Anybody know anything about Citrix here? I have a really b1tch of a problem I am trying to get to the bottom of. I have only been using Citrix for about 10 months now so am considered a blossoming newbie. I wont go into too much detail until somebody thinks they can help (save the fingers). But in a nutshell, I am having problems getting remote clients to connect to a Citrix Presentation Server 4.5 when they access via a proxy server. It seems that they get so far and then client tries to run the published app directly and not via the proxy

This is doing my fruit in, and has been for a couple of days now. I am knocking it on the head for now, and going to bed.

Hellerp !

I use Citrix but don't know the answer i'm afraid.

A free bump though and good luck

What proxy server is it ? Remember the app goes via port 14xx (can't remember exact)

What proxy server is it ? Remember the app goes via port 14xx (can't remember exact)

It's 1494 !! Regarding the proxy server, it could be anything! Currently, we are testing via a squid proxy and have it configured to go direct for the ICA stuff.

What my issue is though, this solution is to allow customers to be able to connect into a small network for online training purposes. We chose to use Java as the client end to avoid customers having to install Citrix clients, ActiveX, etc. (most already have Java installed). What I was not expecting though is to have get customers who use a proxy server to access the net to get things changed. If the answer is quite simply "they cannot access the Citrix server without changing their proxy and/or firewall", then that's probably all I need to know for now.

We ran a Wireshark trace, and it seems that everything is OK through the proxy until just after the application is selected. It then attempts to connect direct from the client to the IP of the Citrix server without going via the proxy. I have tried editing the .ica file and default file and mucking about with the proxy settings (client, auto, etc.).

Am I fighting a loosing battle here :confused:

For example, how would one be able to connect to a Citrix server at ones office from say, an Internet Cafe? (sorry - don't mean to sound like the queen !!)

Cheers

short answer ... yes loosing battle. You'll need to look at some of citrix's gateway add ins / products.

IMHO you won't get ica traffic through a proxy, firewall yes, but proxy no.

This is what I put in, in my old job to do what you want;

Citrix Systems » Citrix Access Gateway

Hi I'm no expert but have experience with connectivity to citrix solutions. As auroan said you can use a citrix secure gateway using https. otherwise its allowing ports 80 (http) for the front end and 1494 for the direct access we also use port 2598 and older versions used UDP 1604.

When you say remote users do you mean using a vpn or direct over the internet? is access restricted on a firewall?

from the client can you test if this ports open (from cmd line)

>telnet [iP address] 1494

hope it helps:)

So if I install Citrix Secure Gateway (the one that comes as standard), and configure the traffic as https, will it pass through the proxy OK?

Currently, the system is just going over normal http as it is still in pilot testing/further development. I planned to pull it apart and do the following:

1) Internet

2) DMZ (single hop) containing Citrix Secure Gateway and Ctx Web I/F Srv

3) Presentation Server(s), DC, Linux server

Am I guessing right that although I can secure the traffic using CSG, I still wont be able to pass through the proxy, and will need to have customers put rules in their firewalls and/or proxy servers (ISA, etc) to allow the ICA traffic out directly?? So all I will gain (although V.important) is secure https communications, but still have the proxy/firewall issues?

Cheers chaps for your advice so far Good to see we don't just talk cars here.

The CSG will act as an SSL VPN. All citrix specific traffic will route through the CSG.

I remember seeing this on my citrix server I built for testing at home. If you install Secure Gateway you need to create a new site within Citrix, this will not work on port 443 it will more than likely configure it on Port 444, this is because you will have allready installed IIS and SSL on port 443(default). I think I still have some notes from a course I went on. Drop me a PM with your email address on if you want me to dig them out for you and email them over. I don't know if they will be of any help but you never know.