A cloud-based platform that hosts cloud-hosted desktops and applications. Using Citrix cloud you can deploy Citrix products, desktops, and other applications using any type of cloud-like private, public, or hybrid. You can install Netskope Client in Citrix Virtual apps using the deployment options supported by Netskope.
Environment
This document was created using the following components:
-
Citrix Workspace Version:
-
Citrix Virtual Apps and desktops 7 2203 LTSR CU4(2203.0.4000.4310), Citrix Virtual apps and Desktops 7 2402 LTSR CU2 (2402.0.2510.2566), Citrix Virtual Apps and Desktops 7 2507 LTSR CU1 (2507.1.110.1)
-
2106 – Citrix Studio
-
Citrix – DaaS
-
Citrix workspace: 2503(25.3.10.69)
-
-
Netskope Client version: 138.0.0.
-
OS: Windows 11, Windows Server 2019 (Multi Session), Windows Server 2022, Windows server 2025
Configuration Requirements
Specific configurations in Netskope tenant web UI can ensure that the processes or traffic from either of the applications are not blocked and directed to the Netskope Cloud. You must add exceptions to the Netskope Steering Configuration. To learn more, view Exceptions.
Configurations In Netskope Client
Add steering configuration exceptions (Certificate Pinned Application exception type) on the Netskope tenant WebUI to allow Citrix Workspace traffic to bypass Netskope and reach its destination.
To add Citrix workspace as a Certificate Pinned Application on the Netskope UI:
- Go to Settings > Security Cloud Platform > Steering Configuration and and select a configuration.
- On the configuration page, click EXCEPTIONS > NEW EXCEPTION > Certificate Pinned Applications.
- In the New Exception window, do the following:
- From Certificate Pinned App, select the application. To add a new certificate pinned application in the New Certificate Pinned Application window, do the following:
- Application Name: Enter the name of the application.
- Platform: Select the operating system where the application is managed.
- Definition: Provide the processes and .exe(s) list that you want to bypass. To learn more, view Exclusions.
- From Custom App Domains, add * to allow all URLs.
- From Actions, select Bypass for all operating systems that you want to allow directly to the destination.
- Click ADD.
- From Certificate Pinned App, select the application. To add a new certificate pinned application in the New Certificate Pinned Application window, do the following: