What's everyone's option of HDX direct? Today, we ...
# citrix-vad
m
What's everyone's option of HDX direct? Today, we push everyone, external or internal, through a NS GW. we don't leverage workspace service or GW cloud service stuff, we have everything on-prem. Looking at HDX direct for internal users is somewhat appealing if we take the NS's out of the mix. what is everyone's experience with it?
@Oz Zy you done much with this yet?
j
We're GW Service, HDX Direct for internal has been great for our internal users, so they don't have to bounce through a PoP and can go directly over our L2/EPL for HQ or SDWAN for robos after auth/brokering
👍 1
👍🏼 1
j
Problem I have is most places are port natted so HDX Direct hasn't worked. I am working on rolling out more people with TLSVDA though with NetScalers for extra security as if the endpoint doesn't have the internal root certificate, they can't get in if they bypass the gateway.
o
@Matt Nation, yes, we try to leverage it whenever we can. In certain scenarios (since we're working across various environments, we design and have VPNs in play, etc.), we can't use it and have to use the older Direct Workload connection (non-intelligent way), but for the most part, yes, we lean toward using it.
👍 1