Citrix Access Gateway

Frequently Asked Questions for Partners

Contents

What’s New.......................................................................................................................4
What’s new for the Citrix Access Gateway product line?..................................................................4
PRODUCT LINE OVERVIEW.................................................................................................5
Access Gateway.................................................................................................................................................... 5
What is the Citrix Access Gateway?............................................................................................................ 5
Is the Access Gateway Model 2010 appliance being discontinued?..............................................5
Are the Access Gateway 4.0 and 5.0 software lines being discontinued?...................................5
Access Gateway VPX.......................................................................................................................................... 5
Is the current Access Gateway VPX, based on AG 5 software, being discontinued?...............5
Is there a replacement for the EOL Access Gateway VPX?................................................................5
Does the new Access Gateway VPX include the same (software) functionality as available
on the AG appliance?....................................................................................................................................... 5
Why does Citrix offer Access Gateway as both virtual and physical appliances?...................6
Access Gateway VPX Express.........................................................................................................................6
Is there an Access Gateway VPX Express edition available?............................................................6
Is there any trial / express alternative?................................................................................................... 7
Access Gateway vs. NetScaler........................................................................................................................7
What are the differences between Access Gateway and NetScaler?............................................7
Which product would suit my customers?............................................................................................... 7
Citrix Integration................................................................................................................9
XenApp and XenDesktop................................................................................................................................. 9
Does Citrix Access Gateway Work With Citrix XenApp and Citrix XenDesktop?.....................9
What are the Benefits of Using Access Gateway in Place of Secure Gateway?........................9
Do I Need to License Access Gateway for Tunneling Citrix XenApp Connections?..............10
Will Citrix Continue to Support the Secure Gateway in Citrix XenApp?...................................10
Does Access Gateway Provide Double-Hop DMZ Support?............................................................10
CloudGateway.................................................................................................................................................... 10
Does Citrix Access Gateway work with Citrix CloudGateway?.....................................................10
Does Access Gateway support all possible CloudGateway deployments?................................11
Do I Need to License Access Gateway for Tunneling Citrix XenApp Connections?..............11
XenServer.............................................................................................................................................................11
What is Citrix XenServer?............................................................................................................................. 11
Can I host other Citrix virtual machines or VPX appliances on the same XenServer?.......11
Does Access Gateway VPX support XenServer NIC bonding?........................................................12
Does Access Gateway VPX support XenServer High Availability?...............................................12
Does Access Gateway VPX support XenServer XenMotion?...........................................................12
Can Citrix Provisioning Server deploy Access Gateway VPX?.......................................................12
Branch Repeater............................................................................................................................................... 12
What is Citrix Branch Repeater?............................................................................................................... 12
Does Access Gateway VPX work with Citrix Branch Repeater?...................................................12
Technical Information......................................................................................................13
Do SSL VPNs Provide a Similar Level of Security as IPSEC VPNs?..............................................13

Citrix Access Gateway - Frequently Asked Questions for Partners 1

 What Client Platforms Does Access Gateway Support?...................................................................13
What Fault Tolerant Options are Available?.......................................................................................13
Is a Complete List of Access Gateway Features Available?............................................................13
What are the minimum hardware requirements for Access Gateway VPX?..........................13
What are Intel VTx and AMD-V?............................................................................................................... 14
How common are Intel VTx and AMD-V?..............................................................................................14
Is there a hardware compatibility list (HCL) for Access Gateway VPX?..................................14
Can I add more memory or virtual CPUs to increase performance and scalability?..........14
How many users does Access Gateway VPX support?......................................................................14
Deployment and Planning................................................................................................15
Where in the network is Access Gateway VPX deployed?...............................................................15
What are the supported deployment modes?......................................................................................15
Does Access Gateway work with Citrix Receiver and Citrix Merchandising Server?..........15
Can multiple instances of Access Gateway VPX run on the same physical server?..............15
Licensing..........................................................................................................................16
Is Access Gateway Included in the Platinum Edition Products?..................................................16
What is an Access Gateway Universal License?..................................................................................16
What is the Access Gateway Platform License?..................................................................................16
What features does the Access Gateway Platform License enable?...........................................17
How does a customer receive an Access Gateway Platform License?.......................................17
What features do Access Gateway Universal Licenses enable?....................................................17
Can the Access Gateway Platform License and Universal Licenses work together?...........17
I already own Access Gateway appliances and licenses; do I need to purchase new
licenses?............................................................................................................................................................... 17
What are the CCU Pricing Bands and How Do They Work in Conjunction with Program
Discounts?........................................................................................................................................................... 18
Do the Discounts Provided by Pricing Bands Extend Across Multiple Transactions?........18
How does Citrix deliver License Codes?.................................................................................................. 18
How Do I Allocate and Download Access Gateway License Files?..............................................18
What about Disaster Recovery?................................................................................................................ 18
Packaging and Pricing.......................................................................................................19
Has the Pricing for Appliance Models Changed?................................................................................19
Why are Discounts for High-Availability Pairs Not Offered on the MPX?...............................19
Is Access Gateway Functionality Available on the New NetScaler MPX Appliances?.........19
Has the Price for Access Gateway User Licenses Changed?...........................................................19
How is Subscription Advantage Renewal Pricing Calculated for Universal Licenses?......19
What are annual Universal Licenses and how much do they cost?............................................19
How does Citrix deliver Access Gateway VPX?....................................................................................20
Does the price change affect Subscription Advantage renewal costs?.....................................20
Ordering...........................................................................................................................21
How is the Citrix Access Gateway Priced?............................................................................................. 21
Is There a Minimum Purchase Requirement?.....................................................................................21
Are Firmware Updates Available for Access Gateway Appliances?...........................................21
Are the Access Gateway Appliances Covered by Warranty?.........................................................21
Can Resellers Obtain NFR Licenses?........................................................................................................ 21
How Do Customers Obtain Evaluation Licenses?...............................................................................21
Support and Subscription Advantage................................................................................22
Does Access Gateway VPX include Subscription Advantage?.......................................................22
Has the Price for Access Gateway SA Changed?.................................................................................22
Does Subscription Advantage include technical support?.............................................................22

