Exporting

Citrix products are subject to the export jurisdiction of the U.S. Department of Commerce, Bureau of Industry and Security (BIS), which administers the Export Administration Regulations (EAR). For additional information regarding export control requirements and restrictions, please consult the EAR.

Please note that this website is intended only for general reference purposes, should not be construed as legal advice concerning U.S. export control laws and regulations, and is subject to change without notice. Citrix does not represent, warrant, or guarantee that any information provided is accurate, and any use of such information is at your own risk and without recourse to Citrix. Depending on the end-use and end-users, U.S. laws and regulations, including the EAR and sanctions laws and regulations, may impose restrictions in addition to those specified below. For example, unless authorized by the U.S. government, Citrix products may not be exported, reexported, or transferred, directly or indirectly, for any end-uses prohibited by Part 744 of the EAR, including certain end-uses related to proliferation of nuclear weapons, maritime nuclear propulsion, missiles, rocket systems, unmanned air vehicles, or chemical or biological weapons. You are responsible for complying with all applicable import, export control, and sanctions laws and regulations and should not act, or refrain from acting, based on information provided by Citrix without obtaining professional advice regarding your particular facts and circumstances.

Key Concepts and Terms Used in the Product Export Classifications Matrix

ECCN

The Export Control Classification Number (ECCN) identifies the relevant category and paragraph of the Commerce Control List (CCL). The ECCN designates the level of control for an item. Citrix products are typically classified under the following ECCNs:

  • 5A002 covers information security hardware "employing digital techniques performing any cryptographic function other than authentication, digital signature, or execution of copy-protected ‘software’" and having the following characteristics:
    • "A 'symmetric algorithm' employing a key length in excess of 56-bits;" or
    • "An 'asymmetric algorithm' where the security of the algorithm is based on any of the following:
      • Factorization of integers in excess of 512 bits (e.g., RSA);
      • Computation of discrete logarithms in a multiplicative group of a finite field of size greater than 512 bits (e.g., Diffie-Hellman over Z/pZ); or
      • Discrete logarithms in a group other than mentioned [above] in excess of 112 bits (e.g., Diffie-Hellman over an elliptic curve)."
  • 5A992 covers information security hardware that has encryption functions (e.g., cryptographic, cryptanalytic, or cryptologic) but otherwise does not meet the characteristics of 5A002 or qualifies for mass market treatment.
  • 5D002(c.1) covers information security software "having the characteristics, or performing or simulating the functions of" hardware that is classified as 5A002.
  • 5D992 covers information security software that has encryption functions (e.g., cryptographic, cryptanalytic, or cryptologic) but otherwise does not meet the characteristics of 5D002 or qualifies for mass market treatment.
  • EAR99 covers items that are not identified elsewhere on the Commerce Control List, including Citrix products that do not use encryption and certain products that qualify for “Note 4.”

License Exception and NLR

Many Citrix products utilize a license exception, as defined in the EAR, as the authority for an export. In particular, certain Citrix products may be exported to most destinations using License Exception ENC.

Note that the designation "NLR" indicates a product for which no license is required for export to most countries.

ENC, 15 C.F.R. § 740.17(b)(1) and (b)(2)

Products classified as ECCN 5A002/5D002 generally may be exported under License Exception ENC, subject to certain restrictions.

  • Certain products are self-classified by Citrix pursuant to 15 C.F.R. § 740.17(b)(1), which means they generally may be exported pursuant to License Exception ENC to most government and non-government end-users in all destinations except for those listed in country group E:1 in Supplement 1 to Part 740 of the EAR, Cuba, and the Crimea region of Ukraine. Country group E:1 currently includes: Iran, North Korea, Sudan, and Syria. Please refer to the EAR for the most current list of E:1 and other restricted countries prior to any export.
  • Certain other products, including some network infrastructure products, are eligible for License Exception ENC pursuant to 15 C.F.R. § 740.17(b)(2) only after Citrix submits a classification request to BIS. In addition, these products may require a license depending upon the particular country and end-user.
    • Citrix’s (b)(2) products generally may be exported without a license to most government and non-government end-users in countries listed in Supplement 3 to Part 740 of the EAR. This list includes: Austria, Australia, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Estonia, Denmark, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey, and the United Kingdom. Please consult the EAR for the most current list of countries.
    • These (b)(2) products also may be exported without a license to most non-government end-users (as defined in the EAR) in all other countries, excluding the E:1 countries, Cuba, and the Crimea region of Ukraine. However, shipments to government end-users in these other, non-Supplement 3 countries require a license.

