Exporting

Citrix products are subject to the export jurisdiction of the U.S. Department of Commerce, Bureau of Industry and Security (BIS), which administers the Export Administration Regulations (EAR). For additional information regarding export control requirements and restrictions, please consult the EAR.

Please note that this website is intended only for general reference purposes, should not be construed as legal advice concerning U.S. export control laws and regulations, and is subject to change without notice. Citrix does not represent, warrant, or guarantee that any information provided is accurate, and any use of such information is at your own risk and without recourse to Citrix. Depending on the end-use and end-users, U.S. laws and regulations, including the EAR and sanctions laws and regulations, may impose restrictions in addition to those specified below. For example, unless authorized by the U.S. government, Citrix products may not be exported, reexported, or transferred, directly or indirectly, for any end-uses prohibited by Part 744 of the EAR, including certain end-uses related to proliferation of nuclear weapons, maritime nuclear propulsion, missiles, rocket systems, unmanned air vehicles, or chemical or biological weapons. You are responsible for complying with all applicable import, export control, and sanctions laws and regulations and should not act, or refrain from acting, based on information provided by Citrix without obtaining professional advice regarding your particular facts and circumstances.

Key Concepts and Terms Used in the Product Export Classifications Matrix

ECCN

The Export Control Classification Number (ECCN) identifies the relevant category and paragraph of the Commerce Control List (CCL). The ECCN designates the level of control for an item. Citrix products are typically classified under the following ECCNs:

  • 5A002 covers information security hardware "employing digital techniques performing any cryptographic function other than authentication, digital signature, or execution of copy-protected ‘software’" and having the following characteristics:
    • "A 'symmetric algorithm' employing a key length in excess of 56-bits;" or
    • "An 'asymmetric algorithm' where the security of the algorithm is based on any of the following:
      • Factorization of integers in excess of 512 bits (e.g., RSA);
      • Computation of discrete logarithms in a multiplicative group of a finite field of size greater than 512 bits (e.g., Diffie-Hellman over Z/pZ); or
      • Discrete logarithms in a group other than mentioned [above] in excess of 112 bits (e.g., Diffie-Hellman over an elliptic curve)."
  • 5A992 covers information security hardware that has encryption functions (e.g., cryptographic, cryptanalytic, or cryptologic) but otherwise does not meet the characteristics of 5A002 or qualifies for mass market treatment.
  • 5D002(c.1) covers information security software "having the characteristics, or performing or simulating the functions of" hardware that is classified as 5A002.
  • 5D992 covers information security software that has encryption functions (e.g., cryptographic, cryptanalytic, or cryptologic) but otherwise does not meet the characteristics of 5D002 or qualifies for mass market treatment.
  • EAR99 covers items that are not identified elsewhere on the Commerce Control List, including Citrix products that do not use encryption and certain products that qualify for “Note 4.”

License Exception and NLR

Many Citrix products utilize a license exception, as defined in the EAR, as the authority for an export. In particular, certain Citrix products may be exported to most destinations using License Exception ENC.

Note that the designation "NLR" indicates a product for which no license is required for export to most countries.

ENC, 15 C.F.R. § 740.17(b)(1) and (b)(2)

Products classified as ECCN 5A002/5D002 generally may be exported under License Exception ENC, subject to certain restrictions.

  • Certain products are self-classified by Citrix pursuant to 15 C.F.R. § 740.17(b)(1) and Citrix’s Encryption Registration Number (ERN), which means they generally may be exported pursuant to License Exception ENC to most government and non-government end-users in all destinations except for those listed in country group E:1 in Supplement 1 to Part 740 of the EAR, Cuba, and the Crimea region of Ukraine. Country group E:1 currently includes: Iran, North Korea, Sudan, and Syria. Please refer to the EAR for the most current list of E:1 and other restricted countries prior to any export.
  • Certain other products, including some network infrastructure products, are eligible for License Exception ENC pursuant to 15 C.F.R. § 740.17(b)(2) only after Citrix submits a classification request to BIS. In addition, these products may require a license depending upon the particular country and end-user.
    • Citrix’s (b)(2) products generally may be exported without a license to most government and non-government end-users in countries listed in Supplement 3 to Part 740 of the EAR. This list includes: Austria, Australia, Belgium, Bulgaria, Canada, Croatia, Cyprus, Czech Republic, Estonia, Denmark, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Japan, Latvia, Lithuania, Luxembourg, Malta, Netherlands, New Zealand, Norway, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey, and the United Kingdom. Please consult the EAR for the most current list of countries.
    • These (b)(2) products also may be exported without a license to most non-government end-users (as defined in the EAR) in all other countries, excluding the E:1 countries, Cuba, and the Crimea region of Ukraine. However, shipments to government end-users in these other, non-Supplement 3 countries require a license.

