Frequently Asked Questions: Citrix Access Gateway VPX and 2010 Licensing Changes

What’s New ................................................................................................................................................................................... 3 

What’s being announced for the Citrix Access Gateway product line? ........................................................................... 3 Access Gateway VPX .................................................................................................................................................................. 4 

Does Access Gateway VPX include all of the same features and functionality as the Model 2010 physical appliance? .................................................................................................................................................................................. 4 Why does Citrix offer Access Gateway as both virtual and physical appliances? .......................................................... 4 Is there a separate Access Gateway Enterprise Edition VPX? ......................................................................................... 4 What is the difference between Access Gateway VPX and NetScaler VPX? ................................................................. 4 

Technical Requirements .............................................................................................................................................................. 6 What are the minimum hardware requirements for Access Gateway VPX? .................................................................. 6 Is there a hardware compatibility list (HCL) for Access Gateway VPX? ........................................................................ 6 Is Access Gateway VPX supported on VMWare ESX or Microsoft Hyper-V? ............................................................ 6 Can I add more memory or virtual CPUs to increase performance and scalability? ..................................................... 6 How many users does Access Gateway VPX support? ..................................................................................................... 7 

Access Gateway VPX and XenServer ....................................................................................................................................... 7 Does Access Gateway VPX support XenServer NIC bonding? ...................................................................................... 7 Does Access Gateway VPX support XenServer High Availability? ................................................................................ 7 Does Access Gateway VPX support XenServer XenMotion? .......................................................................................... 7 What is the difference between an Access Gateway failover cluster and XenServer high availability? ...................... 7 Can Access Gateway failover cluster and XenServer high availability work together? ................................................. 8 Can Citrix Provisioning Server deploy Access Gateway VPX? ........................................................................................ 8 

Deployment and Planning ........................................................................................................................................................... 8 Where in the network is Access Gateway VPX deployed? ................................................................................................ 8 What are the supported deployment modes? ...................................................................................................................... 8 Can I pair Access Gateway VPX with a Model 2010 appliance in a failover cluster? ................................................... 8 Does the Access Gateway VPX operate in one-arm or two-arm mode? ........................................................................ 8 Can multiple instances of Access Gateway VPX run on the same physical server? ...................................................... 9 Can I host other virtual machines and Access Gateway VPX on the same physical server? ....................................... 9 

Licensing Changes ........................................................................................................................................................................ 9 What is the Access Gateway Platform License? .................................................................................................................. 9 What features does the Access Gateway Platform License enable? ................................................................................. 9 How does a customer receive an Access Gateway Platform License? ............................................................................. 9 When will the Access Gateway Platform License be available? ........................................................................................ 9 What is an Access Gateway Universal License? ................................................................................................................ 10 What features do Access Gateway Universal Licenses enable? ...................................................................................... 10 Can the Access Gateway Platform License and Universal Licenses work together? ................................................... 10 I already own Access Gateway appliances and licenses; do I need to purchase new licenses? .................................. 10 What is happening to Access Gateway Standard Edition User Licenses ...................................................................... 10 Does the End of Sale announcement mean that Access Gateway Standard Edition is being discontinued? .......... 10 Can I share Access Gateway Universal Licenses between Access Gateway VPX and Model 2010 appliance? ...... 11 How does Citrix deliver license codes? ............................................................................................................................... 11 How do I allocate and download Access Gateway license files? .................................................................................... 11 

Page

2

Can I use the same Universal License for disaster recovery scenarios? ......................................................................... 11 Packaging and Pricing ................................................................................................................................................................ 11 

How much does Access Gateway VPX cost? .................................................................................................................... 11 How does Citrix deliver Access Gateway VPX? ............................................................................................................... 11 How much does an Access Gateway Universal License cost? ........................................................................................ 11 Has the price of an Access Gateway Universal License changed? ................................................................................. 12 Do the discounts provided by pricing bands extend across multiple transactions? ..................................................... 12 Does the price change affect Subscription Advantage renewal costs?........................................................................... 12 

Support and Subscription Advantage ...................................................................................................................................... 12 Does Access Gateway VPX include Subscription Advantage? ....................................................................................... 12 Does Subscription Advantage include technical support? ............................................................................................... 12 Can Access Gateway VPX be upgraded? ........................................................................................................................... 12 Are warranties and maintenance available for the Access Gateway VPX? ................................................................... 12 What do I do if I experience a technical support issue with the XenServer hosting Access Gateway VPX? .......... 13 