Citrix Access Gateway - Frequently Asked Questions for Partners 2

 Can Access Gateway VPX be upgraded?................................................................................................. 22
Are warranties and maintenance available for the Access Gateway VPX?............................22
What do I do if I experience a technical support issue with the XenServer hosting Access
Gateway VPX?.................................................................................................................................................... 22

Citrix Access Gateway - Frequently Asked Questions for Partners 3

What’s New
What’s new for the Citrix Access Gateway product line?
Citrix has announced notable changes to the Access Gateway product line
including the Notification of Status Change for End of Life for non-NetScaler code
Access Gateway platforms, and the release of NetScaler based Access Gateway
VPX.
To replace the existing AG 5 VPX, Citrix is also launching the Access Gateway VPX
(NetScaler based), which will be a stripped down version of a NetScaler VPX.
There will also be available, a license migration path to a NetScaler VPX.

Notification of Status Change for End of Life has been announced for the
following platforms (End Of Sale is March 31, 2013):
1. Access Gateway 2010 Appliance
2. Access Gateway 4.x and 5.x software lines
3. Access gateway VPX, based on the AG 5 code base

Launch of new Access Gateway platform:

1. Access Gateway VPX, based on NetScaler

New Citrix Access Gateway SKUs:

Access Gateway SRP Availability

Access Gateway VPX (50 Mbps, 500 users) with 1- $995

year SA
Access Gateway VPX 1 year add-on Subscription $150
Advantage
Q3’12
Access Gateway VPX Premier Support – 1 year $70
(Sept. 17)
Access Gateway VPX to NetScaler VPX-200 Standard $4,500
Edition Upgrade

Access Gateway MPX 1 Year Bronze Maintenance $900

Citrix Access Gateway - Frequently Asked Questions for Partners 4

PRODUCT LINE OVERVIEW
Access Gateway
What is the Citrix Access Gateway?
Citrix Access Gateway is the only SSL VPN that securely delivers desktops and
applications with HDX SmartAccess - giving users easy-to-use secure access to all
of the enterprise applications and data they need to be productive while allowing
IT to maintain security with adaptive application-level policies. With Access
Gateway organizations are empowered to cost effectively meet the anywhere
access demands of all workers – enabling flexible work options, easier
outsourcing and non-employee access, and business continuity readiness – while
ensuring the highest-level of information security.
Citrix Access Gateway is an industry-leading and comprehensive product line
designed to meet customer needs and compete in all customer segments.
Deployed as an appliance on the perimeter of an organization‘s network (often in
the DMZ), it provides a single point of access to all applications and data -
including resources such as Windows desktops delivered via Citrix XenDesktop
or Citrix VDI-in-a-Box, Windows applications delivered via Citrix XenApp,
web/saas/mobile applications delivered by CloudGateway, client-server
applications, e-mail, files shares, internal Web applications, and IP telephony
services.
Access Gateway was designed with the best user experience in mind to make
access transparent. Single sign-on capabilities minimize the number of
authentication prompts, making it easy to navigate to key resources and
“Always-on access” ensures sessions are automatically reconnected after losing a
network connection, or after users roaming between access points.

Is the Access Gateway Model 2010 appliance being discontinued?

Yes. Access Gateway 2010 model has entered its EOL lifecycle.

Are the Access Gateway 4.0 and 5.0 software lines being discontinued?
Yes. Both AG 4.0 and 5.0 software lines have entered their EOL lifecycle.

Access Gateway VPX

Is the current Access Gateway VPX, based on AG 5 software, being discontinued?
Yes. Current Access Gateway VPX, based on AG 5 software, has entered its EOL
lifecycle.

Is there a replacement for the EOL Access Gateway VPX?

Yes, Citrix is going to launch a new Access Gateway VPX, based on the NetScaler
code base, to replace the outgoing VPX.

Citrix Access Gateway - Frequently Asked Questions for Partners 5

Does the new Access Gateway VPX include the same (software) functionality as
available on the AG appliance?
Yes, Access Gateway VPX includes all the software functionality, as available on
the AG MPX platform, but runs as a Virtual Appliance, rather than a physical one.
Both run the NetScaler code base and offer a customized Access Gateway
interface.

