to add PNAgent functionality using the new Citrix Receiver 4.2. [HKEY_LOCAL_MACHINESOFTWARECitrixDazzle] “PnaSSONEnabled”=”true” Once applied the Citrix Receiver 4.2 can utilise a PNAgent/config.xml configuration. Source
To install the StoreFront prerequisites, execute the following PowerShell commands on the StoreFront Server. Import-Module ServerManager Add-WindowsFeature –Name Web-Server,Web-WebServer,Web-App-Dev,Web-ISAPI-Ext,Web-ISAPI-Filter,Web-Security,Web-Basic-Auth,Web-Windows-Auth,Web-Mgmt-Tools,Web-Scripting-Tools,Web-Http-Redirect,Web-Mgmt-Compat,Web-Metabase,Web-WMI,Web-Lgcy-Scripting
When ADCS uses sha1 for their certificates, you might want to change it to sha254. NOTE: Make sure all your devices support sha256 sha1 sha256 To achieve this enter the following commands in an elivated DOS-box: certutil -setreg cacspCNGHashAlgorithm SHA256 net stop certsvc net start certsvc
psexec \COMPUTERNAME -u domainuser -sd -i 0 “c:Procmon.exe” /accepteula /backingfile c:output.pml /nofilter /quiet Aanmelden met de gebruiker, en afmelden (kan wat langer duren door de logging) Daarna procmon stoppen (om de log file te sluiten) psexec \COMPUTERNAME -u domainuser -sd -i 0 “c:Procmon.exe” Terminate Sysinternals tools benodigd: psexec procmon
Install Hyper-V Server 2012 Core and log in to the console. Configure date and time (select #9). Enable Remote Desktop (select #7). Also select the ‘Less Secure’ option. Configure Remote Management (select #4 then #1). Add local administrator account (select #3). Username and password need to be exactly the same […]
VM Hardware version 9 or Higher VM Advanced settings add: vhv.enable = “true” hypervisor.cpuid.v0 = “FALSE” (Hyper-V) And in vSphere Webclient enable “Expose hardware assisted virtualization to the guest OS” under CPU.
When logging on to the Citrix Director you have to enter the domain name along with the username and password. If you don’t want to enter the domain name each time you logon you can have it filled in by default.
I have put together this blog post about Citrix Access Gateway Enterprise Port Configuration to assist people in setting up their firewalls for implementing Access Gateway in one-arm mode. I have found that almost all of Citrix’s documentation covers the Access Gateway / NetScaler straddling the DMZ and the Internal LAN […]
The NetScaler Access Gateway uses a number of IP addresses for various purposes. When Access Gateway is deployed in a DMZ, it is important to understand the role of each. The following table summarises the various types of IP addresses and their roles in a deployment: The following diagram illustrates […]