• Security & Compliance
• Feb 26, 2025

In our ongoing commitment to enhancing security and compliance throughout the Citrix platform, we are excited to announce the release of updated guidance for implementing Security Technical Implementation Guides (STIGs) in Citrix environments. This new guidance aims to provide a comprehensive framework for securing Citrix Virtual Apps and Desktops (CVAD) deployments, ensuring that your organization stays protected against evolving threats.

The importance of STIGs

STIGs are essential tools for maintaining the security of Department of Defense (DoD) information systems. They provide a standardized approach to configuring and managing IT systems, ensuring they meet stringent security requirements. By adhering to STIGs, organizations can mitigate risks, enhance their security posture, and achieve compliance with DoD regulations.

What’s new in the updated guidance

To provide the latest and greatest guidance on implementing STIGs with Citrix, our public sector Solution Architects and consultants implemented and tested STIGs against a CVAD 2402 Long Term Service Release (LTSR) environment. 

The updated guidance includes several key enhancements: 

• Comprehensive coverage: The new guidance covers all critical components of CVAD, including StoreFront, Citrix Workspace app, License Server, Delivery Controller, and Virtual Delivery Agents (VDAs) for Windows.

• Simplified implementation: The guidance provides clear, step-by-step instructions for implementing STIGs, making it easier for IT administrators to configure and manage their Citrix deployments. The guidance follows the STIG checklist, making it easy for administrators to follow and implement. 

• Continuous updates: This document is continuously updated, and the updated guidance will be reviewed and revised regularly. Future releases will include guidance on the Linux Virtual Delivery Agent and Citrix Web Studio. This will ensure that your organization always has access to the most current security recommendations and practices.

Getting started

To get started following our STIG guidance, check out our Tech Paper and our Cheat Sheet with the latest information on how to keep your environment DISA compliant. You can subscribe to updates on the article to receive notifications about future updates to the STIGs.

By following the updated guidance for implementing STIGs in your Citrix environment, you can enhance the security and compliance of your organization’s systems. Citrix is committed to providing you with the tools and resources you need to protect your critical assets and achieve your security goals.

For more information and to access the DoD guidance, visit the DoD Cyber Exchange.

Bill Gray

Bill Gray is currently Vice President of Platform Services at Citrix.