Welcome to ISAserver.org

Client cannot start app.ica in a restricted site rule

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Client cannot start app.ica in a restricted site rule

Page: [1]

Message

<< Older Topic Newer Topic >>

Client cannot start app.ica in a restricted site rule - 30.Mar.2008 4:50:56 AM

yba02

Posts: 37
Joined: 7.Sep.2006
Status: offline

Hi,
Running ISA 2004 in a branch office. We also have Citrix Access Essentials in head office where clients from branches connect to a pool of applications. Everything works fine.
Recently, I have been asked to restrict users internet access during peak hours to the head office (HO) website only. And I've done just that.
I have a rule that allows the External network object of ISA access rules. In that rule, access is wide open and clients granted access through that rule can access the HO and start applications. I have created another rule in which I have defined only the HO website. In that rule, access is open and clients granted access through that rule can access the HO BUT CAN NOT start applications.
When an application is clicked, the system returns error message (not sure of exact wording at the moment):
The server you are connecting to is not accepting connections.
Once I shift the client to the rule where no website is restricted, it works fine again.

Any ideas guys?

Thanks
Yba.

Hint: The message returned is exactly the same message addressed by the article CTX107683 of Citrix. The only difference is that I have already applied that article and XML now has no problem in sharing port 80 with IIS. Moreover, in the case in question, the Citrix server log logs nothing when the application launch fails. Apparently, it is an ISA firewall issue. One last thing, if this hint is confusing, it might be safely ignored.