Section 5: Improve App and Data Security
5.01
Objective: Determine how to prevent jailbreak attacks by managing user assignments
ICA file signing to protect against application or desktop launches from untrusted servers
https://docs.citrix.com/en-us/receiver/windows/current-release/secure-communication/ica-file-signing.html
Configure support for HTTP strict transport security (HSTS)
https://docs.citrix.com/en-us/citrix-adc/12-1/ssl/how-to-articles/ssl-support-for-hsts.html
Header Insertion for Content Security
https://support.citrix.com/article/CTX218065
WHITE PAPER | System Hardening Guidance for XenApp and XenDesktop
https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/system-hardening-for-xenapp-and-xendesktop.pdf
5.02
Objective: Determine how to minimize the impact of attacks.
Citrix Analytics for Security (Security Analytics)
https://docs.citrix.com/en-us/security-analytics.html
Agent cannot connect to the Server
https://docs.citrix.com/en-us/session-recording/current-release/troubleshooting/session-recording-agent-cannot-connect.html
WHITE PAPER | System Hardening Guidance for XenApp and XenDesktop
https://www.citrix.com/content/dam/citrix/en_us/documents/products-solutions/system-hardening-for-xenapp-and-xendesktop.pdf
Section 6: Secure Machines Running the Virtual Delivery Agent
6.01
Objective: Determine how to Encrypt VDA communications with TLS and how to enhance OS security through image management.
Transport Layer Security (TLS)
https://docs.citrix.com/en-us/xenapp-and-xendesktop/7-15-ltsr/secure/tls.html#enforce-https-traffic-only/
End-To-End Encryption with XenApp and XenDesktop Security guidance for Citrix Deployments
https://docs.citrix.com/en-us/storefront/downloads/end-to-end-encryption-with-xenapp-and-xendesktop.pdf
6.02
Objective: Determine how to use GPOs and Citrix Policies to lock down machines running VDAs.
Demo Guide SmartAccess and SmartControl with NetScaler Gateway and XenApp/XenDesktop
https://www.citrix.com/content/dam/citrix/en_us/documents/guide/demo-guide-for-smart-access-smart-control.pdf
Configuring the VPN User Experience
https://docs.citrix.com/en-us/citrix-gateway/current-release/vpn-user-config.html
ICA policy settings
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/policies/reference/ica-policy-settings.html#client-clipboard-redirection
Configure COM Port and LPT Port Redirection settings using the registry
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/policies/reference/configure-com-ports-and-lpt-redirection-using-registry.html
Section 7: Advanced Troubleshooting
7.01
Objective: Determine how to use various tools to troubleshoot a Citrix Virtual Apps and Desktops environment.
Citrix Health Assistant - Troubleshoot VDA Registration and Session Launch
https://support.citrix.com/article/CTX207624
Troubleshoot machines
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/troubleshoot-deployments/machines.html#machine-based-historical-resource-utilization
Application probing
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/troubleshoot-deployments/applications/app-probing.html#configure-application-probing
Monitoring policy settings
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/policies/reference/virtual-delivery-agent-policy-settings/monitoring-policy-settings.html#policies-for-application-failure-monitoring
How to use Director to troubleshoot application launch errors
https://support.citrix.com/article/CTX223927
Monitor historical trends across a Site
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/site-analytics/trends.html#available-trends
How to Collect a Citrix Diagnostic Facility (CDF) Trace at System Startup
https://support.citrix.com/article/CTX127131
CDFControl
https://support.citrix.com/article/CTX111961
Integrate Citrix ADM with Citrix Director
https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/deploy/integrate-netscaler-mas-with-drector.html
Configure network analysis
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/director/install-and-configure/hdx-insight.html
Citrix Scout
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/manage-deployment/cis/scout.html#what-is-collected
Citrix Insight Services
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/manage-deployment/cis.html
7.02
Objective: Determine how to use basic PowerShell commands to get information about a Citrix Virtual Apps and Desktops environment.
