Microsoft OWA Templates

Creating Resource Profiles Using the Microsoft OWA Template

A Microsoft Outlook Web Access (OWA) template is a resource profile that controls access to the application and configures OWA settings as necessary. OWA templates significantly reduce your configuration time by consolidating configuration settings into one place and by prepopulating a variety of resource policy settings for you depending on the type of setup you select.

The system supports intermediating traffic to Microsoft OWA through a Web rewriting resource profile template, JSAM, PSAM, and VPN Tunneling. This topic describes how to configure access using the Web rewriting template. The prepopulated values vary depending on the version of OWA you select and are based on the most common deployment of the servers.

The following figure depicts Creating Resource Profiles Using the Microsoft OWA Template (Users > Web Application Resource Profiles > New Web Application Resource Profiles):

To create a resource profile using the Microsoft OWA template:

  1. Select Users > Resource Profiles > Web Applications/Pages in the admin console.
  2. Click New Profile.
  3. Select your Microsoft OWA version from the Type list.
  4. Enter a unique name and optionally a description for the Citrix resource profile.
  5. Enter the URL of the OWA resource to which you want to control access In the Base URL box. Use the format: [protocol://]host[:port][/path]. The system uses the specified URL to define the default bookmark for the OWA resource profile. You may enter a directory URL or a file URL.
  6. Under OWA settings select the following options,

    7. •(OWA 2010,2013, and 2016 and above.) Select Managed Device to cache files. If you configure a Form post SSO, the trusted parameter is set to 4. This indicates the end user's device is private.

    •(OWA 2010,2013, and 2016 and above.) Select Unmanaged Device to not cache files. If you configure a Form post SSO, the trusted parameter is set to 0. This indicates the end user's device is public.

    If it is necessary to download an attachment, the file is cached even though you select Unmanaged Device.

    •Select Prevent download of attachments to prohibit users from downloading attachments to their systems.

    •Select Prevent upload of attachments to prevent users from transmitting (uploading) attachments to the system.

  7. Under Autopolicy: Web Access Control, create a policy that allows or denies users access to the Web resource (and all of its subdirectories) listed in the Resource field.

    1. Specify the Web server or HTML page to which you want to control access in the Resource field. Use the format: [protocol://]host[:port][/path].
    2. Select Allow to enable access to the specified resource or Deny to block access to the specified resource from the Action list.
    3. Click Add.

  8. Under Autopolicy: Caching, specify the resources to which this policy applies in the Resource box.

    9. The correct caching resource policy must be configured to allow end users to open and save e-mail attachments of different document types in OWA. For example, if the caching policy is set to Smart, end users cannot save .htm or .html attachments to disk.

  9. Under Autopolicy: Web Compression, create a policy that specifies which types of Web data the system should and should not compress.

    1. Specify the resources to which this policy applies in the Resources box.
    2. Select one of the following options from the Action list:

      3. •Compress-Compress the supported content types from the specified resource.

      •Do not compress-Do not compress the supported content types from the specified resource.

    3. Click Add.

  10. Select the Autopolicy: Single Sign-On check box to pass data such as the username and password to the OWA application.
  11. Click Save and Continue.
  12. Select the roles to which the resource profile applies in the Roles tab and click Add.
  13. The selected roles inherit the autopolicies and bookmarks created by the Microsoft OWA resource profile. If it is not already enabled, the system also automatically enables the Web option in the Users > User Roles > Select _Role > General > Overview page of the admin console.
  14. Click Save Changes.
  15. (Optional.) Modify the default bookmark created by the system in the Bookmarks tab, and/or create new ones.