Citrix Integration ........................................................................................................................................................................ 13 Can I host other Citrix virtual machines or VPX appliances on the same XenServer? .............................................. 13 Does Citrix Access Gateway work with Citrix XenApp? ................................................................................................ 13 Does Access Gateway VPX work with Citrix XenDesktop? .......................................................................................... 13 Does Access Gateway VPX work with Citrix Receiver and Citrix Merchandising Server? ....................................... 13 How does Access Gateway integrate with Dazzle and Merchandising Server? ........................................................... 13 Does Access Gateway VPX work with Citrix Branch Repeater? ................................................................................... 14 Does Access Gateway VPX require Citrix XenApp or XenDesktop? .......................................................................... 14 Is the Access Gateway Model 2010 appliance being discontinued? ............................................................................... 14 

Page

3

What’s New What’s being announced for the Citrix Access Gateway product line? Citrix has announced four notable changes to the Access Gateway product line Including:

New

Description

Access Gateway VPX

Access Gateway VPX is a virtual appliance form factor that delivers the same features and functionality as the Model 2010 physical appliance. Customers may deploy Access Gateway VPX as a virtual workload on their own hardware, in addition or as an alternative to using a physical appliance.

Pricing starts at US $995 per virtual instance and includes the new Access Gateway Platform License, plus one year of Subscription AdvantageTM.

Access Gateway Platform License Support for user connections through Access Gateway to XenApp hosted applications or XenDesktop hosted desktops is now provided without requiring an Access Gateway user license for each connection.

Access Gateway Universal License Price Reduction

The starting list price of Access Gateway Universal licenses is reduced from US $170 to $100 per concurrent user.

Corresponding Subscription Advantage renewal pricing is also reduced. Customers who purchased Access Gateway Universal licenses at the higher price tier will see a reduction in their Subscription Advantage renewal prices beginning on February 3, 2010.

Access Gateway Standard Edition User License End of Sale

The Access Gateway Standard Edition concurrent user license will be discontinued, effective June 30, 2010. Existing Access Gateway Standard Edition licenses under active Subscription Advantage may be converted to Access Gateway Universal licenses at no cost.

Page

4

Access Gateway VPX Does Access Gateway VPX include all of the same features and functionality as the Model 2010 physical appliance? Yes. The Access Gateway VPX provides the same features and functionality as the Model 2010 appliance, but runs as a virtual machine instance rather than a physical appliance. The current release is based on Access Gateway 4.6.2.

Why does Citrix offer Access Gateway as both virtual and physical appliances? Citrix offers a choice of form factors to ensure customers have the flexibility of multiple deployment options not available from other vendors. Virtual appliances are ideal for customers who:

• Have limited rack space and infrastructure and need to consolidate physical appliances. An Access Gateway VPX instance can be co-located with other virtual machines on a single server to reduce the overall infrastructure requirements.

• Want to reduce costs by cutting power consumption and standardize all hardware in the data center to get the best pricing from server vendors

• Need to minimize downtime. XenServer capabilities such as XenMotion (dynamic workload relocation) and NIC bonding offer an ideal way to lessen the impact of hardware failures. Virtual appliances also eliminate the need for appliance replacements when failures occur.

• Require a solution that offers isolated, multi-tenancy configurations for different user populations.

• Prefer to create a non-production environment for training and testing.

Physical appliances remain the preferred option for customers who:

• Need the scalability and performance of a dedicated appliance. Access Gateway VPX can support up to 500 concurrent users when deployed on a server with a recommended configuration. Appliances such as Access Gateway 5500 MPX can support up to 5,000 concurrent users per appliance and are the more cost effective solution in deployments supporting more than 1,500 concurrent users.

• Can only address policy requirements of security and network infrastructure teams through the use of physical appliances. The virtual appliance form factor makes it easier and less expensive for customers and partners to learn the Access Gateway product and test new configurations without disrupting a production deployment.

Is there a separate Access Gateway Enterprise Edition VPX? No, but the Access Gateway Enterprise Edition features are available on the NetScaler VPX. The NetScaler VPX includes all NetScaler load balancing/traffic management, application acceleration, application security (including Access Gateway Enterprise and Citrix Application Firewall), and offload functionality.

