Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

At our company we have XenApps accessible through Citrix Access Gateway. I am looking through the settings and i can see under the Web Interface settings that the authentication point is set to be "at gateway", which means that authentication is worked out at Citrix Access Gateway, before it reaches Citrix Web Interface.

We are thinking about implementing two-factor authentication using SMSPASSCODE, and that is undoubtedly easiest to setup when authentication on Citrix Web Interface is NOT at the CAG.

So my question will be: If i change authentication from Access Gateway to the Citrix Web Interface will i compromise the security?

enter image description here

share|improve this question

I think you're misunderstanding that option. If you want to authenticate at the Web Interface, you'll need to point people directly to it and open all of the relevant ports.

So, yes. You will be compromising your security because you'll no longer be tunneling sessions and authentication through the CAG.

Perhaps this page will give you some direction:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.