Welcome to ISAserver.org

Citrix Web clients problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2000 General] >> Server Publishing >> Citrix Web clients problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Citrix Web clients problem - 1.Feb.2004 7:04:00 PM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

Hi there,
I have difficulties with installed Citrix Server Behind Isa Server.
When A client is trying to connect to the server and is local client ,there isnÆt any communication problems and everythingÆs is OK. But this is not the case with the ICA Clients from outside the local area .I have done what is suggested for publishing Citrix server behind ISA all protocols have been described and ip packets have been set to permit connections from outside ass follow:
http://www.isaserver.org/tutorials/Citrix_ICA_Browser_Access.html
http://www.isaserver.org/tutorials/ISA_SERVER__Citrix_Metaframe_Acces.html

Nothing seems to solve the problem

ICA Client(Web Interface) --->
Browsing with installed Citrix ICA Active X control
(ica32t.exe) and IE6.0 SP1

ISA Server (xxx.xxx.xxx.xxx)
----------------------------
ISA Server Published:
Citrix XML (port 8080) mapped to the Citrix Server IP
Protocol Definition
Citric XML TCP 8080 Inbound
àààààààààààààààààààààà
Citric Server (port1494) mapped to the Citrix Server IP
Protocol Definition
Citric Server TCP1449 Inbound
Secondary connection:
TCP1023-65535 inbound and outbound
ààààààààààààààààààààà..
Citric Server UDP (1604) mapped to the Citrix Server IP
Protocol Definition
Citric Server UDP (1604) Inbound
Secondary connection:
UDP1023-65535 receive and send

Packet filters:
TCP 8080 Permit Both
TCP1449 Permit Both
UDP1604 Permit Both
--------------------

Citrix Server (xxx.xxx.xxx.xxx)
------------------------------
[netstat ûa ûn]
Citrix XML (port 8080)
Citric Server (port1494)
Citric Server UDP (port1494)
Configured ICA filez as stated in:
http://www.isaserver.org/tutorials/Citrix_ICA_Browser_Access.html
------------------------

Can anyone tell me what is missing and what Is Wrong so these clients with ica32t.exe

Thanx Peter

Post #: 1

Featured Links*

RE: Citrix Web clients problem - 1.Feb.2004 7:12:00 PM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

[netstat ûa ûn]
Citrix XML (port 8080)
Citric Server (port1494)
Citric Server UDP (port1604)

(in reply to papata)

Post #: 2

RE: Citrix Web clients problem - 1.Feb.2004 7:41:00 PM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

This is really strange,
I am able To Connect to the Citrix server Behind the ISA
Trough Citrix Program Neighborhood (ica32.exe) with Custom ICA Connection on port 8080 and access the desktop for the logged user .Unfortunately the Citrix Program Neighborhood Application Sets even with the same setting as the above connection on port 8080 and as stated:
http://www.isaserver.org/tutorials/Citrix_ICA_Browser_Access.html
On port 8080 Mapped to the external address on the ISA Server
Cannot connect to the Citrix Server.

There isnÆt anything different here:
http://www.nrc.gov/reading-rm/adams/install/firewall.pdf

So I can connect using Citrix Program Neighborhood (ica32.exe) with Custom ICA Connection (xxx.xxx.xxx.xxx:8080) ,but with Citrix Program Neighborhood (ica32.exe) Application Sets (xxx.xxx.xxx.xxx:8080) Citrix server is not accessible.

Everything is OK inside and still these problems from outside so what is the problem? Also I forgot to mention that the Citrix Server is Citrix Metaframe XP FP3 with SP3 Installed on Windows 2003 With Latest patches Installed, Running on P4 3200 with 1gb DDR Ram no ISA clients installed on the system and the Default Gateway is The ISA Server(NAT Client).

If anyone have experienced something like this ,please tell me how to solve it à.please
Peter

(in reply to papata)

Post #: 3

RE: Citrix Web clients problem - 1.Feb.2004 11:24:00 PM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

This is just unbelivable - tehere is no info about such problem on the net?
I gues this is just me ?
If anyone want to try to solve this problem
feel free to mail me :
papata@mail.ru

(in reply to papata)

Post #: 4

RE: Citrix Web clients problem - 1.Feb.2004 11:25:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Peter,

check out http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=6;t=001249 and see if it applies to your environment.

You definitely don't need those IP packet filters. So, just delete them. Also, because you seems to use NFuse or the XML service, the publishing of the UDP port 1604 (old style of ICA browsing) is not needed either.