What is the difference between Access Gateway VPX and NetScaler VPX? Access Gateway VPX supports the same features and functionality as the Model 2010 appliance offering and can be used as an alternative to a physical appliance in Access Gateway Standard Edition and Advanced Editions deployments. NetScaler VPX is the virtual appliance version of the NetScaler product.

When evaluating virtual appliances from Citrix, Customers can choose between Access Gateway VPX and NetScaler VPX to address their secure access requirements. Use the following table to determine the best offering for a customer:

Page

5

Preferred Solution

Criteria

NetScaler VPX • NetScaler VPX is a multi-function appliance that includes features such as network load-balancing, secure access through an SSL VPN, caching, DoS prevention, web application firewall, and Global Server Load-balancing (GSLB). Consider NetScaler VPX if a customer is looking for a single solution with two or more of these features.

• Customer is looking to create a solution that span datacenters in different geographic locations should consider NetScaler VPX for GSLB.

• Customer is a network administrator or the network infrastructure team is a stakeholder in the buying decision. However, if the network infrastructure team is pre-disposed to another vendor such as F5, Access Gateway VPX may be the better solution to expedite the sales process and avoid competitive friction.

Access Gateway VPX • Customers who are primarily XenApp or XenDesktop administrators will find Access Gateway VPX easy to deploy within their environment. This product is designed to be Citrix’s simplest solution for securing end-to-end application and desktop environments.

• XenApp customers looking to upgrade from Secure Gateway should consider Access Gateway VPX. Access Gateway provides a new of improvements over Secure Gateway including support for Citrix Receiver, Dazzle, and Merchandising Server.

• Access Gateway VPX is a purpose-built solution and should be used when low-complexity is desired. Access Gateway VPX is easier to learn and deploy than NetScaler VPX.

• Access Gateway VPX is Citrix’s virtual appliance that offers the best price-to-performance ratio. However, customers looking to support more than 1,500 concurrent users are advised to deploy physical appliances such as the MPX 5500 for the most cost-effective solution.

Page

6

Technical Requirements What are the minimum hardware requirements for Access Gateway VPX? The hardware requirements for Access Gateway VPX are divided into two categories, the host XenServer requirements and the Access Gateway VPX virtual machine requirements.

Minimum hardware requirements for a XenServer running Access Gateway VPX:

Hardware item Requirements CPU One or more 64-bit x86 CPUs.

Memory At least 2 GB of RAM.

Hard disk space

Locally attached storage (PATA, SATA, SCSI) with minimum 40 GB of disk space. General disk space requirements for Access Gateway VPX: XenServer installation creates a 4 GB partition for the XenServer host control domain; remaining space is available for Access Gateway VPX and other VMs.

Network interface One 1 Gbps network adapter required. Recommended: Two network adapters of 1 Gbps each for a two-arm deployment, which uses an internal and an external interface.

Minimum virtual hardware requirements for a Access Gateway VPX virtual machine:

Hardware item Requirements Memory 1 GB of RAM.

Virtual CPU Up to two virtual CPUs

Hard disk space Locally attached storage (PATA, SATA, SCSI) with minimum 40 GB of disk space.

Network interface Two

Is there a hardware compatibility list (HCL) for Access Gateway VPX? Access Gateway VPX is designed to run on any XenServer supported hardware platform. A XenServer HCL is available at http://hcl.xensource.com.

Is Access Gateway VPX supported on VMWare ESX or Microsoft Hyper-V? Access Gateway VPX does not currently support VMWare ESX or Microsoft Hyper-V hypervisors but, support is planned for future releases.

Can I add more memory or virtual CPUs to increase performance and scalability? Access Gateway VPX should only be configured with 1 GB of memory. Adding additional memory does not improve the performance or scalability.

Page

7

Access Gateway VPX can be configured with two or more virtual CPUs for optimal performance and scalability. Adding more than two virtual CPUs improves performance by reducing latency but does not improve scalability beyond 500 concurrent users.

How many users does Access Gateway VPX support? When configured with two or more virtual CPUs, Access Gateway VPX supports 500 concurrent users, the same amount as the Model 2010 appliance.

Access Gateway VPX and XenServer Does Access Gateway VPX support XenServer NIC bonding? Yes. Access Gateway VPX supports the NIC Bonding feature of Citrix XenServer. NIC Bonding enables XenServer to join multiple physical network interfaces (PIFs) and present them as a single virtual interface (VIFs) to a virtual machine. This XenServer feature provides increased network throughput and fault tolerance for network interfaces.

