What does a Citrix Administrator need to configure to allow access to Citrix Virtual Apps and Desktops without the use of a VPN or a clientless-access connection?

• A. Ciphers group.
• B. Net profile.
• C. SSL profile.
• D. ICA proxy.

Answer: (D)

The key idea here is delivering Citrix virtual apps and desktops to users without requiring a VPN by routing the ICA traffic through the gateway. ICA proxy does exactly that: it lets the Citrix Gateway (the ADC) act as a reverse proxy for the ICA protocol, authenticating users and then proxying their ICA connections to the internal Virtual Apps and Desktops servers. This enables clientless access—users can launch apps from a browser or the Citrix Workspace app without a full VPN client.

The other options relate to security and networking settings but do not establish this remote-access path. A cipher group defines which encryption algorithms are allowed; an SSL profile configures TLS behavior; a net profile sets networking details. On their own, they don’t enable clientless access to published apps and desktops. ICA proxy is the mechanism that makes clientless access possible.