Looking for a solution to Citrix gateway error not a privileged user? Read to find out what the experts at Bobcares have to say.

Do you find yourself getting stuck with “not a privileged user? Error when attempting to access the internal web link via XenMobile? Our Support Team at Bobcares has a solution for you!

Dealing with Citrix gateway error: not a privileged user

Did you know that internal websites are published as web links on XenMobile 10? Furthermore, the traffic policies are added on NetScaler Gateway and the proxy is configured in the environment.

This error often shows up when users try to access the web link.

Resolved: Citrix gateway error: not a privileged user

According to our Support Engineers, you can resolve this issue by ensuring the secure browse option is enabled in the Netscaler Gateways session profile. Remember to select Tunneled to internal network on the Secure Web MDX policy. You also need to ensure that the DNS suffixes are added under NSG.

After that, restrict external traffic by navigating to NetScaler Gateway, and then to Virtual Servers. Then, choose the Virtual Server on the  and click Edit.

Then, select “+” to access Policies.

Next, choose Traffic from the dropdown list.

Next, click continue.

Again click the “+” sign as seen below:

After that, navigate to Request Profile and enter the Name of the Traffic Policy. Enter the following expression for the policy:

(REQ.HTTP.HEADER User-Agent CONTAINS Mozilla || REQ.HTTP.HEADER User-Agent CONTAINS com.citrix.browser || REQ.HTTP.HEADER User-Agent CONTAINS Secure Web) && REQ.TCP.DESTPORT == 80

Then click Create as seen below:

Remember to click “+” to create a profile for this policy.

After this, enter the Traffic Profile’s name and choose the protocol as HTTP. This profile is for SSL and HTTP. Did you know that CVPN traffic is actually HTTP traffic in design, regardless of service type or destination port? Our Support Engineers would like to remind you to enter the Port number and IP address in the format of the Proxy Server. Then click create.

After that bind policy with a higher priority.

Next, create a traffic policy that skips proxy:

The priority for no proxy has to be lower.

In case you are still getting the same error, ensure the policy hits on NetScaler when website is accessed. Run these commands on NetScaler putty:

> shell
# cd /var/nslog
# nsconmsg -g pol_hits -d current

This confirms that the policy is hit. You can use trace to check the header value requested.

[Need help with Server Management?We are just a click away.]

Conclusion

In conclusion, we saw how “not a privileged user”, a Citrix gateway error was resolved under the guidance of the skilled Support Engineers at Bobcares.