To allow internal users to access internal web applications through Web access only, which configuration mode should be configured on the Citrix Gateway?

• A. Reverse proxy
• B. Full SSL VPN
• C. ICA proxy
• D. Clientless access

Answer: (D)

Clientless access is the mode that provides browser-based, web-only access through the Citrix Gateway. It lets internal users reach internal web applications via the gateway’s web portal without installing or using a VPN client, and without establishing a full VPN tunnel. The gateway authenticates the user and then proxies access to the internal web resources, which fits the requirement of Web access only.

Full SSL VPN would bring up a VPN tunnel and a client, not browser-only access. ICA proxy is for publishing Citrix Virtual Apps and Desktops, not general internal web applications. Reverse proxy publishes internal resources but isn’t specifically defined as web-only access through the gateway without a client.