Why does Citrix offer Access Gateway as both virtual and physical appliances?
Citrix offers a choice of form factors to ensure customers have the flexibility of
multiple deployment options not available from other vendors.

Virtual appliances are ideal for customers who:

 Have limited rack space and infrastructure and need to consolidate physical
appliances. An Access Gateway VPX instance can be co-located with other
virtual machines on a single server to reduce the overall infrastructure
requirements.
 Want to reduce costs by cutting power consumption and standardize all
hardware in the data center to get the best pricing from server vendors
 Need to minimize downtime. XenServer capabilities such as XenMotion
(dynamic workload relocation) and NIC bonding offer an ideal way to lessen
the impact of hardware failures. Virtual appliances also eliminate the need
for appliance replacements when failures occur.
 Require a solution that offers isolated, multi-tenancy configurations for
different user populations.
 Prefer to create a non-production environment for training and testing.

Physical appliances remain the preferred option for customers who:

 Need the scalability and performance of a dedicated appliance. Access
Gateway VPX can support up to 500 concurrent users when deployed on a
server with a recommended configuration. Appliances such as Access
Gateway MPX can support up to 5,000 concurrent users per appliance and
are the more cost effective solution in deployments supporting more than
1,500 concurrent users.
 Can only address policy requirements of security and network infrastructure
teams through the use of physical appliances. The virtual appliance form
factor makes it easier and less expensive for customers and partners to learn
the Access Gateway product and test new configurations without disrupting a
production deployment.

Access Gateway VPX Express

Is there an Access Gateway VPX Express edition available?
No, currently there is no Express version of the Access Gateway VPX available.
The new Access Gateway VPX will not have any express license built into it and
will offer no functionality / users, upon download. Customers will have to
download license(s) from their ‘MyCitrix Account’, which will be available only
after a purchase has been made.

Citrix Access Gateway - Frequently Asked Questions for Partners 6

Is there any trial / express alternative?
Yes, customers may try the NetScaler VPX Express edition. The new Access
Gateway VPX is based on the NetScaler code base. The NetScaler Express VPX
offers the Access Gateway functionality, along with many other features.

Access Gateway vs. NetScaler

What are the differences between Access Gateway and NetScaler?
Access Gateway runs on the NetScaler platform (the “Operating System”) and is
one of a multitude of features that are available on the platform. “NetScaler” is
also the product line name for Citrix‘s web application delivery controllers. The
features of the platform may or may not be activated depending on which SKU
item a customer purchases. The Universal License that enables “NetScaler”
provides activation of the following platform features:
 Better platforms with redundant components and increased performance
 License upgradability to enable additional functionality from MPX
platforms
 Integrated load-balancing for internal servers
 Multi-site failover with Global Server Load Balancers
 Site health monitoring for the protected internal resources

The key is to remember that while Access Gateway and NetScaler are housed on
the same hardware representing different capabilities and are targeted at solving
different business issues. Citrix customers can choose between Access Gateway
and NetScaler to address their secure access requirements.

Which product would suit my customers?

It really depends on the customer‘s network and performance requirements.
If the customer is a network administrator or is in the network infrastructure
team, NetScaler is the solution that can address all their requirements. However,
if the network infrastructure team is pre-disposed to another vendor such as F5,
Access Gateway may be the better solution to expedite the sales process and
avoid competitive friction.

Customers who are primarily XenApp or XenDesktop administrators will find

Access Gateway easy to deploy within their environment. This product is
designed to be Citrix‘s simplest solution for securing end-to-end application and
desktop environments.

XenApp customers looking to upgrade from Secure Gateway should consider

Access Gateway VPX, which provides a new of improvements over Secure
Gateway including support for Citrix Receiver and Merchandising Server.
Access Gateway VPX is Citrix‘s virtual appliance that offers the best price-to-
performance ratio. However, customers looking to support more than 1,500
concurrent users are advised to deploy physical appliances such as the MPX for
the most cost-effective solution.

Citrix Access Gateway - Frequently Asked Questions for Partners 7

Citrix Access Gateway - Frequently Asked Questions for Partners 8
Citrix Integration
Access Gateway is the best SSL VPN solution for achieving seamless integration
with other Citrix solutions such as XenApp, XenDesktop, VDI-in-a-Box,
CloudGateway, XenServer and Branch Repeater. By combining with these
components, Access Gateway offers a powerful, secure and highly optimized end-
to-end solution.

XenApp and XenDesktop

Does Citrix Access Gateway Work With Citrix XenApp and Citrix XenDesktop?
Yes – better than any other SSL VPN. Access Gateway provides tight integration
with XenApp and XenDesktop, allowing customers to:
 Replace the XenApp Secure Gateway feature in the DMZ with a hardened
physical or virtual appliance. The solution provides single sign-on to Web
Interface, reducing user frustration from entering credentials multiple
times.
 Provide auto-reconnection of sessions without the need to re-
authenticate.
 Secure connections to Citrix XenDesktop and Citrix XenApp directly
without the need to load other clients, port redirectors, and network
connect drivers.
 Add secure access to local applications and all protocols, such as e-mail
synchronization and VoIP softphones.

