As an administrator, I would like to allow the Citrix Cloud application domains/IP via the Cloud Secure Web Gateway.
Cloud Secure Web Gateway
Citrix Cloud
To properly operate and consume the Citrix Cloud services, the following addresses must be contactable:
citrix.com
cloud.com
citrixworkspacesapi.net
citrixnetworkapi.net
cedexis-test.com
citm-test.com
cedexis.com
cedexis-radar.net
nssvc.net
g.nssvc.net
c.nssvc.net
servicebus.windows.net
blob.core.windows.net
sharefile.com
iwsprodeastusuniconacr.azurecr.io
iwsprodeastusuniconacr.eastus.data.azurecr.io
xendesktop.net
In regards to SSL Interception via Cloud SWG proxies. There are some domains that Citrix recommends NOT to do SSL interception on. Make sure to add these domains to your SSL Exemption policy.
nssvc.net
g.nssvc.net
c.nssvc.net
cedexis-test.com
citm-test.com
cedexis.com
cedexis-radar.net