Citrix Cloud (DAAS/CVAD) on Microsoft Azure

Explore deployment models for Citrix on Azure, including cloud-hosted control plane with Azure workloads, regional availability, and regulatory considerations; compare cloud, on-prem, and hybrid options.

Compare deploying Citrix Gateway and storefront in Citrix Cloud with workspace, versus in a resource location such as Azure, on premise, or public cloud, and understand the advantages and disadvantages.

Choose Citrix workspace in Citrix Cloud to gain high availability, device-agnostic access, and automatic updates, while accepting no local host cache, limited customization, and no control over updates.

Enable Citrix gateway service in the cloud to gain managed high availability, patching, and activation, while reducing firewall, network, and certificate maintenance and leveraging global pops for low latency.

Explore the advantages and disadvantages of Citrix storefront on resource location or on premises, including flexible customization, local host cache, and corporate URL options, while weighing deployment and maintenance challenges.

Choose the right Citrix Cloud deployment model by weighing on premise versus cloud storefront and gateway. Assess security, redundancy, authentication, customization, and SLA requirements to meet your needs.

Plan, design, and implement Azure infrastructure to host Citrix desk surface or virtual apps and desktops, covering subscription management, resource groups, compute, storage, network, and identity.

Understand how a tenant represents your organization, how subscriptions provision resources under that tenant, and how Azure Active Directory governs identity and access with a default directory.

Explore Azure resource hierarchy from resource to management group, and learn how policies and access control flow through resource, resource group, subscription, and management group to govern across regions.

Create and manage Azure management groups, including the default tenant root group, assign subscriptions to production or nonprofit groups, and configure access control and policies at the group level.

Create and manage subscriptions for production and non-production workloads, assign access roles, monitor costs and quotas, review activity logs, and raise Microsoft support requests as needed.

Create a resource group by naming it, selecting central us, then review and create; manage access, roles, and tags for production, check activity log, and apply a deletion lock.

Explore Azure virtual networks, or VNet, that provide isolated cloud networks with private and public IPs, an address space, and subnets to connect VMs and on-premises resources.

Learn to create an Azure virtual network, select a region near users, and configure a custom address space with subnets. Expand address space as needed for VDI workloads.

Explore Azure virtual machine service and its series options, and learn how availability set and availability zone maximize uptime with fault domains and update domains for resilient VDI infrastructure.

Learn to create and configure Azure virtual machines, select region and image, and deploy VMs in availability sets or availability zones for high availability and scalable networking.

Learn about Azure disk types, including managed and unmanaged disks, OS, data, and temporary disks, and why premium or standard SSD suits Azure Virtual Desktop.

Explore Azure network security groups and how they filter inbound and outbound traffic to virtual network resources, with subnet or VM level rules and default rules.

Create an Azure network security group (NSG), attach it to your subnet, and configure inbound and outbound rules to control traffic via default and custom allow/deny rules.

Explore Azure virtual network peering, connecting two or more vnets across regions or within a region, with traffic routed over the Microsoft backbone; ensure non-overlapping IP ranges and NSG rules.

Configure cross-region Azure VNet peering between central and west regions, verify connectivity after disabling firewall, and use the preview address space update in paired VNets with resync to expand subnets.

Deploy a Windows Server 2022 VM, install Active Directory and DNS, promote it to a domain controller named bus, and prepare for Azure Ready Connect synchronization with Azure AD.

Compare default Azure DNS and custom DNS configurations, and learn how name resolution uses internal.cloud.net for VM lookups and domain joining with a dedicated DNS server in labs.

Use the Azure pricing calculator to estimate monthly costs for 100 single-session Azure virtual desktops, including region, usage, and storage. Compare pay-as-you-go and reserved options, and note potential cancellation penalties.

Plan Azure infrastructure to host Citrix workloads for virtual apps and desktops, covering identity and access management, network connectivity, governance, security, FSLogix profile management, and compute and storage guidelines.

Choose an Azure region near your data center and users to reduce latency, enable availability zones for redundancy, and plan premium disks, backup, and resource locks for Citrix components.

