Ukraine flag

We stand with our friends and colleagues in Ukraine. To support Ukraine in their time of need visit this page

Two-Factor Authentication for Citrix Gateway, ADC, Virtual Desktops, and Virtual Apps

Citrix MFA: Integration via RADIUS
Add two-factor authentication to Citrix ADC, Citrix Gateway, Citrix Virtual Apps, and Citrix Virtual Desktops using the Protectimus Citrix MFA solution. The Citrix products integrate with Protectimus via RADIUS. The Protectimus Citrix MFA solution is approved by the Citrix team.

*Business account is required after a free trial

For Citrix two-factor authentication, you may choose either a Protectimus Cloud-Based 2FA Service or an On-Premise 2FA Platform. Also, a great choice of OTP tokens is available for Citrix 2FA users, including classic and programmable hardware TOTP tokens, 2FA apps, SMS authentication, and chatbots in Telegram, Viber, and Facebook Messenger.

The Protectimus Citrix MFA solution is compatible with Citrix ADC (NetScaler ADC), Citrix Gateway (NetScaler Gateway), Citrix Virtual Desktops (XenDesktop), and Citrix Virtual Apps (XenApp).

A Failsafe Citrix MFA Solution

Protectimus is a failsafe enterprise-level multi-factor authentication solution for Citrix Gateway and Citrix ADC MFA. You can add an unlimited number of users, order 24/7 technical support, add your own SMS provider, and deploy an on-premise 2FA platform in your corporate environment. Besides, our experts will help to integrate the Protectimus 2FA with the Citrix portal.

SAAS or On-Premise 2FA Platform

You may integrate Citrix Netscaler Gateway, Citrix ADC, Citrix Virtual Desktops and Apps, either with Protectimus Cloud Service or On-Premise 2FA Platform. Using a SAAS model for Citrix two-factor authentication, you save time and money for deploying and maintaining a 2FA infrastructure. An On-Premise 2FA Platform gives you fuller control over corporate data and processes.

Customization on Request

Protectimus’ two-factor authentication solution for Citrix ADC, Netscaler, XenApp, and XenDesktop can be configured to meet the unique requirements of any customer. Our engineers will help with integration and setting up the Protectimus Citrix MFA solution. Besides, we are ready to implement any specific demands of our clients. Get in touch and describe your situation.

Key Features

  • Compatibility with Citrix ADC (NetScaler ADC) 11.0 VPX, 11.0 MPX, 10.5 VPX, 10.5 MPX, 10.1 VPX, 10.1 MPX, 10.0 VPX, 10.0 MPX, 11.1 VPX, 11.1 MPX, 12.0 VPX, 12.0 MPX, 13.0 VPX, 13.0 MPX, and higher;
  • Compatibility with Citrix Gateway (NetScaler Gateway) 11.0, 10.5, 10.1, 11.1, 12.0, 13.0, and higher;
  • Compatibility with Citrix Virtual Apps (XenApp) 7.8, 7.7, 7.6 LTSR, 7.6, 7.5, 7.1, 7.0, 7.9, 7.11, 7.12, 7.13, and higher;
  • Compatibility with Citrix Virtual Desktops (XenDesktop) 7.8, 7.7, 7.6 LTSR, 7.6, 7.5, 7.1, 7.0, 7.9, 7.11, 7.12, 7.13, and higher;
  • Support for Microsoft Active Directory running on Windows Server 2012 R2 and higher;
  • Support for RADIUS;
  • Automated User Provisioning Mechanism;
  • Support for SMPP for reliable delivery of SMS, it’s possible to integrate any SMS provider of your choice using SMPP;
  • Support for one-time passwords delivery via email;
  • Support for classic hardware OTP tokens Protectimus Two;
  • Support for programmable hardware OTP tokens Protectimus Flex and Protectimus Slim NFC;
  • Support for two-factor authentication apps Protectimus Smart OTP, Google Authenticator, etc.;
  • Support for Protectimus two-factor authentication chat-bots in messaging apps Telegram, Viber, and Facebook Messenger.

Apply for a demo right now!