Does Access Gateway VPX support XenServer High Availability? Yes. Access Gateway VPX supports the High Availability feature included with Citrix Essentials for XenServer. High Availability enables multiple XenServer host machines to participate in a “server pool”. In the event that the XenServer host on which Access Gateway VPX is running were to fail, another server in the pool will load and initialize the Access Gateway VPX workload. In the event of a high availability failover, active user sessions need to be re-established.

Does Access Gateway VPX support XenServer XenMotion? Yes. Access Gateway supports XenMotion. XenMotion enables XenServer to transfer a running instance of Access Gateway VPX from one physical XenServer host to another XenServer host without terminating existing user sessions.

What is the difference between an Access Gateway failover cluster and XenServer high availability? An Access Gateway failover cluster enables up to three physical or virtual instances of Access Gateway to participate in an active/active cluster. Each Access Gateway in the cluster has the same configuration and is capable of accepting connections. If a cluster member fails, active and new user sessions can be seamlessly reconnected to another member of the cluster. All members of the cluster must be online in order to participate in a failover event because the failover cluster does not support dynamic powering on cluster members. Keep these important requirements in mind when planning a failover deployment:

• Each Access Gateway instance in the cluster requires a separate FQDN, with a separate public IP address and separate SSL certificate.

• The Access Gateway Plug-in (the full VPN client) is required for failover. This is because the failover login occurs within the Access Gateway Plug-in, not the Access Gateway.

• After a failover, users have to re-authenticate to Access Gateway. However, the Access Gateway Plug-in can be configured to store and resubmit the users credentials providing a seamless reconnection.

XenServer high availability guarantees service uptime in the event of XenServer host failure. In the event that the XenServer host on which Access Gateway VPX is running were to fail, another server in the pool will load and initialize the Access Gateway VPX workload. In the event of a high availability failover, active user sessions need to be re-established.

Page

8

Can Access Gateway failover cluster and XenServer high availability work together? Yes. By leveraging both features additional failover protection can be added to a Access Gateway VPX deployment. Consider a scenario where two Access Gateway VPX instances, AG1 and AG2, are members of a failover cluster spread across separate XenServers in a pool. The two Access Gateway VPX instances have also been configured for XenServer high availability. If the XenServer hosting AG1 failed, VPN users would immediately attempt to connect to AG2, while XenServer automatically starts AG1 on a different host. Alternatively, in the case of complete failure of a Access Gateway VPX running on a healthy XenServer host, XenServer high availability will automatically restart the virtual machine on the same host.

To achieve even greater high availability, a network load balancer, such as Citrix NetScaler, can be deployed to load balance the traffic between the Access Gateway’s in the cluster.

Can Citrix Provisioning Server deploy Access Gateway VPX? No. Access Gateway VPX does not support automated deployments using Citrix Provisioning Server.

Deployment and Planning Where in the network is Access Gateway VPX deployed? Access Gateway is traditionally deployed in the DMZ.

What are the supported deployment modes? Access Gateway supports the same deployment modes as the Model 2010 appliance. The supported deployment modes include:

• Single-DMZ deployment with SSL VPN access

• Single-DMZ deployment with Citrix Web Interface “behind” Access Gateway VPX

• Single-DMZ deployment with Citrix Web Interface “parallel” to Access Gateway VPX

• Dual-DMZ deployment, which only supports Citrix Web Interface and Citrix XenApp/XenDesktop traffic

• “Advanced Access Control Mode” where policies are deferred to an Citrix AAC server (Access Gateway, Advanced Edition)

• Multiple Access Gateway instances configured in a failover cluster

Can I pair Access Gateway VPX with a Model 2010 appliance in a failover cluster? Yes. A virtual and physical appliance can be joined to the same failover cluster. Both members must be online in order to participate in a failover event.

Does the Access Gateway VPX operate in one-arm or two-arm mode? Access Gateway VPX supports both one-arm and two-arm mode. One-arm mode uses one XenServer virtual network interface for inbound and outbound connections. In one-arm mode, a single IP address is assigned to Access Gateway. The default configuration of Access Gateway is one-arm mode.

Two-arm mode uses two XenServer virtual network interfaces, one for external and one for internal connections. In two-arm mode, two IP address are assigned to Access Gateway, one for the external interface and one for the internal interface.