Optimize Azure virtual desktop performance by choosing the nearest Azure region to reduce latency and round-trip time, and verify with latency tests for better user experience.

Discover prerequisites to deploy Citrix DaaS on Azure, including a Citrix Cloud tenant, Azure subscription, service principal, virtual network and DNS, Windows Server VMs, and master images.

Learn how to create a Citrix Cloud account, verify your email, enroll in MFA, select your cloud region, and complete sign up to securely access Citrix Cloud.

Navigate the Citrix Cloud portal to manage desks and workspace services on Azure, including machine catalogs, delivery groups, applications, policies, and licensing.

Explore how Citrix Cloud manages identity and access for administrators and workspace users, highlighting Azure Active Directory as a dual-use authentication method and SAML 2.0 for admin and subscriber login.

Resource location is where you deploy workloads, on premise, public, or hybrid clouds like azure or Google Cloud, with Active Directory, VDI agents, and a cloud connector.

Citrix Cloud connector bridges Citrix Cloud with your resource location, on premise or public cloud, enabling VM provisioning and access to Active Directory and images via an encrypted outbound connection.

Learn how to install and configure a Citrix Cloud Connector on Azure, verify connectivity, and ensure high availability with multiple connectors.

Explore how Citrix DAAS hosting connection links Citrix cloud with a resource layer using service accounts or service principals, define Azure RBAC roles, and choose automated or manual hosting creation.

Create a hosting connection from Citrix Cloud to Microsoft Azure by registering a new service principal, linking the subscription, and selecting region and virtual network for MSSP provisioning.

Manually create service principal via Azure app registration, grant Azure service management and Azure Graph permissions, and generate a client secret to configure hosting in Citrix Cloud with subscription ID.

Create a multi-session Windows 10 master image in Azure by installing the multi session video agent, configuring cloud connectors and web service, enabling shadowing, and rebooting cloud VM.

Stop the master VM and create a disk snapshot in Azure, naming it and restricting access. Use the snapshot to build mission catalog and deliver virtual desktops to end users.

Create a Citrix machine catalog from a snapshot by selecting multi-session OS and Azure resources, then configure AD join and naming conventions.

Create a delivery group in Citrix Cloud on Azure by selecting the catalog, configuring access, naming the group, and applying the license entitlement, then access media via the workspace URL.

Launch a Citrix VDI session from the workspace URL, sign in with Active Directory credentials, and start a video on an Azure multi-session Windows 10 VM to demonstrate multi-user access.

Explore Citrix Cloud on Azure resource limits, covering configuration and provisioning with caps: fifty Active Directory domains, one thousand folders, two hundred fifty application groups, and two thousand applications.

Explore how Citrix workspace environment management delivers profile, resource optimization, and folder redirection. Learn cloud-based setup with cloud connector and VM agent for post-sign-on policies and application delivery.

Demonstrates configuring workspace environment management in Citrix Cloud labs: create a site, add machines, apply folder redirection and profile management policies, adjust environment settings, and verify web service connectivity.

Customize the Citrix workspace login page by uploading your logo and choosing a background color, then configure banners and timeouts to display maintenance messages and guide app launches.

Configure the Citrix workspace service in the Citrix Cloud portal, customize the workspace URL, and enable authentication options such as Azure Active Directory to access VDI or applications.

Discover how to access virtual apps and desktops from the internet using Citrix gateway as a service, enabling remote connectivity, authentication flow, and potential latency considerations.

Enable external connectivity using gateway service in workspace configuration, then save to let users launch virtual apps and desktops from the internet; internal only restricts access to the corporate network.

Access Citrix DAAS through storefront deployed in Azure, with Cloud Connector authenticating against Active Directory and enabling direct device connectivity to backend resources, even during outages through local cache.

Configure a storefront server with a Citrix Cloud Connector to deliver virtual apps and desktops brokered through Citrix Cloud, then create a default store named Lydia.

Discover how to access Citrix DAAS through NetScaler Gateway in Azure. Learn the end-to-end flow from user sign-in to VDI launch, including Cloud Connector, storefront, and gateway tickets.

