Which mode of Citrix Gateway should be used to allow ICA traffic from the client to internal resources without requiring client installation of a plugin?

• A. Clientless OFF
• B. ICA proxy mode
• C. SSL Bridge
• D. Clientless ON

Answer: (B)

ICA proxy mode lets the Citrix Gateway act as an ICA proxy between the client and internal XenApp/XenDesktop resources. This means users can connect over HTTPS, authenticate at the gateway, and launch published apps without needing a VPN-style plugin installed on the client. The gateway terminates the ICA traffic and forwards it to the internal servers, so you get secure, direct access to resources without installing any additional gateway plugin on the client—just the standard Citrix Receiver/Workspace app.

Clientless modes focus on browser-based access via HTML5 and aren’t specifically about proxying ICA sessions to internal farm resources. SSL Bridge creates a network tunnel that’s not tailored to publishing ICA applications, so it doesn’t match the requirement to deliver ICA traffic to internal resources in the same way.