In addition, Access Gateway extends adaptive application-level policy

capabilities to XenDesktop and XenApp environments, allowing administrators
to:
 Define policies based on access scenarios using information such as client
configuration, machine identity, user identity, and network location.
 Control which applications and desktops can be accessed based on a
user‘s access scenario.
 Add granular control over which virtual channels are associated with a
XenDesktop or XenApp session to provide custom levels of access to a
desktop or application (e.g., local printing and client drive mapping).
 Provide users with access to confidential resources in public or untrusted
access scenarios, where standard cache clean-up mechanisms are
insufficient or unreliable.
 Adhere to compliance standards by ensuring that certain resources are
only accessed when the user, even if roaming, is in a compliant access
scenario.

What are the Benefits of Using Access Gateway in Place of Secure Gateway?
The Secure Gateway feature available in Citrix XenApp provides secure remote
access to published applications. It is implemented as a Windows Service
running on Microsoft Windows Server, which resides within the DMZ.

Citrix Access Gateway - Frequently Asked Questions for Partners 9

Additionally, when Secure Gateway is used, the Web Interface Server must also
reside within the DMZ.
Access Gateway is a product line of hardened SSL VPN appliances that
incorporate all the capabilities of Secure Gateway and also provide access to
other standalone applications and/or corporate datacenter resources.
Organizations can continue to securely deliver published applications, but can
also provide access to additional resources, such as e-mail or CRM application
synchronization and voice over IP telephony.
Organizations, which replace their Secure Gateway with Access Gateway benefit
from:
 A lower cost of ownership (no need to purchase, patch, maintain or
replace the Windows server that houses Secure Gateway)
 Reduced administrative effort via simplified patch management
 Better application and data security
 A simpler architecture that moves Web Interface server behind the
firewall into the corporate datacenter and consolidates existing VPN
solutions into a single point of access
 Higher security compliance via endpoint analysis and adaptive policy
control on XenDesktop and XenApp sessions

Do I Need to License Access Gateway for Tunneling Citrix XenApp Connections?

No. Access Gateway will not require user licenses for securing Citrix XenDesktop
or XenApp connections. This capability is included as an entitlement with each
Access Gateway or NetScaler appliance purchase.

Will Citrix Continue to Support the Secure Gateway in Citrix XenApp?

The Secure Gateway feature of XenApp will continue to ship as a supported
feature running on the Microsoft Windows Server system and will continue to
support secure transit of XenApp traffic only. However, no major new
functionality will be added.
Access Gateway is the premier secure access solution offered by Citrix and
should be used when:
 Secure access to more than just XenApp hosted applications is required
 More granular control over access to XenApp applications is desired
 A hardened appliance is preferred over servers in the DMZ

Does Access Gateway Provide Double-Hop DMZ Support?

Yes, all Access Gateway appliances provide support for two-stage DMZs.
However, only Secure Gateway style or ICA Proxy connections are supported in
this configuration. Network level connections with the Access Gateway Plug-in in
a double-hop DMZ are not supported by any Access Gateway version.

CloudGateway
Does Citrix Access Gateway work with Citrix CloudGateway?
Yes – better than any other SSL VPN. Citrix Access Gateway is an essential
(secure remote access) component of the Citrix CloudGateway solution. Access

Citrix Access Gateway - Frequently Asked Questions for Partners 10

Gateway provides tight integration with the CloudGateway deployments,
allowing customers to:
 Provide Secure Remote access to CloudGateway deployments, while
sitting in the DMZ, with a hardened physical or virtual appliance.
 The solution provides single sign-on to Storefront / AppController
components of CloudGateway, reducing user frustration from entering
credentials multiple times.
 Supports Auto-Discovery auto configuration feature of CloudGateway
remotely
 Provides the mobile Secure Browse infrastructure, for CloudGateway
 Simplified (auto) configuration for complex policies required to support
the multitude of access modes supported by CloudGateway

Does Access Gateway support all possible CloudGateway deployments?

Yes. Access Gateway supports all possible CloudGateway deployments, which can
be of the following types:
 Storefront only (CloudGateway Express)
 AppController only
 Storefront and AppController (CloudGateway Enterprise)

Do I Need to License Access Gateway for Tunneling Citrix XenApp Connections?

Access Gateway does not need any extra licensing (apart from the Platform
License) to support the following CloudGateway deployments:
 Storefront only (CloudGateway Express)
Access Gateway needs Universal Licenses to support the following CloudGateway
deployments:
 AppController only
 Storefront and AppController (CloudGateway Enterprise)
Note that the Access Gateway Universal Licenses are a part of the CloudGateway
licenses and will therefore not have to be separately purchased.

XenServer
What is Citrix XenServer?
Citrix XenServer™ provides a rich set of management integration and
automation capabilities that increase IT flexibility, agility and automation to
lower costs and helps to transform today‘s complex IT environments into
simplified virtual datacenters.

Can I host other Citrix virtual machines or VPX appliances on the same XenServer?
Yes. Other virtual machines (Citrix or non Citrix) can be hosted on the same
physical XenServer. How an organization intends to use Access Gateway VPX
(e.g. pilot, training, production) and where they deploy Access Gateway VPX will
dictate which additional virtual machines are suitable for sharing the same
XenServer. For best performance, the administrator should ensure that physical
host has adequate resources (RAM, CPU, I/O, storage) to support additional
virtual machines.

