Citrix StoreFront (HTTP)

Warning

This is the last release where Fudo PAM supports Citrix protocol. It is required to remove the sessions (except those already exported), associated with this protocol before launching the system upgrade to the version 5.3. The rest of the associated objects (accounts, listeners, servers) will be deleted by the upgrading script automatically.

Supported connection modes:

• Gateway,
• Proxy,
• Transparent.

Supported algorithms when TLS encryption selected and the option Legacy ciphers disabled:

• ecdhe-ecdsa-aes256-gcm-sha384
• ecdhe-rsa-aes256-gcm-sha384
• ecdhe-ecdsa-chacha20-poly1305
• ecdhe-rsa-chacha20-poly1305
• ecdhe-ecdsa-aes256-sha384
• dhe-rsa-aes256-gcm-sha384

Notes:

• Session joining is not supported.
• Session player displays raw text without graphical rendering.
• Lack of bastion mode support results from protocol’s limitations. Citrix StoreFront itself provides access to a bastion of hosts. When logging to Citrix StoreFront, user can select desired host to connect to over ICA protocol.
• Initiating connections with ICA servers over Citrix StoreFront interface requires anonymous or forward accounts assigned to those servers.