Page

9

Can multiple instances of Access Gateway VPX run on the same physical server? Yes. Multiple instances of Access Gateway VPX can run on the same physical server. The administrator must ensure that the host server has enough adequate resources (RAM, CPU, I/O, storage) to support the total running workload.

Can I host other virtual machines and Access Gateway VPX on the same physical server? Yes. Other virtual machines can be hosted on the same physical XenServer. How an organization intends to use Access Gateway VPX (e.g. pilot, training, production) and were they deploy Access Gateway VPX will dictate which additional virtual machines are suitable for sharing the same XenServer. For best performance, the administrator should ensure that physical host has adequate resources (RAM, CPU, I/O, storage) to support additional virtual machines.

Licensing Changes What is the Access Gateway Platform License? Access Gateway Platform Licenses enable basic connections through Access Gateway to XenApp hosted applications or XenDesktop hosted desktops without requiring an Access Gateway user license for each connection. Each Access Gateway and NetScaler appliance (physical and virtual) include an Access Gateway Platform License as an entitlement and allow user connections up to the maximum capacity of the appliance. Previously, connections to XenApp and XenDesktop required an Access Gateway concurrent user license so this change represents a significant cost savings to customers.

What features does the Access Gateway Platform License enable? A basic connection using the Access Gateway platform license supports:

• Strong authentication

• Integration with Citrix Web Interface to broker connections to XenApp or XenDesktop

• Secure SSL relay of ICA session traffic

• Compatibility with Citrix Receiver (hosted applications only)

• Secure tunneling for support of Merchandising Server and Citrix Dazzle

These capabilities and the reduced cost of ownership make Access Gateway an ideal replacement to Secure Gateway. All XenApp customers are highly encouraged to upgrade their environment from Secure Gateway to Access Gateway and new XenApp and XenDesktop customers should deploy Access Gateway exclusively as their preferred secure access solution.

How does a customer receive an Access Gateway Platform License? The platform license is available with all new Access Gateway and NetScaler appliance purchases. In addition, existing customers with appliances covered under Warranty or Maintenance are entitled to Access Gateway platform licenses at no addition charge.

When will the Access Gateway Platform License be available? • Support for the Access Gateway platform license is initially available only for the Model 2010 and Access

Gateway VPX appliance models running in Standard Edition (standalone) mode.

• For Access Gateway Enterprise Edition / NetScaler appliances (Model 7000, Model 9010, MPX 5500, etc), firmware version 9.2 is required to recognize the platform license. Version 9.2 is planned for release in March 2010.

Page

10

For Access Gateway Advanced Edition deployments, the platform license will be supported in a release later in 2010.

What is an Access Gateway Universal License? An Access Gateway Universal License is a concurrent user license, which is only required for sessions in which users connect to resources other than XenApp, XenDesktop, Citrix Receiver, or where endpoint analysis is used to determine the appropriate level of access for that session.

What features do Access Gateway Universal Licenses enable? A concurrent user connection using the Access Gateway Universal license supports:

• Full network-layer VPN tunneling

• Endpoint Analysis

• “SmartAccess” adaptive policies, published application and virtual channel filtering

• Clientless access to e-mail, web sites and file shares

Can the Access Gateway Platform License and Universal Licenses work together? Access Gateway does not yet offer full support for mixed deployments in which Access Gateway Universal licenses and the Access Gateway Platform License are both installed on the same appliance. If Access Gateway Universal Licenses are installed on Access Gateway Standard Edition, those licenses will be consumed for any user connection regardless of the connectiont type,

With the release of Access Gateway Enterprise Edition 9.2, the Access Gateway Platform License and Universal Licenses will be able to co-exist on the same appliance. Access Gateway Universal Licenses will be consumed only when users log on to an Access Gateway virtual server running in “SmartAccess” mode. For connections to an Access Gateway virtual server running in “Basic” mode, Access Gateway Universal licenses will not be consumed.

For Access Gateway Standard and Advanced editions, mixed usage of the Access Gateway platform and Access Gateway Universal licenses is planned for the version 5.0 release. In the meantime, Citrix recommends using separate appliances or virtual machine instances to segregate basic connections from full-featured user connections.

I already own Access Gateway appliances and licenses; do I need to purchase new licenses? Existing customers who own an Access Gateway appliance, which is covered under Warranty or Maintenance, are entitled to the Access Gateway platform license at no additional cost. Platform licenses for existing appliances may be obtained using the license allocation/activation tool at www.citrix.com/mycitrix.