Send
Knowledge base

The core function of Citrix Gateway (NetScaler Gateway), as well as Citrix ADC (NetScaler ADC), Citrix Virtual Apps (XenApp), and Citrix Virtual Desktops (XenDesktop), is to provide remote access to corporate accounts and data. Citrix products are popular among larger firms, whose data is often targeted by hackers. If admins in such a company don’t enable two-factor authentication for Citrix NetScaler or any other Citrix product, it can be enough for a hacker to get the password of one employee to gain access to corporate web applications or sensitive data of the whole company. Citrix 2FA is a must for protection against brute force, credentials stuffing, keyloggers, phishing, social engineering, trojan viruses or injections, and sometimes even man-in-the-middle attacks.

We use RADIUS protocol to integrate the Protectimus 2-factor authentication solution with Citrix ADC, Citrix Netscaler, Citrix Virtual Desktops, and Citrix Virtual Apps. Before the Citrix MFA setup, you need to register with the Protectimus Cloud Two-Factor Authentication Service or download and install the Protectimus On-Premise Platform. You will also need to install the Protectimus RProxy component responsible for communication between Citrix and Protectimus via RADIUS. The detailed Citrix 2FA integration guide is available here. Also, you may contact our support service with any questions regarding the Citrix two-factor authentication setup.

The compatibility of Protectimus’ 2-factor authentication system with Citrix NetScaler Gateway, Citrix ADC, Citrix Virtual Desktops, and Citrix Virtual Apps has been officially confirmed by Citrix representatives. As a result of successful verification, Protectimus received the status of Citrix Ready partner. Protectimus Citrix MFA is a failsafe two-factor authentication solution of enterprise level, available as an easy to set up and use SAAS 2FA Service or an On-Premise Platform, which gives a client a total control over the Citrix multi-factor authentication system. Besides, we offer our customers fair rates, a variety of two-factor authentication methods to choose from, and a wide selection of additional functions, including IP filtering, geographic and time filters, and data signing.

Citrix ADC, Citrix Virtual Apps and Desktops, and Citrix NetScaler Gateway are mainly used by large companies that prefer local installations. The Protectimus On-Premise Platform for Citrix two-factor authentication is ideal for companies that want to have complete control over all aspects of their security systems: servers, user databases, and other sensitive information. The On-premise Two-Factor Authentication Platform for Citrix can be installed in an isolated network and additionally protected with firewalls and other information security tools. It supports multidomain environments, clusters, replication, and backups. You can also link your SMS provider to the platform using the SMPP protocol.

All methods of delivery/generation of one-time passwords for Citrix 2FA have their benefits and drawbacks. The least expensive one-time password (OTP) delivery method is e-mail, and the most popular is SMS. For clients using Citrix Gateway, Citrix ADC, Citrix Virtual Apps and Desktops, we recommend hardware 2FA tokens as the safest method of OTP generation. Hardware OTP tokens need no connection to any networks, therefore, one-time passwords cannot be intercepted. The best alternative to hardware OTP tokens is the free app for smartphones Protectimus Smart or one-time password delivery with the help of chatbots in Telegram, Facebook Messenger or Viber.

The compatibility of Protectimus’ 2FA solution with Citrix Gateway (NetScaler Gateway), Citrix ADC (NetScaler ADC), Citrix Virtual Apps (XenApp), and Citrix Virtual Desktops (XenDesktop) has been officially verified by experts from Citrix. As a result of this verification, Protectimus has received the status of Citrix Ready. Our two-factor authentication solution is officially recommended for integration with Citrix Virtual Desktops (XenDesktop) 7.8, 7.7, 7.6 LTSR, 7.6, 7.5, 7.1, 7.0, 7.9, 7.11, 7.12, 7.13, and higher; Citrix ADC (NetScaler ADC) 11.0 VPX, 11.0 MPX, 10.5 VPX, 10.5 MPX, 10.1 VPX, 10.1 MPX, 10.0 VPX, 10.0 MPX, 11.1 VPX, 11.1 MPX, 12.0 VPX, 12.0 MPX, 13.0 VPX, 13.0 MPX, and higher; Citrix Virtual Apps (XenApp) 7.8, 7.7, 7.6 LTSR, 7.6, 7.5, 7.1, 7.0, 7.9, 7.11, 7.12, 7.13, and higher;Citrix Gateway (NetScaler Gateway) 11.0, 10.5, 10.1, 11.1, 12.0, 13.0, and higher.

Why do you need to enable Citrix two-factor authentication?

How to enable Citrix MFA using Protectimus?


Why Protectimus?

Why on-premise MFA platform?


SMS, e-mail, app, chatbot, or token?

Citrix Ready