Mass Market

Following a self-classification by Citrix pursuant to its ERN or a review by BIS, certain products containing strong encryption that are mass marketed generally may be exported to most destinations without a license (i.e., NLR) under ECCN 5A992/5D992. Citrix products eligible for mass market treatment are indicated in the table below.

Note 4

Certain items that incorporate encryption but that are not primarily useful for computing, communications, networking, or information security may be excluded from the EAR’s encryption controls pursuant to Note 4 of Category 5, Part 2 of the CCL.

CCATS

The Commodity Classification Automated Tracking System is a reference number assigned by BIS to identify each product that it has reviewed and classified.

ENC Reporting

Exports and reexports of certain encryption products, including those described in 15 C.F.R. § 740.17(b)(2), are subject to semi-annual reporting requirements. Additional details about these reporting requirements are available at 15 C.F.R. § 740.17(e) and on BIS’s website.

Product Export Classifications Matrix

This portion of the site provides information on the export control status of Citrix products.

NOTE: As noted above, this information is subject to change based on BIS guidance is not intended as legal advice. 

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Endpoint Management *
5D002C.1
ENC 740.17(b)(2) G167093
22-Jul-16

*Classification based on accompanying NetScaler VPX download

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Hypervisor (All editions and versions)
5D992
NLR Mass Market ERN R100002
6-Aug-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Intelligent Traffic Management
5D992
NLR Mass Market   22-Feb-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Licensing
5D002
ENC 740.17(b)(1)
ERN R100002 24-Apr-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Podio App
5D992
NLR Mass Market
ERN R100002 28-Apr-15
Podio 5D992
NLR Mass Market ERN R100002
1-May-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Provisioning
5D002.a.1
740.17(b)(1) ENC   24-Apr-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Receiver (All versions,apps and OS since 01-Jul-10)
5D992C
NLR Mass Market   22-May-18

Citrix Content Collaboration (When bundled with other Citrix products)

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
ShareFile Personal, Team & Business
5D992
NLR Mass Market   9-Jul-15
Citrix ShareFile Service 0GB (All Additions) 5D992
NLR Mass Market
  19-Jul-18
Citrix ShareFile Service Unlimited: (All Additions) 5D992
NLR Mass Market   19-Jul-18
ShareFile Storage Zones Controller 5D002(c.1) ENC 740.17(b)(1)   19-Jul-18
ShareConnect App (for iOS & Android) 5D992
NLR Mass Market   19-Jul-18
QuickEdit App 5D992
NLR
Mass Market
  19-Jul-18
ShareFile Outlook Plug-In 5D992
NLR Mass Market
  19-Jul-18
ShareFile Workflows 5D992
NLR Mass Market   19-Jul-18
ShareFile User Management Tool EAR99 NLR     19-Jul-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Storefront
5D002
ENC 740.17(b)(1)
ERN R100002 23-Jun-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Virtual Apps Essentials
5D002
ENC 740.17(b)(1)
  14-Feb-17
Citrix Virtual Apps (Premium Service)
5D002
ENC 740.17(b)(1)
  6-Mar-18
Citrix Virtual Desktops Essentials
5D002
ENC 740.17(b)(1)
  14-Feb-17
Citrix Virtual Desktops (Standard Service)* 5D002 ENC 740.17(b)(2)* G167093 22-Jul-16
Citrix Virtual Apps and Desktops (Premium Service)* 5D002
ENC 740.17(b)(2)*
G167093
22-Jul-16
Citrix Workspace Environment Management
5D002(c.1)
ENC
740.17(b)(1)
ERN R100002 6-Mar-18
Virtual Desktop Agent
5D002(c.1)
ENC 740.17(b)(1)
ERN R100002
30-Jan-18
Session Recorder
5D002(c.1)
ENC 740.17(b)(1)
ERN R100002
24-Apr-18
Citrix App Layering
5D002
NLR Mass Market   9-Mar-17
Citrix Provisioning 5D002.a.1 ENC 740.17(b)(1)
  24-Apr-18
Citrix Secure Hub 5D992 NLR Mass Market   14-Feb-17

*Classification based on accompanying NetScaler VPX download.

