Deployment Guide

citrix.com

Citrix NetScaler and Microsoft SharePoint 2013 Hybrid Deployment Guide2013 Deployment Guide

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

2

Table of ContentsOverview 3 SharePoint Hybrid Deployment Overview 3 Workflow 4 StepbyStepConfigurationonCitrixNetScaler 6 Summary 12 Appendix 12

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

3

Overview Office365isMicrosoft(MS)OfficedeliveredasSaaS.ThisdeploymentguideprovidesguidanceonahybridsolutiontodeployOffice365withCitrixNetScalerandimprovetheefficiencyand performance of the solution. A hybrid deployment enables customers to retain necessary modules within their datacenter whilemakingtherestofthedataavailablethroughthecloud.With Identify federation and trusted communication between SharePoint Online and SharePoint 2013 Server, a hybrid solution also offers a seamless user experience for the end user. When a customerestablishesthistrustframework,integratedfunctionalitybetween services and features such as Search, Microsoft Business Connectivity Services, and Duet Enterprise Online for Microsoft SharePointandSAPcanbeconfigured.

Ofthethreetopologiesforhybriddeployment,recommendedbelow,Onewayinboundandtwoway,requiredeployingareverseproxysolution.

One way Outbound: On-premises SharePoint Server 2013 Enterprise Search portal can reach out toSharePointOnline(PartofOffice365)butviceversaisnottrue

One way inbound: SharePoint Online search portal can reach out to On-premises deployment but vice versa is not true

Twoway:On-premisesSharePointServer2013EnterpriseSearchportalandSharePointOnlinesearch portal can reach out to each other

Inonewayoutboundthetrafficfloworiginatesfrominternalnetworkanddoesnotrequireareverseproxytowork.However,whenthetrafficcomesfromoutsidetotheinternalnetworkandaspertheMicrosoftguidelines,areverseproxyisrequired.TheNetScaler reverse-proxy solution is notonlythebestintheindustry,butalsoenablesusecaseslikeidentityfederationandsingle-sign-on in these deployments.

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

4

Prerequisites SharePoint 2013 Enterprise NetScaler10.5

Product Version and License

Product VersionNetScaler 10.5

NS license Any

SharePoint 2013

Workflow sphybridlab.onmicrosoft.com https://portal.onmicrosoft.com/admin/defualt.aspx administrator / Passw0rd

User Office 365 tenantNetScaler

1. User logs on to Office 365 and submits a search query

Office 365 sends consolidated results of online and On-Premises search

On premises SharePoint Server

3. ADC sends request to SharePoint server

4. Search response

2. NetScaler ADC receives search request and performs certificate based authentication

5. ADC forwards response to Office 365

http://www.citrix.com/sphybridlab.onmicrosoft.comhttps://portal.onmicrosoft.com/admin/defualt.aspx

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

5

Topology ThefollowingdiagramshowsthetopologyoftheMicrosoftsite,withsamplevalues.AreverseproxydeviceisusedbetweenSharePointfarmandInternet.Hybridfeatureisconfiguredtousethesecure store service. Reverse Proxy is used to publish the end point for share point.

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

6

Step by Step Configuration on Citrix NetScaler1. Create a SharePoint Server.

2.CreateaservicegroupfortheMicrosoftSharePointserver.

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

7

3.ConfigureaTCP,HTTP,orHTTP-EVCmonitor.

4.Importtheservercertificate.

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

8

5.ImportaCAsigningcertificatechain(forexampleDigiCert-CA3,DigiCert-RootCAandBaltimore-RootCA).

6.CreateavirtualserverfortheSharePointHybridfeature,listeningonport443.

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

9

7.Specifyaloadbalancingalgorithmandcookiepersistency.

8.Bindtheservercertificateandsigningcertificate(asaCAcertificate).

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

10

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

11

9.IntheConfigureSSLParamsdialogbox,enableclientauthentication.

10.Createarulethatresetstheconnectioniftheclientcertificatesubjectnamedoesntmatchthecorrectdomain(forexample,*.sphybridlab.com).

http://www.citrix.com/

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

12

WiththisSSLpolicyandactionNetScalerwillverifyincomingSSLconnectionhavingthecorrectcertificateissuedtothespecificdomain.ThiswillensureNetScalerrejectsaconnectionattemptifthecertificateCNfielddoesnotmatchwithdomainandtherebyimprovingthebottomlinesecurity.

Summary ReverseproxydevicesplayaroleinthesecureconfigurationofahybridSharePointServer2013deploymentwheninboundtrafficfromSharePointOnlineneedstoberelayedtoanon-premisesSharePoint Server 2013 farm.

FollowingaresomeofthebenefitsofdeployingaSharePoint2013hybridenvironmentwithNetScaler:

1. Pre-authentication of Internet users while search queries are sent to on-premises SharePoint 2013 servers

2. MonitoringandAnalysisofsearchrequestswithNetScalerpolicyframeworkandwebinsightmodules

3. Secureendpointforinboundtraffic,usingSSLencryptionandclientcertificateauthentication4.Integratedcachingandcacheredirectiontooptimizesearchperformance5.Datacompressiontominimizelatency6.Best-in-industrynetworkattackpreventionandapplicationfirewallsolutionsincludingURLfiltering

Appendix http://technet.microsoft.com/en-us/library/jj838715(v=office.15).aspx http://technet.microsoft.com/en-us/library/dn607304(v=office.15).aspx

http://www.citrix.com/http://technet.microsoft.com/en-us/library/jj838715(v=office.15).aspxhttp://technet.microsoft.com/en-us/library/dn607304(v=office.15).aspx

1014/PDF

Corporate HeadquartersFortLauderdale,FL,USA

Silicon Valley HeadquartersSantaClara,CA,USA

EMEA HeadquartersSchaffhausen,Switzerland

India Development CenterBangalore,India

Online Division HeadquartersSantaBarbara,CA,USA

Pacific HeadquartersHongKong,China

Latin America HeadquartersCoralGables,FL,USA

UK Development CenterChalfont,UnitedKingdom

About CitrixCitrix(NASDAQ:CTXS)isaleaderinmobileworkspaces,providingvirtualization,mobilitymanagement,networkingandcloudservicestoenablenewwaystoworkbetter.Citrixsolutionspowerbusinessmobilitythroughsecure,personalworkspacesthatprovidepeoplewithinstantaccesstoapps,desktops,dataandcommunicationsonanydevice,overanynetworkandcloud.ThisyearCitrixiscelebrating25yearsofinnovation,makingITsimplerandpeoplemoreproductive.Withannualrevenuein2013of$2.9billion,Citrixsolutionsareinuseatmorethan330,000organizationsandbyover100millionusersglobally.Learnmoreatwww.citrix.com.

Copyright2014CitrixSystems,Inc.Allrightsreserved.CitrixandNetScaleraretrademarksofCitrixSystems,Inc.and/oroneofitssubsidiaries,andmayberegisteredintheU.S.andothercountries.Otherproductandcompanynamesmentionedhereinmaybetrademarksoftheirrespective companies.

Deployment Guide

citrix.com

NetScaler and SharePoint Hybrid

13

http://www.citrix.com/http://www.citrix.com/