The Citrix Platform — One Licence, the Entire Stack
Citrix Universal Hybrid Multi-Cloud (UHMC) is the new way to licence the Citrix platform — a single subscription that replaces all previous standalone Citrix products with one concurrent-user licence, giving your organisation Premium Edition access to virtual apps and desktops, unlimited NetScaler ADC instances, XenServer hypervisor, Secure Private Access, uberAgent, DeviceTrust, and more. One vendor, one renewal, one integrated platform.
Everything Citrix — One Predictable Annual Subscription
Introduced in March 2024, UHMC replaced every previous Citrix standalone product and licensing model with a single SKU. It ended the era of balancing desired functionality against available budget — every UHMC customer receives Premium Edition entitlement across the full product set, with the flexibility to run Citrix in a customer-managed data centre, in Citrix Cloud, or in a hybrid of both under the same licence.
One Licence Covers
The Entire Citrix Product Set — Premium Edition
UHMC includes Citrix DaaS (virtual apps and desktops), Citrix Virtual Apps and Desktops for on-premises, Secure Private Access for ZTNA, NetScaler ADC Premium (unlimited virtual instances, up to 1000 Gbps), XenServer Premium Edition, uberAgent for UXM and endpoint security analytics, DeviceTrust for device context, Citrix Analytics for Performance and Security, and Citrix Endpoint Management. No separate SKUs, no tier upgrades, no feature unlocks.
How Licensing Works
Concurrent Users — Deploy Anywhere
UHMC is licensed per concurrent user — the number of users actively connected at any one time, not the total user population. This model is ideal for organisations where not all staff are online simultaneously. The same licence entitles you to run workloads on your own infrastructure, in Citrix Cloud, in Azure, AWS, Google Cloud, or across all of them simultaneously — without changing licence or paying more.
Why It Matters
30–40% Reduction in Total IT Spend
Organisations consolidating on UHMC typically reduce total IT spending by 30–40% by eliminating separate licensing relationships for load balancers, hypervisors, monitoring tools, and security analytics platforms. The unlimited NetScaler entitlement alone often justifies the UHMC investment — organisations that previously purchased NetScaler per-instance find they can deploy additional NetScaler capacity across their entire estate at no additional licence cost.
What's Included
Seven Products. One Subscription. Explore Each Below.
Every component in UHMC is a full-capability, enterprise-grade product in its own right. Click through to each product page to understand what it does, how it is deployed, and how OAS delivers it as a managed service.
Core Platform
Citrix DaaS
Virtual Apps & Desktops — Cloud Control Plane. The heart of the Citrix platform. DaaS virtualises applications and desktops inside your data centre or cloud, delivering them to any device over the HDX protocol with a Citrix-managed control plane — eliminating the need to maintain Delivery Controllers, databases, or licensing servers.
- Citrix-managed control plane — no servers to maintain
- Any resource location — on-premises, Azure, AWS, GCP, hybrid
- Machine Creation Services, Autoscale, and profile management
- Microsoft Entra ID SSO and MFA integration
Zero Trust Access
Secure Private Access
ZTNA — VPN-Less Application Access. Citrix's Zero Trust Network Access solution. SPA provides VPN-less, least-privilege access to SaaS and internal web applications — with agentless access for BYOD and unmanaged devices, browser isolation, anti-keylogging, and continuous device posture verification.
- VPN-less ZTNA — access granted per application, not per network
- Agentless browser access for BYOD and contractor devices
- Remote Browser Isolation for untrusted device sessions
- App protection — anti-keylogging and dynamic watermarking
Application Delivery
NetScaler ADC
Application Delivery Controller — Unlimited Instances. UHMC includes unlimited NetScaler ADC Premium Edition virtual instances — the industry-leading application delivery controller for load balancing, SSL offload, global server load balancing, and Citrix Gateway. One licence covers every NetScaler deployment across your entire estate.
- Unlimited VPX virtual instances included in UHMC
- Citrix Gateway for secure HDX and remote access
- Global Server Load Balancing across data centres and cloud
- SSL offload, content switching, and traffic management
Application Security
NetScaler WAF
Web Application Firewall — OWASP Protection. NetScaler WAF is the web application firewall capability of the NetScaler ADC Premium — protecting web-facing applications from OWASP Top 10 threats, SQL injection, cross-site scripting, bot attacks, and API abuse, without additional licensing when deployed on UHMC.