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Workspace (On Premise)
5D002c.1
ENC 740.17(b)(1)
ERN R100002 9-Apr-14
Citrix Workspace Service/Hybrid Rights*
5D002
ENC 740.17(b)(2)*
G167093
22-Jul-16
Citrix Workspace Environment Management Agent 5D002(a.1)
ENC 740.17(b)(1)
  24-Apr-18

*Classification based on accompanying NetScaler VPX download.

Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Workspace App (all versions)
5D992
NLR Mass Market   1-Jul-18
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
XenMobile MDM Edition (Mobile Device Management)
5D992(b.1)
NLR Mass Market
ERN R100002 12-Jul-16
XenMobile Advanced Edition
5D992(b.1) NLR Mass Market ERN R100002 12-Jul-16
XenMobile Enterprise (Formerly Mobile Solutions Bundle)
5D992(b.1)
NLR Mass Market
ERN R100002 12-Jul-16
Worx Mobile Apps (WorxEdit, QuickEdit,Home, Mail & Client) 5D992(b.1)
NLR Mass Market
ERN R100002
9-Mar-16
XenMobile Knox Edition 5D002 ENC 740.17(b)(1) ERN R100002
7-Apr-14
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix ADC Appliance (All Models)
5A002(a.1)  ENC 740.17(b)(2) G162224 3-Aug-15
Citrix ADC SW Object Code
5D002(c.1) ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix ADC License Key
5D992(b.1)
ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix Web App Firewall - Citrix ADC mode license key
5D002(d)
ENC
740.17(b)(2)

G167093 22-Jul-16
Citrix Secure Web Gateway - Citrix ADC mode license key
5D002(d)
ENC 740.17(b)(2)

G167093 22-Jul-16
Citrix ADC VPX 5D002(d) ENC
740.17(b)(2)
G167093 22-Jul-16
Citrix ADC VPX Express 5D002(c.1) NLR Mass Market   14-Nov-17
Citrix ADC  License Key  (When bundled with Citrix Apps & Desktop) 5D002(c.1) ENC
740.17(b)(1)
G167093 22-Jul-16
Citrix ADC  License Key  (When bundled with Citrix Apps & Desktop) 5D002(c.1) ENC
740.17(b)(2)
G167093 22-Jul-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix ADC CPX Express (also known as Developers Edition)
5D992 (c)
NLR G168518
ERN R100002 24-Augr-16
Citrix ADC CPX License Key 5D002 (c.1)
740.17(b)(2)
G167094
ERN R100002
12-Jul-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Application Delivery Management
5D002C.1
ENC 740.17(b)(1) ERN R100002
27-Apr-16
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix SD-WAN WANOP Edition (WO)
5A002(a.1) ENC
740.17(b)(1)
G162041
29-Jun-15
Citrix SD-WAN Standard Edition (SE)
5A002(a.1) ENC
740.17(b)(2)
G175838
20-Apr-18
Citrix SD-WAN Enterprise Edition (EE)
5A002(a.1) ENC
740.17(b)(2)
G161129 21-May-15
Citrix SD-WAN WANOP Client
5D002 ENC
740.17(b)(1)
ERN R100002 27-Feb-15
Citrix SD-WAN VPX
5D002(c.1) ENC 740.17(b)(1) G162040
1-Jul-15
Virtual Wan Appliance (SW) 5D002(c.1) ENC
740.17(b)(2) G161129 21-May-15
Crypto License Key 5D002(d) ENC
740.17(b)(2) G162040 1-Jul-15
Product ECCN License
Exception
or NLR
ENC Paragraph or Mass Market Eligibility CCATS
or Self Classification
Classification
Date
Citrix Secure Web Gateway Appliance
5A002(a)
ENC 740.17(b)(2)
G174796
2-Jan-18
Citrix Secure Web Gateway Threat Intelligence Subscription
5D992
NLR
Mass Market
ERN R100002
2-Jan-18

Note:  For products self classified by Citrix using ERN R100002,the Classification Date reflects the most recent review.