What is happening to Access Gateway Standard Edition User Licenses The Access Gateway Standard Edition concurrent user license will no longer be sold, effective June 30, 2010. Existing customers may migrate Access Gateway Standard Edition licenses, which are covered under Subscription Advantage to Access Gateway Universal licenses at no cost. This migration option allows customers currently running Access Gateway Standard Edition to migrate to Access Gateway Advanced Edition or Enterprise Edition with no per-CCU price increase. New licenses may be obtained using the license allocation/activation tool at www.citrix.com/mycitrix.

Does the End of Sale announcement mean that Access Gateway Standard Edition is being discontinued? No. This End of Sale announcement for the Access Gateway Standard Edition user licenses does not constitute an end of life announcement for Access Gateway Standard Edition. Access Gateway Standard Edition 4.6 is the current version and

Page

11

continues to be supported. For deployments of Access Gateway Standard Edition that require user connection licenses, Access Gateway Universal licenses should be purchased instead of Access Gateway Standard Edition licenses.

Please note: the price of the Access Gateway Universal licenses have been reduced to the same price point where Access Gateway Standard Edition licenses were sold.

Can I share Access Gateway Universal Licenses between Access Gateway VPX and Model 2010 appliance? Yes, because both Access Gateway VPX and Access Gateway appliances can access the same license server. The license server can be either a virtual or a physical Access Gateway. The maximum number of concurrent user sessions will be governed by the Universal License.

How does Citrix deliver license codes? For new orders, license codes are delivered via e-mail.

How do I allocate and download Access Gateway license files? Customers convert their license codes to license files on the MyCitrix site www.mycitrix.com. Under the menu, choose Support, then Product Activation, and select the “Activate/Allocate” tab.

Can I use the same Universal License for disaster recovery scenarios? Yes. The End User License Agreement for Citrix Access Gateway allows Universal Licenses to be installed on an unlimited number of appliances. Organizations are free to distribute load across multiple active Access Gateway appliances as long as the total number of concurrent sessions across all appliances does not exceed the total number of licenses purchased from Citrix.

Packaging and Pricing How much does Access Gateway VPX cost? The Access Gateway VPX costs $995 US. The Access Gateway product line pricing is outlined below.

Appliance Editions Supported List Price (US) Max Users Access Gateway VPX Standard & Advanced $ 995 500

Model 2010 Standard & Advanced $ 3,495 500

MPX 5500 Enterprise $ 9,000 5,000

How does Citrix deliver Access Gateway VPX? Access Gateway VPX will be delivered via electronic download through the MyCitrix customer portal.

How much does an Access Gateway Universal License cost? Access Gateway Universal Licenses start at $100 per user for up to 2,499 users. The license cost drops to $50 per user for volumes greater than or equal to 2,500 users.

Page

12

Has the price of an Access Gateway Universal License changed? Yes. Citrix has reduced the price of Access Gateway Universal licenses from US $170 to $100 per concurrent user. In addition, the volume pricing discount tiers have been reduced from three to two.

Previous pricing tiers New pricing tiers $170 per user (0-499 users) $100 per user (0-2499 users)

$100 per user (500-2499 users) $50 per user (2500+ users)

$50 per user (2500+ users)

Do the discounts provided by pricing bands extend across multiple transactions? No. The volume discounts offered by the pricing bands are calculated based on the number of concurrent licenses purchased during the transaction and do not span multiple transactions or line items. For example, a customer who purchases 1000 concurrent licenses and then purchases 2000 concurrent licenses in the second transaction, will pay based on the 0-2499 user band in both transactions.

Does the price change affect Subscription Advantage renewal costs? Yes. Subscription Advantage™ renewal pricing is also reduced. Customers who purchased Access Gateway Universal licenses at the higher price tier will see a reduction in their Subscription Advantage renewal prices beginning on February 3, 2010.

Support and Subscription Advantage Does Access Gateway VPX include Subscription Advantage? Yes. Access Gateway VPX and Access Gateway Universal connection licenses include a 12-month membership into the Citrix Subscription Advantage program. Subscription Advantage entitles customers to receive future software version updates as a benefit of the program.

Subscription Advantage provides a convenient way for customers to budget for their product version upgrades annually without having to anticipate variable costs throughout the year.

