(if you are not load balancing storeFront servers, then still create a DNS entry internally to the StoreFront server) To use a single FQDN for external use and internal use, create an internal DNS entry to point to an IP address for the load balancer which is load balancing the StoreFront servers and change the base URL to match the chosen FQDN. We need to configure and prepare Citrix Storefront server for External access. For logical illustration and traffic flow I have separated them. Single DMZ ports configuration (Access gateway in DMZ between firewalls) – Note that the load balancing server is on same appliance as the Access gateway. I will illustrate how I configure end-to-end ICA communication to back-end Citrix resources via the NetScaler Access Gateway.
Citrix Access Gateway is a secure application access solution that allows users to access applications from anywhere.