Mac Plugin For Citrix

Applicable Products

  • Receiver for Windows

Objective

This article provides information on installing the Citrix Online Web Plug-in for Windows on endpoint devices when using third-party software deployment or scripting solutions.
The Citrix Online Web Plug-in for Windows installation package (CitrixOnlinePluginWeb.exe) is designed for easy deployment using a web page or XenApp Web site; it might be installed with or without administrator privileges on an endpoint device.

  • If the user logged onto the endpoint device is an administrator, the web plug-in installs and is available for all users who log on to the computer.

To install only the web plug-in component (with support for Flash, USB, and XenDesktop): CitrixOnlinePluginFull.exe ADDLOCAL=”ICAClient,Flash,USB,DeskstopViewer”. Note: The DesktopViewer component for XenDesktop requires.NET 2.0 to be installed on the workstation prior to installing the web plug-in. Citrix gateway plugin for Mac Version 3.4.1 will not capture IPv6 DNS queries. /Internet plug-ins/CitrixICAClientPlugIn.plugin - /LaunchAgents/com.citrix.AuthManagerMac.plist - /LaunchAgents/com.citrix.ServiceRecords.plist /Users/Shared - /Citrix/Receiver Integration (entire folder) /Library - /Internet plug-ins/CitrixICAClientPlugIn.plugin - /Application Support/Citrix Receiver - CitrixID - Config - Module - /Preferences/com.citrix.receiver.nomas.plist.

  • If the logged on user is not an administrator, the plug-in installs and is available for the currently logged on user only; each subsequent user who logs on to the computer must install the web plug-in once initially.

Using Citrix Online Web Plug-in for Windows installation package with third-party software deployment or scripting solutions that use the Run As command to elevate account privilege to Administrator leads to undesirable results. So, it is recommended to use the installation package for the full version of the plug-in (CitrixOnlinePluginFull.exe).

Default components installed with the Web installation package are different than those included with the full plug-in version. For more information on what is included in each plug-in version and for an overview of installation packages, refer https://docs.citrix.com/en-us/receiver/windows/4-3/receiver-windows-install-wrapper/receiver-windows-cfg-command-line-42.html on the Citrix eDocs site.

Instructions

To install the Citrix Online Web Plug-in for Windows on endpoint devices when using third-party software deployment or scripting solutions:

  1. Download the Full version of the Citrix Online Plug-in (CitrixOnlinePluginFull.exe) from https://www.citrix.com/downloads/citrix-receiver/legacy-receiver-for-windows/online-plug-in-123.html. Please note that this product has reach end of maintenance and is no longer supported by Citrix.

  1. In the third-party script file, use any of the following commands (command options are case-sensitive):

    To install only the web plug-in component (with support for Flash and USB)
    CitrixOnlinePluginFull.exe ADDLOCAL=”ICA_Client,Flash,USB”

    To install only the web plug-in component (with support for Flash, USB, and XenDesktop):
    CitrixOnlinePluginFull.exe ADDLOCAL=”ICA_Client,Flash,USB,DeskstopViewer”

    Note: The DesktopViewer component for XenDesktop requires .NET 2.0 to be installed on the workstation prior to installing the web plug-in. If .NET 2.0 is not installed on the computer, users will receive a warning message each time an application is opened.

Additional Resources

Windows
To Remove or Cleanup Plug-In or Receiver installation use the following tool:
CTX137494 - Receiver Clean-Up Utility

Applicable Products

  • NetScaler Gateway

Citrix Receiver For Mac Os

Objective

This article contains information about how to configure NetScaler Gateway EPA to scan the Media Access Control (MAC) address to authenticate the IP address of the user.

Background

Mac Plugin For Citrix

When authenticating the (MAC address of an internet user against predefined combinations of MAC addresses and IP addresses, the network-based MAC address scan fails. This is because the network traffic from the internet does not contain the actual MAC address of the user. The MAC address available with the network traffic is that of a gateway or an intermediate appliance.

Therefore, to scan the MAC address from the computer of the user, registry-based scan or a Client Security scan must be performed.

Instructions

Registry Based Method

Complete the following procedure to perform a registry-based scan for the MAC address of an internet user to authenticate them against predefined combinations of MAC addresses and IP addresses:
Note: The following procedure contains a sample configuration with registry scan to search the MAC address or an equivalent entry in the registry of the computer.

  1. Search the MAC address in the registry of the computer.The exact match of the MAC address might not be easy to search. However, you can search for an equivalent entry for the MAC address. To search, run the following command on from the command prompt:
    net config rdr
    The following is the sample output of the command:

    The command completed successfully.

    Caution! Refer to the Disclaimer at the end of this article before using Registry Editor.

  2. Run the following command from the command prompt to start the Registry Editor utility:
    regedt32
    Note
    : Do not use the regedit command to start the Registry Editor utility. You cannot make the appropriate search if you run the regedit command.

  3. Search the key identified in the Step 1, such as A38A41F5-783E-4AED-9035-A2798922CE33, in the registry of the computer.The search for the sample entry displays that the key exists at the following location in the registry:

    The following screen shot displays the location of the key in the Registry Editor Window:

    In addition, the search shows that the sub key for this entry is NetCfgInstanceId. To locate the actual network interface card (NIC), ensure that you check all the options available under the entry. In the preceding screen shot, the Status Bar of the Registry Editor Window displays the complete path of the sub key.

  4. Run the following command from the command line interface of the NetScaler appliance to add the path that is identified in the preceding steps of the procedure:
    add aaa preauthenticationpolicy scan_epa q/CLIENT.REG(HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlClass
    {4D36E972-E325-11CE-BFC1-08002BE10318}
    0011_NetCfgInstanceId).VALUE '
    { A38A41F5-783E-4AED-9035-A2798922CE33}
    ' && REQ.IP.SOURCEIP 10.103.0.42/ EPA

    In this command, scan_epa is the name of the policy and EPA is the name of the action.

  5. Run the following command from the NetScaler CLI to enable pre-authentication checks:
    set aaa preauthenticationparameter -preauthenticationaction ALLOW -rule ns_true

    Note: Use this procedure to authenticate a small group of users. However, it might not be practical to add each of the large number of Secure Access (SSL VPN) users.

Citrix Download For Mac

Non-Registry Based Method

The following is the preauthentication policy for MAC address and domain check:
EPA MAC Check CLIENT.SYSTEM('MAC_ADDR_anyof_XXXXXXXXXXXX[COMMENT: MAC Address]') EXISTS – no colons or spaces or dashes in the MAC address.

To enable preauthentication policy for MAC address, run the following command from CLI:
add aaa preauthenticationpolicy <policy name> 'CLIENT.SYSTEM('MAC_ADDR_anyof_<MAC address>[COMMENT: MAC Address]') EXISTS' <Action Name>

Additional Resources

MAC's MAC addres filter in EPA will be as below

CLIENT.SYSTEM(MAC-MAC_ADDR_anyof_<MAC-addr>[COMMENT: MAC Address]) EXISTS

where as for Windows it appears as

MAC_ADDR_anyof_<MAC-addr>[COMMENT: MAC Address]

Disclaimer

Caution! Using Registry Editor incorrectly can cause serious problems that might require you to reinstall your operating system. Citrix cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk. Be sure to back up the registry before you edit it.