Securing StoreFront

Traditionally, StoreFront runs on Windows Server 2012 R2. Citrix uses the SSL standard to secure communications with XenDesktop. The most common deployment is to use a Single-Hop DMZ with NetScalers as the frontend to the XenDesktop deployment. The feature of NetScaler that is used for SSL security is called NetScaler Gateway. HTTPS or SSL is used on the external, public-facing side of NetScaler. HTTPS or SSL is optional on the internal, private-facing side of NetScaler. Some organizations that have very strict security policies also use SSL on the internal, private-facing side of NetScaler.

NetScaler runs a load balancing service for StoreFront in addition to SSL. This is especially helpful in case you need to scale up or grow your deployment by adding more StoreFront servers without disrupting the existing operations. Also, if a StoreFront server goes down, NetScaler will load balance around the failed server, ensuring high availability for your users. Citrix makes setting...