What does a Citrix Engineer need to do to encrypt all communications to and from virtual desktops?

Securing XML traffic protects broker service communications between components such as StoreFront and the Delivery Controller, not the ICA session between client and virtual desktop.

SecureICA applies RC5 encryption directly to the ICA protocol channel, protecting all data transmitted between the Citrix Workspace app and the virtual desktop or application. Enabling SecureICA via Citrix policy is the designated method for encrypting virtual desktop communications at the session layer. Other options address different infrastructure layers without encrypting the actual ICA session data.

Implementing StoreFront HTTPS encrypts web traffic used to enumerate and launch resources from StoreFront, but does not encrypt the ICA session data flowing to and from the virtual desktop.

The Secure Ticket Authority issues session tickets for NetScaler Gateway connections to validate access, but does not itself encrypt the ICA communication channel.