{"id":1725,"date":"2023-12-12T07:49:18","date_gmt":"2023-12-12T07:49:18","guid":{"rendered":"http:\/\/neu.koetzingit.de\/citrix-network-locations-undefiniert-das-neue-extern\/"},"modified":"2026-06-02T13:32:28","modified_gmt":"2026-06-02T13:32:28","slug":"citrix-network-locations-undefiniert-das-neue-extern","status":"publish","type":"post","link":"https:\/\/www.koetzingit.de\/en\/citrix-network-locations-undefiniert-das-neue-extern\/","title":{"rendered":"Citrix Network Locations: Redefining the New External!"},"content":{"rendered":"

D<\/span>This article discusses Citrix Cloud Network Locations Services (NLS) and explains why, at Citrix, \u201eUndefined<\/strong>\u201cThe new one is external. Anyone looking at the network locations might get confused, since the wording might not be entirely accurate\u2014at least for me.\u201d.<\/p>\n

<\/p>\n

Why do I say that \u201cundefined\u201d is the new \u201cexternal\u201d? Let\u2019s clear that up right away: In the NLS settings, I can define \u201cinternal\u201d and \u201cexternal\u201d\u2014for example, my headquarters as \u201cinternal\u201d and my branch office, which isn\u2019t connected to the network, as \u201cexternal.\u201d Technically speaking, these are two fixed IP addresses and, in most cases, the firewall through which communication with the outside world takes place. All others tens of millions of IP addresses<\/strong> Are they then undefined and not external? Yes, but that is exactly how it works with Citrix Network Location Services, and it makes perfect sense when viewed from a definitional perspective. We define the IP addresses we know\u2014that is, those that are known to us\u2014and so everything else is undefined, which is only logical.<\/p>\n

It could also be described as follows:<\/p>\n

Internal<\/strong><\/em> = Direct access<\/strong> between Citrix WorkspaceApp and Citrix VDA<\/p>\n

Client -> VDA<\/p>\n

External<\/strong><\/em> = Indirect access<\/strong> (Gateway Service) between Citrix WorkspaceApp and Citrix VDA, of known origin<\/strong>.<\/p>\n

Corporate Client -> Gateway Service -> VDA<\/p>\n

Undefined<\/strong><\/em> = Indirect access<\/strong> (Gateway Service) between Citrix WorkspaceApp and Citrix VDA, of unknown origin<\/strong>.<\/p>\n

All unknown clients -> Gateway Service -> VDA<\/p>\n

With these three definitions, there are also three Standard tags<\/strong>: LOCATION_internal<\/code>, LOCATION_external<\/code> and LOCATION_undefined<\/code>. These tags can then be used in various places.<\/p>\n

Here is an example of configured network locations:<\/p>\n

\"Network<\/p>\n

The tags are broken down as follows<\/p>\n

LOCATION_internal<\/strong><\/code> = HQ_DE and Azure_Amsterdam<\/p>\n

LOCATION_external<\/strong><\/code> = BranchOffice_muenster, BranchOffice_mannheim, BranchOffice_luxemburg, and BranchOffice_goettingen<\/p>\n

LOCATION_undefined<\/strong><\/code> = Everything else.<\/p>\n

We can then use these tags, for example, in Citrix policies; here is an example: all branch offices<\/strong> Assign a policy or prohibit all unknown (undefined) clients from connecting to the drive.
By adding location tags, separate policies can then be assigned, since the location Branch Office in Luxembourg<\/strong> or the location tag \u201eLuxembourg<\/strong>\u201ccan only be used for the Luxembourg location, with LOCATION_TAG_luxembourg<\/code>. This means, for example, that policies can be assigned on an individual basis.<\/p>\n

<\/p>\n

Question<\/strong>: My company uses Zscaler<\/strong> and thus a cloud-based proxy to protect the company's clients\u2014Zero Trust. This also turned internal clients into a LOCATION_undefined<\/code>. <\/p>\n

Answer: <\/strong>In this case, exceptions, bypasses, or whatever the solution calls them should be used. With the exception *.cloud.com<\/strong> That would be a start.<\/p>\n

\u00a0<\/p>\n

\u00a0<\/p>\n

\u00a0<\/p>","protected":false},"excerpt":{"rendered":"

Dieser Artikel befasst sich mit den Citrix Cloud Network Lokationen Services (NLS) und erkl\u00e4rt, warum bei Citrix „Undefiniert“ das Neue […]<\/p>\n","protected":false},"author":1755,"featured_media":1716,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[18],"tags":[27,348,347,337,335,349,346],"class_list":["post-1725","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-citrix-de","tag-citrix","tag-extern","tag-intern","tag-locations","tag-network","tag-niederlassung","tag-undefined"],"uagb_featured_image_src":{"full":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"thumbnail":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1-150x150.png",150,150,true],"medium":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"medium_large":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"large":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"1536x1536":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"2048x2048":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",225,225,false],"trp-custom-language-flag":["https:\/\/www.koetzingit.de\/wp-content\/uploads\/2023\/11\/CitrixCloud-1.png",12,12,false]},"uagb_author_info":{"display_name":"Thomas K\u00f6tzing","author_link":"https:\/\/www.koetzingit.de\/en\/author\/thomas-koetzing\/"},"uagb_comment_info":0,"uagb_excerpt":"Dieser Artikel befasst sich mit den Citrix Cloud Network Lokationen Services (NLS) und erkl\u00e4rt, warum bei Citrix „Undefiniert“ das Neue […]","_links":{"self":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1725","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/users\/1755"}],"replies":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/comments?post=1725"}],"version-history":[{"count":1,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1725\/revisions"}],"predecessor-version":[{"id":1854,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/posts\/1725\/revisions\/1854"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/media\/1716"}],"wp:attachment":[{"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/media?parent=1725"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/categories?post=1725"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.koetzingit.de\/en\/wp-json\/wp\/v2\/tags?post=1725"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}