In a StoreFront SSO scenario, which virtual server type enables a secure external single URL?

• A. Load Balancing
• B. VPN
• C. Unified Gateway
• D. Content Switching

Answer: (C)

Unified Gateway is the option that provides a secure external single URL for StoreFront SSO. It’s designed to publish internal Citrix resources to users outside the corporate network through one externally accessible, SSL-terminating portal. With Unified Gateway, users access a single URL (for example, https://portal.company.com), authenticate once at the gateway, and then are proxied to the internal StoreFront resources. This setup enables a seamless single sign-on experience across published apps without needing a VPN, while also handling authentication policies and secure delivery.

The other options don’t fit as neatly. A load balancing virtual server distributes requests among internal StoreFront servers but doesn’t by itself offer a secure external single URL with integrated SSO. A VPN virtual server provides remote network access through a VPN tunnel, not a web-based single URL for SSO to StoreFront. Content switching routes requests to different back-end servers but isn’t inherently a gateway for securing an external URL or delivering SSO across StoreFront resources.