Mass Market

Following a self-classification by Citrix pursuant to its ERN or a review by BIS, certain products containing strong encryption that are mass marketed generally may be exported to most destinations without a license (i.e., NLR) under ECCN 5A992/5D992. Citrix products eligible for mass market treatment are indicated in the table below.

Note 4

Certain items that incorporate encryption but that are not primarily useful for computing, communications, networking, or information security may be excluded from the EAR’s encryption controls pursuant to Note 4 of Category 5, Part 2 of the CCL.

CCATS

The Commodity Classification Automated Tracking System is a reference number assigned by BIS to identify each product that it has reviewed and classified.

ENC Reporting

Exports and reexports of certain encryption products, including those described in 15 C.F.R. § 740.17(b)(2), are subject to semi-annual reporting requirements. Additional details about these reporting requirements are available at 15 C.F.R. § 740.17(e) and on BIS’s website.

Product Export Classifications Matrix

This portion of the site provides information on the export control status of Citrix products.

NOTE: As noted above, this information is subject to change based on BIS guidance is not intended as legal advice. 

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
AppDNA 5D002 ENC 740.17(b)(1) Self Classification 5-Jun-18
AppDNA Source Code 5D002 ENC 740.17(b)(2) G178972 22-Mar-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Endpoint Management *
5D002C.1
ENC 740.17(b)(2) G167093
22-Jul-16

*Classification based on accompanying Citrix ADC VPX download

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Hypervisor (All editions and versions)
5D992
NLR Mass Market Self Classified 5-Mar-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Intelligent Traffic Management
5D992
NLR Mass Market Self Classified
22-Feb-18
Cedexis SDK Source code
5D002   742.15(b) - Publicly Available
Self Classified 5-Feb-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Licensing
5D002
ENC 740.17(b)(1)
Self Classified 30-Apr-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Linux Virtual Delivery Agent 5D002
ENC 740.17(b)(1)
Self Classified 7-May-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Podio App
5D992
NLR Mass Market
Self Classified 28-Apr-15
Podio 5D992
NLR Mass Market Self Classified 1-May-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Ready Workspace Hub
5D002 740.17(b)(1) ENC Self Classified 14-May-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Provisioning
5D002.a.1
740.17(b)(1) ENC Self Classified 29-Jan-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Receiver (All versions,apps and OS since 01-Jul-10)
5D992C
NLR Mass Market   22-May-18

Citrix Content Collaboration (When bundled with other Citrix products)

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
ShareFile Personal, Team & Business
5D992
NLR Mass Market Self Classified 9-Jul-15
Citrix ShareFile Service 0GB (All Additions) 5D992
NLR Mass Market
Self Classified 19-Jul-18
Citrix ShareFile Service Unlimited: (All Additions) 5D992
NLR Mass Market Self Classified 19-Jul-18
ShareFile Storage Zones Controller 5D002(c.1) ENC 740.17(b)(1) Self Classified 19-Jul-18
ShareConnect App (for iOS & Android) 5D992
NLR Mass Market Self Classified 19-Jul-18
QuickEdit App 5D992
NLR
Mass Market
Self Classified 19-Jul-18
ShareFile Outlook Plug-In 5D992
NLR Mass Market
Self Classified 31-Jul-18
ShareFile Workflows 5D992
NLR Mass Market Self Classified 19-Jul-18
ShareFile User Management Tool EAR99 NLR   Self Classified 19-Jun-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Storefront
5D002
ENC 740.17(b)(1)
Self Classified 7-May-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Virtual Apps
5D002
ENC 740.17(b)(1)
Self Classified 23-Oct-18
Citrix Virtual Desktops
5D002
ENC 740.17(b)(1)
Self Classified 23-Oct-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Virtual Apps Essentials
5D002
ENC 740.17(b)(1)
Self Classified 14-Feb-17
Citrix Virtual Apps (Premium Service)
5D002
ENC 740.17(b)(1)
Self Classified 6-Mar-18
Citrix Virtual Desktops Essentials
5D002
ENC 740.17(b)(1)
Self Classified 14-Feb-17
Citrix Virtual Desktops (Standard Service)* 5D002 ENC 740.17(b)(2)* G167093 22-Jul-16
Citrix Virtual Apps and Desktops (Premium Service)* 5D002
ENC 740.17(b)(2)*
G167093
22-Jul-16

*Classification based on accompanying Citrix ADC VPX download.