Citrix Access Gateway - Frequently Asked Questions for Partners 11

Does Access Gateway VPX support XenServer NIC bonding?
Yes. Access Gateway VPX supports the NIC Bonding feature of Citrix XenServer.
NIC Bonding enables XenServer to join multiple physical network interfaces
(PIFs) and present them as a single virtual interface (VIFs) to a virtual machine.
This XenServer feature provides increased network throughput and fault
tolerance for network interfaces.

Does Access Gateway VPX support XenServer High Availability?

Yes. Access Gateway VPX supports the High Availability feature included with
Citrix Essentials for XenServer. High Availability enables multiple XenServer host
machines to participate in a ―server pool‖. In the event that the XenServer host
on which Access Gateway VPX is running were to fail, another server in the pool
will load and initialize the Access Gateway VPX workload. In the event of a high
availability failover, active user sessions need to be re-established.

Does Access Gateway VPX support XenServer XenMotion?

Yes. Access Gateway supports XenMotion. XenMotion enables XenServer to
transfer a running instance of Access Gateway VPX from one physical XenServer
host to another XenServer host without terminating existing user sessions.

Can Citrix Provisioning Server deploy Access Gateway VPX?

No. Access Gateway VPX does not support automated deployments using Citrix
Provisioning Server.

Branch Repeater
What is Citrix Branch Repeater?
Citrix Branch Repeater is a branch optimization solution that provides a high
definition desktop and application experience to branch and mobile users while
dramatically reducing bandwidth costs and simplifying branch infrastructure.

Does Access Gateway VPX work with Citrix Branch Repeater?

Yes. The Citrix Repeater™ Plug-in integrates seamlessly with the Access
Gateway Plug-in to provide a high- definition user experience to the remote and
mobile worker. The Repeater Plug-in provides the benefits of Branch Repeater
solutions to remote users in small branch offices, homes, airports or other
locations that do not enjoy the luxury of a Branch Repeater appliance. Citrix
Repeater Plug-in is a PC software WAN optimization solution that works in
conjunction with a Citrix Repeater appliance located in the datacenter.

Citrix Access Gateway - Frequently Asked Questions for Partners 12

Technical Information
Do SSL VPNs Provide a Similar Level of Security as IPSEC VPNs?
Yes, the Citrix Access Gateway uses industry standard SSL/TLS encryption to
secure the connection between the endpoint and the network—the same
encryption that is used by Internet banking and online commerce sites. The
Access Gateway also supports many of the well-known security features of IPSec
VPNs, such as two-factor user authentication, split tunneling control, Access
Control Lists (ACLs) and client-side certificate support.

What Client Platforms Does Access Gateway Support?

Access Gateway supports Windows 7 (32-bit and 64-bit), Windows Vista,
Windows XP, Linux, and Mac OS X (10.5 and higher). All SSL-enabled Citrix
Receiver Online plugins are supported directly without any additional Secure
Access Client software.

What Fault Tolerant Options are Available?

Access Gateway appliances include server-side failover capabilities, ensuring
that when an appliance fails, end-users are automatically reconnected to the
backup appliance with little or no distribution.
Global Server Load-balancing (GSLB) is always available when Access Gateway
runs on a Citrix NetScaler appliance. This capability allows Access Gateway
sessions to be distributed across geographically-dispersed data centers, or can
route users to the nearest or most responsive data center.

Is a Complete List of Access Gateway Features Available?

Yes, Access Gateway literature can be found at
http://www.citrix.com/accessgateway. The Citrix Access Gateway Datasheet
contains details on specific features.

What are the minimum hardware requirements for Access Gateway VPX?
The hardware requirements for Access Gateway VPX are divided into two
categories: Hypervisor requirements and the Access Gateway VPX virtual
machine requirements.

Access Gateway VPX will run with the following Hypervisors:

 XenServer 5 Update 3 (or later)
 VMWare ESX/ESXi 3.5 (or later)
 Windows Server 2008 R2 with Hyper-V role

Minimum virtual hardware requirements for an Access Gateway VPX virtual

machine:
Hardware Item Requirements
- 2 CPU cores
CPU
- Intel VTx or AMD-V
Memory 4 GB
Hard Disk space 20 GB

Citrix Access Gateway - Frequently Asked Questions for Partners 13

Network interface Hypervisor supported network interface card

Please note that all the above requirements are for the Access Gateway VPX VM
alone, and are in addition to the Hypervisor requirements.

What are Intel VTx and AMD-V?

Intel VTx and AMD-V are CPU components, which trap sensitive or privileged
CPU instructions executed by the guest virtual machine out to the hypervisor.
These features are sometimes referred to as “hardware assist” or “virtualization
assist”.

How common are Intel VTx and AMD-V?

Virtually all servers shipped within the last two years support either Intel VTx or
AMD-V. However, many servers ship with virtualization assist disabled in the
BIOS.

Is there a hardware compatibility list (HCL) for Access Gateway VPX?

