Which session configuration on a NetScaler Gateway must a Citrix Administrator set to provide a secure connection to the servers running XenDesktop?

Setting ICA Proxy to On configures NetScaler Gateway to act as an ICA proxy, accepting ICA connections from Citrix Receiver clients and forwarding them securely to XenDesktop Delivery Controllers and VDAs. This is the specific session profile setting that enables secure XenDesktop connectivity and is required for HDX/ICA traffic to traverse the gateway.

Clientless Access Off disables web-based resource access but does not configure the ICA proxy connectivity required for XenDesktop sessions.

Default Authorization Action governs which resources users can access by default but does not establish the ICA proxy connection needed for XenDesktop.

Single Sign-On to web applications enables SSO for browser-based applications and does not apply to ICA-based XenDesktop desktop or application sessions.