You can configure the network ranges for which users' application or desktop launch traffic (ICA traffic) should be routed through NetScaler to the XenApp server. This is typically used to provide external access to Citrix-published resources.

When a user launches an application or desktop from the Workspace ONE portal, if the user's IP address falls in the range configured for Netscaler, the ICA traffic is routed through NetScaler to the XenApp server.

Note: To configure resource launch for internal networks, see Configuring Resource Launch for Internal Network.
Note: The information in this topic also applies to Citrix Secure Gateway. If you are using Citrix Secure Gateway instead of NetScaler, enter the Secure Gateway host name and port, and select the NetScaler check box.


You have configured VMware Identity Manager for NetScaler in the Citrix virtual apps collection.


  1. Log in to the VMware Identity Manager console.
  2. Review your network ranges and create new ones, if required.
    1. Click the Identity & Access Management > Policies tab.
    2. Click Network Ranges.
    3. Review the network ranges and click Add Network Range to add new ranges, if required.
  3. Click the Catalog > Virtual Apps tab, then click Virtual Apps Settings.
  4. Select Network Settings.
  5. Select the network range to configure for Citrix resource launch.
  6. In the XenApp section of the page, enter the following information.
    1. Enter the NetScaler host name in the Client Access URL Host field. For example:
    2. Enter the port in the URL Port field. For example: 443
    3. Select the NetScaler check box.
  7. Click Save.