Integrate your on-premise Citrix gateway with Citrix Virtual Apps and Desktops by configuring external connectivity, PSD server settings, and cloud connectors on NetScaler Gateway to broker via Citrix Cloud.

Understand Azure Active Directory as a cloud-based identity and access management solution, enabling authentication for cloud services, comparing with on-premises AD, and guiding cloud users and group creation.

Add and verify a custom domain in Azure Active Directory, replacing the default tenant domain with your own registered domain, verifying via a public name provider for Azure AD Connect.

Learn how to purchase a domain, register it with Azure Active Directory, verify ownership via a txt dns record, and enable on-premises user synchronization with Azure AD Connect.

Azure AD Connect synchronizes on-prem identities with Azure Active Directory, enabling a unified cloud and on-prem identity with options like password hash synchronization, pass-through authentication, and federation.

Configure Azure AD Connect with pass-through authentication to synchronize on-prem Active Directory to Azure AD, enabling hybrid identity and secure sign-in to cloud resources.

Integrate Azure Active Directory with Citrix Cloud to secure administrator and user access, enabling conditional access policies and seamless workspace authentication through the cloud connector.

Configure Azure Active Directory to access Citrix Virtual Apps and Desktops, enabling Azure Active Directory credential authentication, multi-factor authentication, and single sign-on through Citrix Cloud workspace configuration for VDI access.

Learn how Citrix Federated Authentication Service generates user certificates to enable seamless single sign-on for Citrix Virtual Apps and Desktops, including Azure AD integration.

Configure Federated Authentication Service to enable single sign-on for virtual desktops launched via Azure Active Directory, integrate with Citrix Cloud, publish templates, and issue certificates through a certificate authority.

Learn how FS Logix provides profile management for non-persistent Windows environments, including profile container, office container, application masking, and cloud cache to improve roaming profile performance.

Explore how storage accounts support fslogix profile containers in azure, comparing azure premium file and azure netapp files, with guidance on locally redundant storage vs zone-redundant storage for profile shares.

Create an Azure premium file storage account and a profile share to host FS Logic's profile disk and MSA X packages, enable soft delete, configure Active Directory, and set permissions.

FSLogix cloud cache provides disaster recovery for user profiles by caching profile data locally, enabling reads and writes from cache and syncing across multiple storage locations with metadata-driven synchronization.

Configure FSLogix cloud cache via a group policy object, using primary and disaster recovery storage locations, enabling local cache and automatic replication back to production after failover.

Apply security best practices for FSlogix profile shares hosted on Azure file storage, including Azure Premium File settings, to secure your Azure Virtual Desktop environment.

Master FSLogix in detail and learn how pfs logix applies to Azure, Citrix, and VMware virtual desktops, with a reference to a dedicated Udemy course for deeper learning.

Learn how Azure NetApp Files powers FSLogix profiles and VDI by delivering highly available network shares through capacity pools, volumes, service levels (ultra, premium, standard), and snapshots.

Explore Azure conditional access policies for Citrix Virtual Apps and Desktops, enforcing MFA, whitelisting corporate IP and trusted locations, and using hybrid devices to control access.

Explore how hybrid Azure AD join enables seamless single sign-on and conditional access for domain-joined devices by leveraging on-premises Active Directory alongside Azure AD and Intune.

Configure Azure Active Directory conditional access to block personal devices and allow only hybrid joined corporate devices for Azure Virtual Desktop or Citrix desktops.

Enable fido security key authentication for a group in Azure Active Directory and enroll members for passwordless sign-in. Demonstrate signing into Citrix daas and Azure apps with the security key.

Implement Azure policy to enforce security and compliance with organization wide governance by creating rules, tracking policy compliance, and preventing deployments in disallowed regions.

Access the Citrix director from the directory tool to monitor Citrix DaaS with a dashboard. Track connection failures, session counts, and app health via application probes for published apps.

Configure Azure monitor alerts for Citrix DAAS VDI by creating action group and setting memory under 2 GB, CPU above 80%, and storage above 80 GB to notify via email.