Access Gateway VPX is designed to run on any XenServer supported hardware
platform. A XenServer HCL is available at http://hcl.xensource.com.

Can I add more memory or virtual CPUs to increase performance and scalability?
Access Gateway VPX should only be configured with 1 GB of memory. Adding
additional memory does not improve the performance or scalability.
Access Gateway VPX can be configured with two or more virtual CPUs for
optimal performance and scalability. Adding more than two virtual CPUs
improves performance by reducing latency but does not improve scalability
beyond 500 concurrent users.

How many users does Access Gateway VPX support?

Access Gateway VPX supports 500 concurrent users.

Citrix Access Gateway - Frequently Asked Questions for Partners 14

Deployment and Planning
Where in the network is Access Gateway VPX deployed?
Access Gateway is traditionally deployed in the DMZ.

What are the supported deployment modes?

Access Gateway supports the following deployment modes:
 Single-DMZ deployment with SSL VPN access
 Single-DMZ deployment with Citrix Web Interface “behind” Access
Gateway
 Single-DMZ deployment with Citrix Web Interface “parallel” to Access
Gateway
 Dual-DMZ deployment, which only supports Citrix Web Interface and
Citrix XenApp/XenDesktop traffic

Does Access Gateway work with Citrix Receiver and Citrix Merchandising Server?
Yes. Citrix Receiver and Citrix Merchandising Server support the Access Gateway
Plug-in. Citrix Receiver is the first universal client for IT service delivery. With
Citrix Receiver installed on a device, IT can deliver applications and desktops as
an on-demand service with no need to manage, own or care about the physical
device or its location.
Citrix Merchandising Server is a new head-end infrastructure component that
helps create, deliver and manage a high quality end user experience on laptops,
desktops and smartphones. Now with the introduction of the Merchandising
Server, IT can easily “merchandise” their IT services in a convenient, simple way
that seamlessly connects users to virtual applications, desktops and other
services – in the same way retail merchandising managers create a compelling
shopping experience for their customers.

Can multiple instances of Access Gateway VPX run on the same physical server?
Yes. Multiple instances of Access Gateway VPX can run on the same physical
server. The administrator must ensure that the host server has enough adequate
resources (RAM, CPU, I/O, storage) to support the total running workload.

Citrix Access Gateway - Frequently Asked Questions for Partners 15

Licensing
Is Access Gateway Included in the Platinum Edition Products?
The Access Gateway enables secure application and desktop access for the Citrix
application and desktop delivery controllers through the Platinum edition:

XenApp Platinum – contains an Access Gateway Universal license for every

purchased CCU. Access Gateway appliances must be purchased separately in
order to use Access Gateway.

XenDesktop Platinum – contains an Access Gateway Universal license for every

purchased CCU. Access Gateway appliances must be purchased separately in
order to use Access Gateway.

NetScaler Platinum – contains 100 Access Gateway Universal licenses per

purchased appliance or HA Pair. Please note that additional AG Universal License
CCUs can be purchased.

Non-Platinum editions of XenApp and XenDesktop can be used with Access

Gateway for no additional cost per user. Each Access Gateway and NetScaler
appliance includes secure access to these products (see “Access Gateway
Platform License”).

What is an Access Gateway Universal License?

An Access Gateway Universal License is a concurrent user license, which is only
required for sessions in which users connect to resources other than XenApp,
XenDesktop, Citrix Receiver, or where endpoint analysis is used to determine the
appropriate level of access for that session. The Access Gateway Universal
license is a version-less and edition-less license entitlement for the Access
Gateway product line. It can be applied to any edition of Access Gateway or any
model of Access Gateway appliance to enable relevant functionality.

The Access Gateway Universal license allows customers to simply purchase the
needed number of concurrent remote access users and move between Access
Gateway editions as their needs change simply by purchasing new appliances.
Using the Access Gateway Universal license enables Citrix to dramatically
simplify the purchasing, upgrade, and migration options by offering a single
license with three volume pricing tiers.

What is the Access Gateway Platform License?

Access Gateway Platform Licenses enable basic connections through Access
Gateway to XenApp hosted applications or XenDesktop / VDI-in-a-Box hosted
desktops without requiring an Access Gateway user license for each connection.
Each Access Gateway and NetScaler appliance (physical and virtual) includes an
Access Gateway Platform License as an entitlement and allows user connections
up to the maximum capacity of the appliance. Previously, connections to XenApp

Citrix Access Gateway - Frequently Asked Questions for Partners 16

and XenDesktop required an Access Gateway concurrent user license so this
change represents a significant cost savings to customers.

What features does the Access Gateway Platform License enable?

A basic connection using the Access Gateway platform license supports:
 Strong authentication
 Integration with Citrix Web Interface, to broker connections to XenApp /
XenDesktop / VDI-in-a-Box
 Integration with CloudGateway Express
 Secure SSL relay of ICA session traffic
 Compatibility with Citrix Receiver (hosted applications & desktops only)
 Secure tunneling for support of Merchandising Server

These capabilities and the reduced cost of ownership make Access Gateway an
ideal replacement to Secure Gateway. All XenApp customers are highly
encouraged to upgrade their environment from Secure Gateway to Access
Gateway and new XenApp and XenDesktop customers should deploy Access
Gateway exclusively as their preferred secure access solution.

