Secure Private Access service deployment models

February 18, 2026

Contributed by:

The secure Private Access service is available to customers in two architectural options.

Hybrid service architecture: Hybrid service architecture allows you to use your on-premises StoreFront and NetScaler Gateway components, ensuring that all user traffic remains under your control. Also, the site management components are hosted and managed by Citrix. For details, see Hybrid deployment.
Cloud native service architecture: Cloud native service architecture is a cloud delivered ZTNA solution that delivers adaptive access to IT-sanctioned applications whether they are deployed on-premises or in the cloud. For details, see Citrix Secure Private Access.

You can choose these options from the Secure Private Access service admin console.

Log in to Citrix Cloud™ and then click Secure Private Access.
Select Setup for hybrid or Setup for cloud as per your requirement.

Select deployment model

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Secure Private Access service deployment models

February 18, 2026

Contributed by:

February 18, 2026

Contributed by:

Secure Private Access service deployment models

In this article