Citrix Provides End-to-End Security for Apps and Data with Common Criteria Certification

Citrix XenApp and XenDesktop 7.6 are the only app and desktop virtualization solutions with Common Criteria Certification and native FIPS 140-2 Compliance

SANTA CLARA, Calif. – Today, Citrix announced its achievement of Common Criteria certification for Citrix XenApp® and XenDesktop 7.6®, validating the ability to provide secure access to virtual Windows applications and desktops to workers on any device and any location. With this certification, Citrix offers the industry’s only end-to-end application and desktop delivery solution that meets Common Criteria evaluation standards including strict security requirements of many enterprises and government agencies, including the US Department of Defense.

Common Criteria is an internationally recognized set of guidelines (ISO 15408) which define a common framework for evaluating security features and capabilities of Information Technology (IT) security products.

Common Criteria certification provides government agencies and Global 1000 corporations with the assurance that they are utilizing secure and reliable solutions that have been evaluated against the industry’s highest standards. In order to become certified, XenApp and XenDesktop products were put through a series of security tests and were evaluated based on real-world scenarios for customers in Government, Military and Intelligence communities. With this certification, customers can be assured the evaluation has been performed to high standards, allowing them to deploy these Citrix products with confidence.

FIPS 140-2 Compliance

With XenApp and XenDesktop 7.6, Citrix continues as the only end-to-end app and desktop delivery solution available that meets Common Criteria Certification, and native FIPS 140-2 compliance. Government agencies and enterprise companies require strict adherence to high encryption standards such as FIPS 140-2. XenApp and XenDesktop 7.6 introduced native FIPS 140-2 compliance of Citrix’s award-winning HDX protocol to provide the highest level of data access security in virtual environments. This ensures all user connections to virtualized Windows apps and desktops are encrypted using NIST mandated FIPS 140-2 validated modules. Additionally, Citrix NetScaler can be integrated into the solution to provide FIPS 140-2 Level 2 compliance, providing an even higher level of information assurance with a hardened appliance.

Further information can be found in the Citrix FIPS 140-2 vendor guidance report, which provides an overview of FIPS 140-2 compliant deployment models for XenApp and XenDesktop designed to meet the needs of Government and Military organizations.


With the certification of XenApp and XenDesktop, Citrix is now the only vendor to offer an end-to-end application and desktop delivery solution that is Common Criteria certified. This milestone provides our customers in the Federal space with the flexibility to design a Software-Defined Workplace with the assurance of having a fully compliant, fully secure solution that mobilizes their workforce, without compromising user experience or productivity.
- Tom Simmons

Area vice president – US Public Sector


About Citrix

Citrix (NASDAQ:CTXS) is leading the transition to software-defining the workplace, uniting virtualization, mobility management, networking and SaaS solutions to enable new ways for businesses and people to work better. Citrix solutions power business mobility through secure, mobile workspaces that provide people with instant access to apps, desktops, data and communications on any device, over any network and cloudWith annual revenue in 2014 of $3.14 billion, Citrix solutions are in use at more than 330,000 organizations and by over 100 million users globally. Learn more at www.citrix.com.

For Citrix Investors

This release contains forward-looking statements which are made pursuant to the safe harbor provisions of Section 27A of the Securities Act of 1933 and of Section 21E of the Securities Exchange Act of 1934. The forward-looking statements in this release do not constitute guarantees of future performance. Those statements involve a number of factors that could cause actual results to differ materially, including risks associated with the impact of the global economy and uncertainty in the IT spending environment, revenue growth and recognition of revenue, products and services, their development and distribution, product demand and pipeline, economic and competitive factors, the Company's key strategic relationships, acquisition and related integration risks as well as other risks detailed in the Company's filings with the Securities and Exchange Commission. Citrix assumes no obligation to update any forward-looking information contained in this press release or with respect to the announcements described herein. The development, release and timing of any features or functionality described for our products remains at our sole discretion and is subject to change without notice or consultation. The information provided is for informational purposes only and is not a commitment, promise or legal obligation to deliver any material, code or functionality and should not be relied upon in making purchasing decisions or incorporated into any contract.


© 2015 Citrix Systems, Inc.  All rights reserved.  Citrix, XenMobile, Citrix ShareFile, ShareFile, Worx, WorxMail, WorxWeb, QuickEdit, ShareConnect, WorxNotes and Citrix Workspace Suite are trademarks of Citrix Systems, Inc. and/or one or more of its subsidiaries, and may be registered in the U.S. Patent and Trademark Office and in other countries. All other trademarks and registered trademarks are property of their respective owners.