How does a customer receive an Access Gateway Platform License?

The platform license is available with all new Access Gateway and NetScaler
appliance purchases. In addition, existing customers with appliances covered
under Warranty or Maintenance are entitled to Access Gateway platform licenses
at no additional charge.

What features do Access Gateway Universal Licenses enable?

A concurrent user connection using the Access Gateway Universal license
supports:
 Full network-layer VPN tunneling
 Endpoint Analysis
 Smart Access - Adaptive policy control (including published application
and virtual channel filtering)
 Clientless access to e-mail, web sites and file shares
 Full integration with CloudGateway Enterprise deployments, including
both AppController only and AppController + Storefront deployments

Can the Access Gateway Platform License and Universal Licenses work together?
The Access Gateway Platform License and Universal Licenses can co-exist on the
same appliance. Access Gateway Universal Licenses are consumed only when
users log on to an Access Gateway virtual server running in “SmartAccess” mode.
For connections to an Access Gateway virtual server running in “Basic” mode,
Access Gateway Universal licenses are not consumed.

I already own Access Gateway appliances and licenses; do I need to purchase new
licenses?
Existing customers who own an Access Gateway appliance, which is covered
under Warranty or Maintenance, are entitled to the Access Gateway platform
license at no additional cost. Platform licenses for existing appliances may be

Citrix Access Gateway - Frequently Asked Questions for Partners 17

obtained using the license allocation/activation tool at
http://www.citrix.com/mycitrix.

What are the CCU Pricing Bands and How Do They Work in Conjunction with
Program Discounts?
The Access Gateway Universal license (CCU) is available in two pricing tiers: 1-
2,499 users; and 2,500 or more users, and the price per user varies depending
upon the pricing tier. The pricing band is determined by the number of
concurrent user licenses purchased in the transaction, and then the standard
licensing program discounts (e.g. ELP, etc.) are applied. In other words, there are
two possible discounts that may be applied to the full SRP: first the volume
purchase discount (which establishes a new SRP depending on the quantity) and
then the standard discount programs are applied to the ̳new‘ SRP. Please see the
table provided within this FAQ document for details around the two pricing tiers.

Do the Discounts Provided by Pricing Bands Extend Across Multiple Transactions?

No. The volume discounts offered by the pricing bands are calculated based on
the number of concurrent licenses purchased during the transaction and do not
span multiple transactions or line items. For example, a customer who purchases
1,000 concurrent licenses and then purchases 1,600 concurrent licenses in the
second transaction, will pay based on the 1-2,499 users band in both
transactions. The license purchases are not cumulative (pricing for the 2nd
transaction is not discounted based on 1,000+1,600 user licenses and does not
use the pricing for the 2,500 or more user price band).

How does Citrix deliver License Codes?

For new orders, license codes are delivered via e-mail.

How Do I Allocate and Download Access Gateway License Files?

License codes are converted to license files on the MyCitrix site
www.mycitrix.com. Under the menu, choose SupportProduct Activation and
select the “Activate/Allocate” tab.

What about Disaster Recovery?

The End User License Agreement for Citrix Access Gateway allows user licenses
to be installed on an unlimited number of appliances. Organizations are free to
distribute load across multiple active Access Gateway appliances as long as the
total number of concurrent sessions across all appliances does not exceed the
total number of licenses purchased from Citrix.

Citrix Access Gateway - Frequently Asked Questions for Partners 18

Packaging and Pricing
Has the Pricing for Appliance Models Changed?
No, appliance pricing has not changed recently. Here are the current pricing and
support user guidelines:
Versions
Appliance List Price (US) Max Users
Supported
Access Gateway 9.3, 10.0 $ 995 500
VPX
MPX 9.3, 10.0 $ 9,000 5,000

Why are Discounts for High-Availability Pairs Not Offered on the MPX?
High-availability pair discounts are no longer required because the lower single
unit price is exactly 50% of the previous HA pair price (of the Series 7000).
Customers who require HA pairs should purchase two units of the MPX and the
total cost will be equal to the previous HA pair pricing.

Is Access Gateway Functionality Available on the New NetScaler MPX Appliances?

Yes, all NetScaler appliances include 5 concurrent user licenses that enable
Access Gateway functionality on these devices (NetScaler Platinum includes 100
Access Gateway Universal Licenses). Access Gateway Universal Licenses may be
added to increase the number of user connections supported on these
appliances.

Has the Price for Access Gateway User Licenses Changed?

No, the pricing for the Access Gateway licensing has not changed since early
2010:
License Cost (US)
Concurrent User Licenses (CCUs) SA Renewal (US)
(with 1 full year SA)
Universal License (1-2,499) $ 100 / user $ 13 / user / year
Universal License (2,500+) $ 50 / user $ 7 / user / year

As with appliances, licensing is eligible for program discounts.

How is Subscription Advantage Renewal Pricing Calculated for Universal Licenses?

All Access Gateway Universal license Subscription Advantage renewal pricing is
based on the original SRP as defined by the pricing tier. Subscription Advantage
renewal pricing is NOT based on the aggregate number of Access Gateway
Universal licenses owned (if purchased across multiple transactions).

