Full VPN Deployment
In this mode, the NetScaler establishes a full VPN tunnel between the client device and the internal network. All the network traffic from the remote user’s device is routed through the NetScaler Gateway, ensuring all internet‑bound traffic is secure

• Purpose: Grants users complete access to the internal network as if they were physically present on it.
• Use Cases: Remote workforce accessing corporate resources like file shares, printers, and applications that are not web-based.
• Functionality: After authentication, all user traffic (TCP/UDP) is routed through the VPN tunnel.

Clientless Access Deployment or Clientless VPN mode
This mode allows users to access internal web applications without installing a VPN client. Users can access specific application and resources without a full VPN connection. It’s often used when you want to give access to web applications and not route all traffic through the VPN.

• Purpose: Provides secure, browser-based access to specific internal web apps.
• Use Cases: Quick access to intranet portals, webmail, or other web-based apps for users who can’t install software.
• Functionality: The NetScaler acts as a gateway and reverse proxy, presenting internal web resources securely over HTTPS.

ICA Proxy
This mode is designed specifically for providing remote access to Citrix Virtual Apps and Desktops (formerly XenApp/XenDesktop).

• Purpose: Enables secure access to Citrix sessions without requiring a full VPN.
• Use Cases: Remote workers or contractors accessing virtual desktops or apps through Citrix Workspace.
• Functionality: The NetScaler proxies ICA (Independent Computing Architecture) traffic between the client and Citrix servers, ensuring security without exposing the internal network.

RDP Proxy
This deployment allows users to connect securely to Remote Desktop Protocol (RDP) sessions via NetScaler without requiring a full VPN.

• Purpose: Provides remote access to specific Windows machines through RDP over HTTPS.
• Use Cases: Administrators managing servers or employees accessing dedicated workstations remotely.
• Functionality: Users connect to the NetScaler Gateway, which forwards RDP traffic to the target machines securely. This is done using browser-based or client-based methods, depending on the setup.