HTH,
Stefaan

[ February 01, 2004, 11:28 PM: Message edited by: spouseele ]

(in reply to papata)

Post #: 5

RE: Citrix Web clients problem - 2.Feb.2004 12:35:00 AM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

Thax for that I understand that Most of the filters I used aren't needed but after couple of days trying so many things.....
I know that these rules aplies to old Citrix server but was wondering why something is wrong...
Still no luck with your recomendations but every problem have a solution .... i will keep you informed and will post all details of my settings once I find out what is wrong with all these litle details [Smile]

(in reply to papata)

Post #: 6

RE: Citrix Web clients problem - 2.Feb.2004 8:16:00 PM

spouseele

Posts: 12782
Joined: 1.Jun.2001
From: Belgium
Status: offline

Hi Peter,

OK, keep us informed!

Thanks,
Stefaan

(in reply to papata)

Post #: 7

RE: Citrix Web clients problem - 3.Feb.2004 2:01:00 AM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

Hi Again Everything is OK right Now and I feel better after I read your post things just get better and better.
I want to share all the things with the readers of this forum so if anyone need to solve something like this its there and can be found easy.

Everything about the problem:

http://hqextsrvsft01.citrix.com/kb/entry.jspa?entryID=1379

http://www.isaserver.org/tutorials/ISA_SERVER__Citrix_Metaframe_Acces.html

http://www.tek-tips.com/gviewthread.cfm/lev2/3/lev3/19/pid/48/qid/701603

http://thethin.net/faqs2.cfm?id=123&category=3&sortby=date

http://hqextsrvsft01.citrix.com/isearch!execute.jspa?searchQuery=CTX584485&searchKB=true&searchForums=true

http://www.nrc.gov/reading-rm/adams/install/firewall.pdf
(Old style ICA Clients)

Basically its just said that you need to open port TCP 1449 then you need to allow connection trough the open port ,then map the external address to the internal for the same port .If your XML server is running on different address than 80 do the same things for the port which the xml server is running on.

Then run: ALTADDR /set <Internet IP address>

http://hqextsrvsft01.citrix.com/kb/entry!default.jspa?categoryID=122&entryID=1850&fromSearchPage=true

http://hqextsrvsft01.citrix.com/kb/entry.jspa?entryID=1379.0

The Next step is to modify the Template.ica file in the NFuse/Web Interface Web site. Use the Admin pages of Nfuse/Web Interface.
Using the NFuse Java Objects NFuse_IPv4Address and NFuse_IPv4AddressAlternate eliminates the need for UDP browsing.
If manually editing the file, ensure the correct Template.ica file (by default, there is one for each NFuse/Web Interface Web site). Open this file in a text editor and locate this line:
Address=[NFuse_IPV4Address]
Modify this line so that it reads:
Address=[NFuse_IPV4AddressAlternate]
NFuse_IPv4AddressAlternate: Retrieves the external (or public) IP address of the Citrix server hosting the published application. Recommended when using address translation (NAT) or accessing the Citrix server through the firewall.
NFuse/Web Interface will now work properly in a NAT environment.

http://Your Citrix/Citrix/MetaFrameXP/WIAdmin/default.asp

http://Your Citrix /Citrix/MetaFrameXP/WIAdmin/default.asp?action=natsettings

Change the setting to alternate address.

So that is it all I need, maybe this can help to save somebody some hassleàor else .

Thanks for your help and I hope this was helpful too.

Peter 

(in reply to papata)

Post #: 8

RE: Citrix Web clients problem - 3.Feb.2004 2:26:00 AM

papata

Posts: 83
Joined: 1.Feb.2004
From: London
Status: offline

Protocol Definition TCP 1494 IN-><-OUT
Rule Allow TCP 1494 IN-><-OUT
Map EXT Citrix TCP1494 -->Internal Citrix TCP1494
---
If XML Citrix Not Shared With IIS (80) check the port With NETSTAT
Execute the CTXXMLSS /?
See the switches and change them if needed
Make a protocol definition if needed
Rule Allow TCP XML PORT IN-><-OUT
Map EXT Citrix XML TCP PORT -->Internal Citrix XML TCP PORT
---
ALTADDR /?
Run ALTADDR /set <Internet IP address>
---
Restart the Citrix Server
---
Modify the Template.ica
Address=[NFuse_IPV4Address]
Modify this line so that it reads:
Address=[NFuse_IPV4AddressAlternate]
---
open
http://Your Citrix IP /Citrix/MetaFrameXP/WIAdmin/default.asp?action=natsettings
Change the setting to alternate address.
---
Telnet Check your Connection on all needed PORTS
---
Then Check your Clients...

(in reply to papata)

Post #: 9

RE: Citrix Web clients problem - 3.Feb.2004 7:50:00 PM