What are annual Universal Licenses and how much do they cost?
Universal licenses are available for purchase on an annual basis. These licenses
must be renewed every 12 months and include Subscription Advantage.
Volume discounts apply and pricing is as follows:
License Cost (US)
Concurrent User Licenses (CCUs)
(with 1 full year SA)
Universal License (1-2,499) $ 42 / user / year

Citrix Access Gateway - Frequently Asked Questions for Partners 19

Universal License (2,500+) $ 21 / user / year

How does Citrix deliver Access Gateway VPX?

Access Gateway VPX will be delivered via electronic download through the
MyCitrix customer portal.

Does the price change affect Subscription Advantage renewal costs?

Yes. Subscription Advantage™ renewal pricing is also reduced. Customers who
purchased Access Gateway Universal licenses at the higher price tier will see a
reduction in their Subscription Advantage renewal prices.

Citrix Access Gateway - Frequently Asked Questions for Partners 20

Ordering
How is the Citrix Access Gateway Priced?
Contact your Citrix authorized reseller or sales team for more information about
purchase options and pricing for both appliances and licensing (both hardware
and software must be purchased to utilize Access Gateway).

Is There a Minimum Purchase Requirement?

Yes, Citrix Access Gateway licenses have a minimum order quantity of 5
concurrent users per order. Additional licenses are available in any quantity.

Are Firmware Updates Available for Access Gateway Appliances?

Yes, all Citrix Access Gateway user licenses include one year of Subscription
Advantage membership. Subscription Advantage entitles customers to receive
future software releases (including appliance firmware updates) as a benefit of
the program. Customers with valid Subscription Advantage memberships can
receive the latest Access Gateway software by logging into MyCitrix.com and
downloading the latest available updates. Note that Subscription Advantage
membership does NOT include technical support or an extended appliance
warranty.

Customers may also extend Subscription Advantage membership annually with a

per-user renewal fee.

Are the Access Gateway Appliances Covered by Warranty?

Yes, all Access Gateway appliances sold include a one-year hardware warranty.
This warranty entitles customers to replace the Access Gateway appliance in the
event of a hardware failure. Warranties can be extended for up to 3 years.

Additionally, Access Gateway MPX appliances can be purchased with a Bronze /

Silver / Gold Maintenance agreement, which bundle extended warranty,
expedited RMA, and Technical Support into a single package. For more
information, contact your Citrix authorized reseller or local Citrix office.

Can Resellers Obtain NFR Licenses?

As a key benefit of membership in the Citrix Partner Network, partners receive
Not-for-Resale (NFR). Citrix offers reduced pricing on Not-for-Resale (NFR)
appliances for MPX series appliances. The pricing, availability and terms of use of
NFR licenses vary by geography.
Not-For-Resale Licenses are intended to demonstrate Citrix Access Gateway in a
non-production environment. Partners use them to show potential customers
what Citrix Access Gateway can do for their organizations. Not-for-resale
licenses are not to be transferred to any other organization, either temporarily
or permanently.

Citrix Access Gateway - Frequently Asked Questions for Partners 21

How Do Customers Obtain Evaluation Licenses?
Evaluation licenses are designed for use by customers who are piloting a Citrix
solution, and contain the same media as the retail product. The availability of
evaluation licenses for Access Gateway varies by geography. Contact your local
Citrix office for details.

Support and Subscription Advantage

Does Access Gateway VPX include Subscription Advantage?
Yes. Access Gateway VPX and Access Gateway Universal connection licenses
include a 12-month membership into the Citrix Subscription Advantage
program. Subscription Advantage entitles customers to receive future software
version updates as a benefit of the program.

Subscription Advantage provides a convenient way for customers to budget for

their product version upgrades annually without having to anticipate variable
costs throughout the year.

Has the Price for Access Gateway SA Changed?

Yes, the pricing for the Access Gateway SA has changed to align with NetScaler:
Access Gateway VPX SA Renewal (US)
Non NetScaler Based $ 129 / year
NetScaler Based $ 150 / year

Does Subscription Advantage include technical support?

No, Subscription Advantage does not include Technical Support. Technical
support may be purchased from Citrix Solution Advisors or directly from Citrix.
For a complete list of Citrix Technical Support options please visit
http://www.citrix.com.

Can Access Gateway VPX be upgraded?

Yes. As Citrix releases new versions of the Access Gateway firmware, customers
can upgrade Access Gateway VPX to the latest supported edition in the same
manner they would using a physical appliance. Firmware versions are
downloaded from Citrix.com and the upgrade process is performed using the
Access Gateway administration utilities.

Are warranties and maintenance available for the Access Gateway VPX?
No. Warranty and maintenance options are not available for Access Gateway
VPX. These programs only apply to physical appliances.

What do I do if I experience a technical support issue with the XenServer hosting

Access Gateway VPX?
Technical support for Access Gateway VPX is covered under the standard Citrix
technical support offerings. Customers may purchase support on a per-incident
basis, or through a preferred support agreement.

Citrix Access Gateway - Frequently Asked Questions for Partners 22