Creating an ICA listener¶
- Select > .
- Click .
- Select
ICA
from the Protocol drop-down list. - In the Permissions section, add users allowed to manage this object.
- In the Connection section, select desired connection mode.
bastion
Note
- User connects to the target host by including its name in the login string, e.g.
john_smith#mail_server
. - For details on bastion connection mode, refer to Connection modes topic.
- Select
bastion
from the Mode drop-down list. - Select the the IP address from the Local address drop-down list and enter port number.
gateway
Note
User connects to the target host by providing its actual IP address. Fudo PAM moderates the connection with the remote host using own IP address. This option requires deploying Fudo PAM in the bridge mode.
- Select
gateway
from the Mode drop-down list. - Select the network interface used for handling connections over this listener.
proxy
Note
- User connects to the target host by providing Fudo PAM IP address and port number which unambiguously identifies target host.
- Proxy mode is not supported by dynamically added hosts.
- Select
proxy
from the Mode drop-down list. - Select the the IP address from the Local address drop-down list and enter port number.
Note
- The Local address drop-down list elements are IP address defined in the Network configuration menu (Network interfaces configuration) or labeled IP addresses (Labeled IP addresses).
- Selecting the
Any
option will result in Fudo listening on all configured IP addresses. - In case of cluster configuration, select a labeled IP address from the Local address drop-down list and make sure that other nodes have IP addresses assigned to this label. For more information refer to the Labeled IP addresses topic.
- In the External address field, enter an IP address (or FQDN name) along with the port number, under which Fudo can be accessed from outside the local network.
Note
The external address is listed in user portal and it enables establishing connections from external networks.
transparent
Note
User connects to the target host by providing its actual IP address. Fudo PAM moderates the connection with the remote host using user’s IP address. This option requires deploying Fudo PAM in the bridge mode.
- Select
transparent
from the Mode drop-down list. - Select the network interface used for handling connections over this listener.
- Select Use TLS option to enable encryption.
- Select Enable SSLv2 support to support SSL v2 encrypted connections.
- Select Enable SSLv3 support to support SSL v3 encrypted connections.
- In the TLS certificate field, click i to upload (optionally provide encryption passphrase) or i to generate TLS certificate.
Note
In case of TLS encrypted connections, Fudo returns an .ica configuration file to the Citrix client, which has the FQDN server address (Address) set to the common name defined in the TLS certificate.
- Click .
Related topics: