When the Access Gateway Plug-in is loaded, users are prompted to log on to the Access Gateway to establish the connection. The Access Gateway administrator determines the type of authentication using the Authentication tab of the Administration Tool, as described in “Configuring Authentication and Authorization” on page 61.
If double-source authentication is configured on the Access Gateway and the users are logging on using full access, they type their user name and passwords for each type of authentication. For example, users are configured to use LDAP authentication and RSA SecurID. They would type their password, their RSA SecurID personal identification number (PIN), and RSA SecureID code.
Note: If you are using Citrix Access Gateway Plug-in for Linux, the connection window does not include the options described in the following procedure.
The Access Gateway Plug-in is installed the first time the user logs on to the portal Web page.
To install the Access Gateway Plug-in
1. In a Web browser, type the Web address of the Access Gateway, for example, https://www.mycompany.com.
2. If the Access Gateway requires the user to log on, type the user name and password and click Log On.
3. On the Citrix Access Gateway portal page, click Citrix Access Gateway and follow the prompts to install the Access Gateway Plug-in.
After installation, users must log on again using the icon on the Start menu.
To log on to the Access Gateway using the Access Gateway Plug-in 1. Click Start > All Programs > Citrix > Citrix Access Clients > Citrix
Access Gateway.
2. In the Citrix Access Gateway dialog box, users enter their logon credentials.
If the Access Gateway is configured with more than one authentication realm and users need to connect to a realm other than the Default, enter the realm name before your user name (realmName\userName).
If your site uses Secure Computing SafeWord products, type the passcode.
3. If the Access Gateway requires double-source authentication, type the user name and the password for each authentication type.
If your site uses RSA SecurID authentication, your password is your PIN plus the number displayed in the RSA SecurID token.
.
The Access Gateway dialog box showing double-source authentication
4. If the user needs to change settings, right-click the dialog box and then click Advanced Options. You can change the following settings:
• Web address of the appliance. This also displays the last 10 IP addresses or FQDNs to which the user connected.
• Proxy settings for the client device. Users can configure automatic proxy server detection or manually configure a proxy server.
• Enabling split DNS. This setting can be set in the Administration Tool. If it is unavailable, the setting cannot be changed. For more information about split DNS, see “Enabling Split DNS” on page 134.
• Disabling security certificate warnings. If you did not install a secure certificate signed by a Certificate Authority, users see a certificate warning when they log on. This setting disables the warning.
The Access Gateway dialog box with the pop-up menu
5. You can show or hide the secondary password field. To do so, do one of the following:
• If the secondary password is showing in the dialog box, right-click anywhere in the box and in the menu, select Hide Secondary Password.
• If the secondary password is not showing, in the dialog box, right-click anywhere in the box and in the menu, select Show Secondary Password.
Note: The password labels in the Citrix Access Gateway dialog box can be changed on the Authentication tab in the Administration Tool. If you changed the password labels, the text appears in the Citrix Access Gateway dialog box and on the logon Web page. The menu item for showing and hiding the password labels does not change. For more information, see “Changing Password Labels” on page 92.
6. Click Connect.
Note: If a digital certificate signed by a Certificate Authority is not installed on the Access Gateway, you will see a Security Alert. For more information, see
“Creating and Installing Certificates” on page 46 and “Securing Connections with Digital Certificates” on page 185.
When the connection is established, a status window briefly appears and the Access Gateway Plug-in window is minimized to the notification area. The icon indicates whether the connection is enabled or disabled and displays any status messages.
To view Access Gateway Plug-in status properties when users are logged on
Double-click the Access Gateway connection icon in the notification area.
Alternatively, right-click the icon and choose Properties from the menu.
The Citrix Access Gateway dialog box appears.
The properties of the connection provide information that is helpful for troubleshooting. The properties include:
• The General tab displays connection information.
• The Details tab displays server information and a list of the secured networks the clients are allowed to access.
• The Access Lists tab displays the access control lists (ACLs) that are configured for the user connection. This tab does not appear for users who are not in a group or if an ACL is not configured for a group.
To close the window, click Close.
To disconnect the Access Gateway Plug-in
Right-click the Access Gateway icon in the notification area and choose Disconnect from the menu.