Perform the following steps to configure a device level VPN. To configure a device level VPN on Citrix Endpoint Management Traffic from all apps and services is tunneled to Citrix Gateway based on the VPN policies (such as Full-tunnel, Split-tunnel, Reverse Split tunnel) defined in Citrix ADC. Device level VPN profilesĭevice level VPN profiles are used to set up a system wide VPN. Also you can configure On-Demand, Always-On, Proxies by following the Citrix Endpoint Management (formerly XenMobile) documentation or Apple’s MDM VPN payload configuration. This section explains the configuration steps for a basic Device-wide and Per-App VPN profile. Other MDM solutions can use this document as reference when working with Citrix SSO. The following section captures step-by-step instructions to configure both device-wide and per-app VPN profiles for Citrix SSO using Citrix Endpoint Management (formerly XenMobile) as an example. Configure an MDM managed VPN profile for Citrix SSO You can add the VPN configuration on macOS from the Citrix SSO Configuration page. To use the Citrix SSO app with Citrix Gateway VPN without MDM, you must add a VPN configuration. NAC on Citrix SSO requires an MDM server such as XenMobile and Citrix Gateway.

It supports a feature called Network Access Control (NAC) using which, MDM administrators can enforce end user device compliance before connecting to Citrix Gateway. Network roaming (Switch between Wi-Fi, Ethernet, and so on)Ĭitrix SSO for macOS is compatible with most MDM providers such as Citrix XenMobile, Microsoft Intune and so on.

Server Initiated Connections (SIC) support The following table compares the availability of various features between Citrix VPN and Citrix SSO. Feature comparison between Citrix VPN and Citrix SSO With an MDM server, an admin can now remotely configure and manage device level VPN profiles and per-app VPN profiles.Ĭitrix SSO app for macOS can be installed from a Mac App store. Citrix SSO App supports advanced features like Server Initiated Connections and DTLS.Ĭitrix SSO app provides complete Mobile Device Management (MDM) support on macOS. Network Extension with support for SSL VPN is available on devices running macOS 10.11+.Ĭitrix SSO app replaces the legacy Citrix Gateway plug-in that was based on Kernel Extensions (KE) which is going to be deprecated by Apple soon. NE framework from Apple is a modern library which contains APIs that can be used to customize and extend the core networking features of macOS. Citrix SSO is built using Apple’s Network Extension (NE) framework. You can now securely access business critical applications, virtual desktops, and corporate data from anywhere at any time.Ĭitrix SSO is the next generation VPN client for Citrix Gateway to create and manage VPN connections from macOS devices. Citrix SSO app for macOS provides best-in-class application access and data protection solution offered by Citrix Gateway.

Citrix plugin for mac