How to Force Connections Through NetScaler Gateway Using Optimal Gateway Feature of StoreFront

This article describes how to use the Optimal Gateway setting available in StoreFront to force applications to launch through NetScaler Gateway. It applies when accessing StoreFront through Citrix Receiver to connect to NetScaler Gateway virtual server and launching resources from XenApp/XenDesktop using a single logon attempt (single sign-on).


  • 2 NetScaler Gateway VPXs

  • 2 XenDesktop 7.1 DDCs

  • 2 separate StoreFront servers


From a domain joined device on the LAN/MPLS network, a user must log on only once with the domain credentials at the windows logon prompt and be able to launch their Citrix apps using native Receiver, through a NetScaler protected SSL connection. Before attempting to get this functionality to work, ensure that users can launch sessions with StoreFront directly, and then with NetScaler in ICA Proxy mode.


Leave a Reply