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Workspace Environment Management 5D002(c.1) ENC 740.17(b)(1) Self Classified 14-May-19
Virtual Desktop Agent 5D002(c.1) ENC 740.17(b)(1) Self Classified 7-May-19
Session Recorder 5D002(c.1) ENC 740.17(b)(1) Self Classified 23-Oct-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix App Layering 5D992 NLR Mass Market Self Classified 9-Mar-17
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Workspace (On Premise)
5D002c.1
ENC 740.17(b)(1)
Self Classified 9-Apr-14
Citrix Workspace Service/Hybrid Rights*
5D002
ENC 740.17(b)(2)*
G167093
22-Jul-16
Citrix Workspace Environment Management Agent 5D002(a.1)
ENC 740.17(b)(1)
Self Classified 5-Mar-19

*Classification based on accompanying Citrix ADC VPX download.

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Workspace App (all versions)
5D992
NLR Mass Market Self Classified 5-Mar-19
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
XenMobile MDM Edition (Mobile Device Management)
5D992(b.1)
NLR Mass Market
Self Classified 12-Jul-16
XenMobile Advanced Edition
5D992(b.1) NLR Mass Market Self Classified 12-Jul-16
XenMobile Enterprise (Formerly Mobile Solutions Bundle)
5D992(b.1)
NLR Mass Market
Self Classified 12-Jul-16
Worx Mobile Apps (WorxEdit, QuickEdit,Home, Mail & Client) 5D992(b.1)
NLR Mass Market
Self Classified 9-Mar-16
XenMobile Knox Edition 5D002 ENC 740.17(b)(1) Self Classified 7-Apr-14
Citrix Secure Hub 5D992 NLR Mass Market Self Classified 14-Feb-17
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix ADC Appliance (All Models)
5A002(a.1)  ENC 740.17(b)(2) G162224 3-Aug-15
Citrix ADC SW Object Code
5D002(c.1) ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix ADC License Key
5D992(b.1)
ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix Web App Firewall - Citrix ADC mode license key
5D002(d)
ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix Secure Web Gateway - Citrix ADC mode license key
5D002(d)
ENC 740.17(b)(2)

G167093 22-Jul-16
Citrix ADC VPX 5D002(d) ENC
740.17(b)(2)
G167093 22-Jul-16
Citrix ADC VPX Express 5D992(c) NLR Mass Market Self Classified 14-Nov-17
Citrix ADC  License Key  (When bundled with Citrix Apps & Desktop) 5D002(c.1) ENC
740.17(b)(1)
G167093 22-Jul-16
Citrix ADC  License Key  (When bundled with Citrix Apps & Desktop) 5D002(c.1) ENC
740.17(b)(2)
G167093 22-Jul-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix ADC CPX Express (also known as Developers Edition)
5D992 (c)
NLR Mass Market G168518 24-Aug-16
Citrix ADC CPX License Key 5D002 (c.1)
ENC
740.17(b)(2) G167094 12-Jul-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Application Delivery Management
5D002C.1
ENC 740.17(b)(1) Self Classified 27-Apr-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix SD-WAN WANOP Edition (WO)
5A002(a.1) ENC
740.17(b)(1)
G162041
29-Jun-15
Citrix SD-WAN Standard Edition (SE)
5A002(a.1) ENC
740.17(b)(2)
G175838
20-Apr-18
Citrix SD-WAN Premium Edition (fomerly known as Enterprise Edition) 5A002(a.1) ENC
740.17(b)(2)
G176685 11-Jul-18
Citrix SD-WAN WANOP Client
5D002 ENC
740.17(b)(1)
G162041 29-Jun-15
Citrix SD-WAN VPX
5D002(c.1) ENC 740.17(b)(1) G162040
1-Jul-15
Virtual Wan Appliance (SW) 5D002(c.1) ENC
740.17(b)(2) G161129 21-May-15
Crypto License Key 5D002(d) ENC
740.17(b)(2) G162040 1-Jul-15
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Secure Web Gateway Appliance
5A002(a)
ENC 740.17(b)(2)
G174796
2-Jan-18
Citrix Secure Web Gateway Threat Intelligence Subscription
5D992
NLR
Mass Market
Self Classified 2-Jan-18