- OWASP Top 10 protection — included in NetScaler Premium
- SQL injection, XSS, and bot mitigation
- API security and rate limiting
- No additional WAF licence required under UHMC
Hypervisor
XenServer
Enterprise Hypervisor — Premium Edition. XenServer Premium Edition is included in UHMC — the enterprise Type-1 hypervisor built for Citrix workloads, now available as a cost-effective alternative to VMware vSphere. XenServer is no longer sold as a standalone product, making UHMC the recommended path for new deployments.
- Included in UHMC — no separate hypervisor licence required
- Optimised for Citrix VDA workloads and MCS provisioning
- Live migration, HA, and resource pool management
- Enterprise alternative to VMware without the Broadcom pricing
Monitoring & Analytics
Citrix uberAgent
User Experience Monitoring & Endpoint Security. uberAgent is a single lightweight agent that delivers User Experience Monitoring (UXM) and Endpoint Security Analytics (ESA) from every endpoint. Previously sold as a standalone product, uberAgent is now built into the Citrix platform and included in UHMC — making deep performance and security visibility available to every Citrix customer.
- UXM — boot times, logon performance, app launch, and experience score
- ESA — MITRE ATT&CK threat detection and process chain analysis
- Citrix VDA session metrics — ICA latency, session health, licence usage
- Feeds Splunk, Elasticsearch, and other SIEM platforms
Device Context
Citrix DeviceTrust
Real-Time Device Context & Conditional Access. DeviceTrust extends Citrix access policy decisions with real-time device context signals — domain membership, certificate presence, antivirus status, screen lock, OS version, and more — evaluated continuously throughout the session, not just at login. Built into UHMC, it closes the gap between authentication and ongoing session security.
- Continuous device context — evaluated throughout the session
- 20+ device properties checked in real time
- Dynamic policy response — restrict, redirect, or disconnect on change
- Complements SPA and Entra Conditional Access for layered Zero Trust
On-Premises Deployments
What About Citrix CVAD — On-Premises?
Citrix Virtual Apps and Desktops (CVAD) is the on-premises equivalent of Citrix DaaS — it uses many of the same components (VDAs, Delivery Controllers, StoreFront, Citrix Studio, NetScaler Gateway) but the control plane is managed and hosted by your organisation rather than by Citrix in the cloud. CVAD remains a valid and widely deployed architecture, particularly for organisations with strict data residency requirements, air-gapped environments, or where an existing on-premises investment is still delivering value.
Under UHMC, customers are entitled to run Citrix in a customer-managed environment, in Citrix Cloud, or in a hybrid of both — so existing CVAD deployments can continue operating under the new licence while a phased migration to DaaS is planned. If you are running a legacy CVAD environment or evaluating whether to remain on-premises or transition to Citrix Cloud, OAS can provide architecture guidance, component maps, licensing comparisons, and a migration roadmap tailored to your organisation.
OAS is a Citrix partner with 40+ years of enterprise IT experience. We design, licence, deploy, and operate the full Citrix UHMC stack — giving your organisation the benefits of the platform without the operational burden of managing it.
Licensing & Architecture Design
UHMC is concurrent-user licensed and highly flexible — but the right architecture depends on your user population, application estate, and data sovereignty requirements. OAS advises on licence sizing, deployment model selection, and CVAD-to-DaaS migration planning.
Expert Design
Platform Deployment & Integration
OAS deploys and integrates the full UHMC stack — Citrix DaaS, NetScaler, XenServer, SPA, uberAgent, and DeviceTrust — into a unified, working environment. We handle Entra ID integration, MFA, Cloud Connector configuration, and HDX policy framework from day one.
Full Stack
24/7 Monitoring & Reporting
OAS monitors your Citrix environment continuously using Citrix Monitor, uberAgent, and Citrix Analytics for Performance — tracking session health, VDA availability, NetScaler traffic, and user experience scores. Regular reports support POPIA accountability and insurance documentation.
Always On
Incident Response & Lifecycle
From VDA image patching and NetScaler firmware upgrades to incident response and root cause analysis — OAS manages the complete operational lifecycle of your Citrix platform, keeping every component current, supported, and performing as expected.
Trusted Partner
The Citrix Product Set
Jump straight to any product page for full specifications, deployment options, and how OAS delivers it as a managed service.
Speak to an OAS consultant about Citrix UHMC — whether you are a first-time Citrix customer, migrating from an existing CVAD deployment, or looking to unlock the full value of a licence you already own.
