Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?

• A. Add cs vserver swgVS PROXY 192.168.10.1 80 -Authn401 on -authnVsName explicit-auth-vs
• B. Add cs vserver swgVS PROXY ** -Authn401 on -authnVsName explicit-auth-vs
• C. Add cs vserver swgVS PROXY 192.168.10.1 -Authn401 on -authnVsName transparent-auth-vs
• D. Add cs vserver swgVS PROXY * 21 -Authn401 on -authnVsName transparent-auth-vs

Answer: (B)

The key idea is configuring a Content Switching vserver to intercept all traffic and forward it to the Secure Web Gateway in transparent proxy mode. For this, the destination must be a wildcard so every request hitting the content-switching vserver is proxied to the SWG, not a specific server. Using the wildcard destination (**) ensures the switch handles traffic for any original destination, which is necessary in transparent proxy deployments. Additionally, you enable the 401 authentication prompt and point to the appropriate authentication virtual server; in this setup an explicit authentication virtual server is used, so the name should be explicit-auth-vs. That combination—wildcard destination and explicit-auth-vs—is what makes the command correct for configuring the SWG in transparent proxy mode. The other options tie the vserver to a specific IP/port, or use a different authentication virtual server name, or specify an inappropriate port, which wouldn’t achieve the transparent proxy interception.