Having all your customers on one CGW for simplicity is superb, but if you need customization you will quickly see it would be nice to have one customer pr GW.
NetScaler introduced native OTP (One Time Password) some time ago, which you can incorporate in the login process as long as you have AD servers ready to use as a database.
During the login flow, you might want to extract which group(s) a user is a member of, and based on that information change the login flow.
Adding links to the login process is helpful to present the user with additional information, or linking to a portal page where they can create a service ticket.
XenMobile has a secure web browser called WorxWeb that allows you to browse web pages on the internet and on your private intranet, but how to selectively redirect this web traffic to a proxy server?
Citrix just released a security advisory article regarding the SSL “poodle” vulnerability and how we can disable SSL 3.0 protocol on the Netscaler -> http://support.citrix.com/article/ctx200238 The article shows how we can disable SSL on vServers and on NSIP, MIP and SNIPs.
The Content Switch (CSW) is a beautiful feature that enables you to use a single point of entry – your NetScaler – to host multiple services (like XenDesktop, XenMobile and Sharefile).