Does Subscription Advantage include technical support? No, Subscription Advantage does not include Technical Support. Technical support may be purchased from Citrix Solution Advisors or directly from Citrix. For a complete list of Citrix Technical Support options please visit www.Citrix.com. Can Access Gateway VPX be upgraded? Yes. As Citrix releases new versions of the Access Gateway firmware, customers can upgrade Access Gateway VPX to the latest supported edition in the same manner they would using a physical appliance. Firmware versions are downloaded from Citrix.com and the upgrade process is performed using the Access Gateway administration utilities.

Are warranties and maintenance available for the Access Gateway VPX? No. Warranty and maintenance options are not available for Access Gateway VPX. These programs only apply to physical appliances.

Page

13

What do I do if I experience a technical support issue with the XenServer hosting Access Gateway VPX? Technical support for Access Gateway VPX is covered under the standard Citrix technical support offerings. Customers may purchase support on a per-incident basis, or through a preferred support agreement.

Citrix Integration Can I host other Citrix virtual machines or VPX appliances on the same XenServer? Yes. Other virtual machines (Citrix or non Citrix) can be hosted on the same physical XenServer. How an organization intends to use Access Gateway VPX (e.g. pilot, training, production) and were they deploy Access Gateway VPX will dictate which additional virtual machines are suitable for sharing the same XenServer. For best performance, the administrator should ensure that physical host has adequate resources (RAM, CPU, I/O, storage) to support additional virtual machines.

Does Citrix Access Gateway work with Citrix XenApp? Yes. Access Gateway provides the best XenApp integration in the industry. Customers should use the Access Gateway Standard Edition with XenApp to:

• Replace the XenApp Secure Gateway feature in the DMZ with a hardened solution. The solution provides single sign-on to Web Interface, reducing user frustration from entering credentials multiple times.

• Provide auto-reconnection of XenApp or XenDesktop sessions without the need to re-authenticate.

• Support the full range of SSL-enabled Citrix XenApp for Hosted Apps directly without the need to load other clients, port redirectors, and network connect drivers.

Does Access Gateway VPX work with Citrix XenDesktop? Yes. Access Gateway VPX supports the ability to connect to virtual desktop sessions through a secure connection. The same XenApp integration benefits also apply to XenDesktop.

Does Access Gateway VPX work with Citrix Receiver and Citrix Merchandising Server? Yes. The Access Gateway Plug-in is supported by Citrix Receiver and Citrix Merchandising Server. Citrix Receiver is the first universal client for IT service delivery. With Citrix Receiver installed on a device, IT can deliver applications and desktops as an on-demand service with no need to manage, own or care about the physical device or its location.

Citrix Merchandising Server is a new head-end infrastructure component that helps create, deliver and manage a high quality end user experience on laptops, desktops and smartphones. Now with the introduction of the Merchandising Server, IT can easily “merchandise” their IT services in a convenient, simple way that seamlessly connects users to virtual applications, desktops and other services – in the same way retail merchandising managers create a compelling shopping experience for their customers.

How does Access Gateway integrate with Dazzle and Merchandising Server? The management console of Access Gateway 4.6.1 allows administrators to specify the IP address of the Merchandising Server. After this configuration step, Citrix Receiver will seamlessly establish a secure tunnel to the Merchandising Server through Access Gateway. This step does not consume Universal Licenses. Administrators should configure firewall rules to allow the connection between Access Gateway and Merchandising Server.

Page

14

Does Access Gateway VPX work with Citrix Branch Repeater? Yes. The Citrix RepeaterTM Plug-in integrates seamlessly with the Access Gateway Plug-in to provide a high-definition user experience to the remote and mobile worker. The Repeater Plug-in provides the benefits of Branch Repeater solutions to remote users in small branch offices, homes, airports or other locations that do not enjoy the luxury of a Branch Repeater appliance. Citrix Repeater Plug-in is a PC software WAN optimization solution that works in conjunction with a Citrix Repeater appliance located in the datacenter.

Does Access Gateway VPX require Citrix XenApp or XenDesktop? No. All Access Gateway products can operate in environments without XenApp or XenDesktop, but are the best SSL VPNs to use with XenApp and XenDesktop.

Is the Access Gateway Model 2010 appliance being discontinued? No. Citrix will continue to sell and support the Access Gateway Model 2010 appliance.