Get-BrokerSite
https://citrix.github.io/delivery-controller-sdk/Broker/Get-BrokerSite/
Get-Brokerdbconnection
https://developer-docs.citrix.com/projects/delivery-controller-sdk/en/latest/Broker/Get-BrokerDBConnection/
Get-Brokermachine
https://developer-docs.citrix.com/projects/delivery-controller-sdk/en/latest/Broker/Get-BrokerMachine/
7.03
Objective: Determine how to troubleshoot StoreFront issues for a given scenario.
Error: "An Error Occurred While Making The Requested Connection"
https://support.citrix.com/article/CTX132461
Configuring Single Sign-on on a new Citrix Receiver for Windows setup
https://support.citrix.com/article/CTX133982
7.04
Objective: Determine how to troubleshoot Citrix Gateway issues for a given scenario.
Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway
https://support.citrix.com/article/CTX206900
Troubleshooting Authentication Issues Through NetScaler or NetScaler Gateway with aaad.debug Module
https://support.citrix.com/article/CTX114999
7.05
Objective: Determine how to validate FMA services and SQL connection health in a Citrix Virtual Apps and Desktops environment.
The Citrix XenApp & XenDesktop FMA Services complete overview – new 7.12 Services included
https://www.basvankaam.com/2016/12/15/the-citrix-xenapp-xendesktop-fma-services-complete-overview-new-7-12-services-included/
How to Change the XML Port in XenDesktop
https://support.citrix.com/article/CTX127945
Under the Hood of XenApp & XenDesktop
https://www.citrix.com/blogs/2016/04/14/under-the-hood-of-xenapp-xendesktop/
7.06
Objective: Determine how to troubleshoot VDA registration issues for a given scenario.
How to Troubleshoot Virtual Delivery Agent (VDA) Registration issues
https://support.citrix.com/article/CTX136668
The Most Common VDA Registration Issues & Troubleshooting Steps
https://www.citrix.com/blogs/2018/02/13/the-most-common-vda-registration-issues-troubleshooting-steps/
Citrix Virtual Apps and Desktops service
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops-service.html#citrix-cloud-components
7.07
Objective: Determine how to troubleshoot common HDX connection issues for a given scenario.
Get-BrokerConnectionLog
https://developer-docs.citrix.com/projects/citrix-virtual-apps-desktops-sdk/en/latest/Broker/Get-BrokerConnectionLog/
How to Calculate the Load Evaluator Index on DDC
https://support.citrix.com/article/CTX202150
Section 8: App Layering and Creating the Layers
8.01
Objective: Determine how App layering components communicate.
Applicance settings
https://docs.citrix.com/en-us/citrix-app-layering/4/manage/appliance-settings.html
Layer
https://docs.citrix.com/en-us/citrix-app-layering/4/layer.html
8.02
Objective: Determine how to create an OS Layer.
Prepare the OS for layering
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/prepare-os-for-layering.html#requirements-and-recommendations
Manage image template
https://docs.citrix.com/en-us/citrix-app-layering/4/publish/update-image-template.html
Create the OS Layer
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/create-os-layer.html#considerations-for-your-os-layer
8.03
Determine how to create a Platform Layer.
Create Platform layer
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/create-platform-layer.html#process-for-creating-a-platform-layer
8.04
Determine how to create an App Layer.
Citrix App Layering 4.x: Best Practices
https://support.citrix.com/article/CTX225952
App Layering Recipes
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/app-layering-recipes.html
8.05
Objective: Determine how to create an Elastic App Layer.
Deploy App layers as elastic layers - About
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/assign-elastic-layers.html#about-elastic-layers
Deploy App layers as elastic layers - Considerations
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/assign-elastic-layers.html#considerations
8.06
Objective: Determine how to create User Layers.
Deploy user layers - Requirements
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/enable-user-layers.html#requirements
Deploy user layers – Configure Security Settings on User Layer Folders
https://docs.citrix.com/en-us/citrix-app-layering/4/layer/enable-user-layers.html#configure-security-settings-on-user-layer-folders
Comments are closed 
