A VPN tunnel is established only if needed. Users remain logged on until choosing to log off or exit Receiver, roam from the internal network to an external network, or delete passwords. A user is logged on only to the account associated with the requested resource. Actions that require a log on include starting an app from Receiver or the Finder, using the Refresh Apps command, viewing or searching for apps, or adding an account. Support for Access Gateway SmartAccess controls.Improved logon and logoff operations: Users are prompted to log on to Receiver only when a logon is required. This feature requires that you disable the Single Sign-On with Windows setting on the Access Gateway. Automatic start-up of a VPN tunnel when a user logs on. Automatic routing of ICA traffic through the Access Gateway ICA proxy for optimal user experience. Single authentication to the Access Gateway: Use of a single session for both VPN and clientless access so that a Receiver user logs on once for both types of access and consumes only one license. Citrix Receiver for Mac is an essential tool to connect your Mac with your company network.