
Formerly called Citrix SSO, this VPN client gives users secure access to internal apps and resources through a NetScaler Gateway. It establishes an encrypted full or split tunnel, supports multifactor, SAML and certificate-based sign-in, and can be configured for Always On connectivity. Paired with the Endpoint Analysis client, it lets admins check device posture before granting access.
anchor apple generic and identifier "com.citrix.NSG.macos.app" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = U42NNPDKG7)