OK, so, you’ve finally decided that all those rogue mobile devices in your organization can no longer be ignored and have to be controlled and managed, like any other asset. To achieve this, you and your company have selected the premiere Mobile Device Management solution from Citrix: XenMobile.

Either you have harnessed your powers of all things server/network/firewall-related and implemented the solution on your own (congratulations!), or you have taken the option to use Citrix Consulting Services (smart move) and had the XenMobile solution professionally installed and deployed. Those nice consultants have helped you enroll your device, configured a couple of device management policies and deployed Worx apps. Great – see ya!

Now all you have to do is manage this thing, but where do you start? Or maybe your role is only to deploy and now some poor Admin has to take this new product under their wing and figure out what to do next? Perhaps you are that Admin looking through the Citrix blogs for help?

Well, you’re in luck, because we’ve got some tips on where to go next with a new installation.

Device Management

Consider customizing the dashboard to view the information that’s important to you. Add or remove columns in the Devices display to see the device information you want. Provide limited access to your helpdesk staff by configuring Role-Based Access Control. Make sure you are using the latest version of the software by checking the Release Management status. Manage and maintain your APNs certificates and licences via the Settings console.

Configure enrollment modes to make enrollment simpler or more secure with two-factor authentication. Enable enrollment via the Self Help Portal for users to enroll and manage their devices without needing to call the help desk.

Brand the Worx store with your own corporate colors and logo or push a company wallpaper to your corporate devices (iOS only).

Set up Delivery Groups to target your policies, applications, actions, etc., to specific groups of users.

Device Policies

Would you rather your employees with corporate devices weren’t milling around, playing Pokémon Go? Configure an App Access policy to block applications you don’t want installed, or insist on applications you do. You can target corporate devices only, leaving BYOD unaffected. Collect an App Inventory of all the applications installed on your corporate devices.

Perhaps you are in a sensitive location and taking pictures is not allowed. Configure a Restrictions policy to prevent the use of the camera, or many other features, such as screen shots, cloud backup, gaming, etc. Also, you can configure Worx applications via the App Geofence setting in the MDX Polices to be restricted to work only in your chosen location.

Are some of your devices used by multiple people in the same environment, like a hospital or school? You can configure Shared Devices for multiple users, each with their own profile. You can even restrict the device itself to a geolocation by configuring the Location policy to enforce geographic boundaries. Maybe your devices are used for a single purpose – configure an App Lock or Kiosk (Samsung SAFE) policy to lock the device to a single app or set of defined apps.


Not only can you push and manage Worx applications, such as WorxMail, WorxWeb, WorxNotes, etc., down to devices, you can also push down or make available suggested public applications from the Apple App Store or Google Play store. Likewise, you can push down a web link or bookmark to the device with a custom icon for quick access to your preferred websites.

Citrix uses its custom MDX Policies framework to wrap applications within a secure container. There are many options available on an app-by-app basis for you to configure. Restrict cut, copy and paste between Worx apps only, enforce encryption, configure restrictions, configure app settings, and more!

Configure ShareFile within the XenMobile console to automatically connect users to their ShareFile account. Link applications, such as WorxNotes, to ShareFile for greater flexibility in the type of notes that can be created and attach audio, video and image files.


Manage the XenMobile environment automatically so it does the work for you! Configure a Notification server to send both admin and user notifications via your corporate mail system. Using Notification templates the admin can be alerted when a user enrolls, is blocked at the ActiveSync Gateway, has installed a blacklisted application, and so on.

Configure Automated Actions to automatically carry out pre-defined instructions once a trigger is activated. This can be as simple as a notification to the admin and/or user or more serious, such as a device wipe.


Investigate the ways you can troubleshoot issues now, so you’re prepared should the worst happen. Citrix provides online troubleshooting tools that enable you to interrogate your installation, update sign APNs certificates and submit information to Support.

More Information

If you would like to learn more about the topics above and other features of XenMobile, consider attending one of our instructor lead Education courses. Citrix Education offers two courses focusing on XenMobile:

CXM-202: Managing and Supporting a Mobility Solution with Citrix XenMobile

This course provides the skills necessary to manage, support, and troubleshoot a Citrix XenMobile 10 Enterprise environment. Students with limited or no XenMobile experience will gain an understanding of what is required to maintain the components of a XenMobile Enterprise solution. Students will have access to hands-on exercises within a virtual lab environment to configure and test policies, manage device and application usage, perform troubleshooting, reporting, and more.

CMX-303: Deploying Enterprise Mobility Solutions with Citrix XenMobile

Designed for students with little previous XenMobile experience, this course is best suited for individuals who will be deploying XenMobile environments. Learn the skills required to implement XenMobile components including XenMobile Server, NetScaler Gateway, ShareFile, StorageZones, XenApp and XenDesktop, and XenMobile Worx Apps. At the end of the course students will be able to configure their XenMobile environments to address Enterprise Mobility Management requirements including Mobile Device Management, Mobile App Management and Mobile Content Management.

Heathcare Banner