Scenario: The Director of network security in a financial organization wants to protect the enterprise network from any external malware threats. To…

The scenario requires a solution to intercept, inspect, and filter outbound web traffic from internal users to the internet, including encrypted SSL/TLS traffic. The Citrix Secure Web Gateway (SWG) is a specific deployment mode of the Citrix ADC designed for this exact purpose. It functions as a forward proxy, intercepting user traffic, performing SSL interception to decrypt and examine secure connections, applying URL filtering policies to block malicious sites, and providing user-level auditing and control.

A. Default Gateway: This is a basic network routing function. While a Citrix ADC can be a default gateway, this mode alone does not provide the required advanced security features like SSL interception or URL filtering.

C. Citrix Gateway: This feature is primarily a reverse proxy and VPN solution that provides secure remote access for external users into the enterprise network, not for inspecting outbound traffic from internal users.

D. Access Gateway: This is the legacy name for Citrix Gateway and is incorrect for the same reason. Its function is secure remote access, which is the opposite of the traffic flow described in the scenario.

1. Citrix Product Documentation, "Secure Web Gateway." "The Citrix Secure Web Gateway (SWG) solution for on-premise deployment provides a way to secure an enterprise network from internet threats. It protects the users from malicious web traffic by inspecting all the user traffic that flows to the internet... Key use cases are... Intercept SSL traffic, URL filtering, User identification and control." This directly aligns with all requirements in the scenario.

2. Citrix Product Documentation, "SSL forward proxy." "A Citrix ADC appliance configured as an SSL forward proxy intercepts and decrypts secure traffic for inspection... The appliance can then provide user access control and log user transactions before forwarding the traffic to the server." This document confirms the SSL/TLS interception capability central to the scenario.

3. Citrix Product Documentation, "URL Filtering." "The URL Filtering feature enables you to control user access to websites... A Citrix ADC appliance uses the URL categorization database... to identify the category of an incoming URL request and then applies the configured policy." This confirms the ability to block access to malicious websites as required.

4. Citrix Product Documentation, "Citrix Gateway." "Citrix Gateway is a customer-managed solution that provides users with secure remote access to apps and data... It provides a single point of access..." This reference clarifies that Citrix Gateway's primary role is for inbound remote access, making it unsuitable for the outbound traffic inspection scenario.