Please help with troubleshooting citrix connection.

Which other requirements have to be fulfilled apart from an ip-adress of the citrix server that can be pinged and that gives a proper reply ?

Do any ports have to be open for a working citrix connection ?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Carl WebsterCommented:
Read this Using Firewalls with Metaframe article:!default.jspa?categoryID=118&entryID=2075


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Pete LongTechnical ConsultantCommented:
Hello itbabe,

You need TCP port 1494 open to the citrix box - and if you are "Web accessing" the citrix box you will need TCP port 80 open as well :)


itbabe, in addition to petelong's posting, port 2598 needs to be opened if you're using at least version PS3.  are you using nfuse/web interface?  are you having an issue connecting locally or through the internet?
You can turn off Session Reliability and keep from opening 2598; with Secure Gateway you can open 443 and have the entire farm proxy through SSL.  You are passing cleartext data w/o Secure Gateway and SG is free (just buy an SSL cert).  
With just the Web Interface you would need port 1494-tcp for each Citrix server as well as 80 and 443 for the WI server.  
For a direct Citrix ICA connection from the Program Neighborhood you only need port 1494 (you must enable this in Citrix Connection Configuration).  
For a published app connection directly through your firewall you need 1494, your XML port (usually shared w/ IIS on port 80 if this is also a WI server).  

Everything but Secure Gateway can use Session Reliability and could need 2598; I think it is a stupid feature IMHO.  
telnet from the outside to your Citrix server on port 1494 and look for the ICA Sounder ("ICA ICA ICA..."); this indicates you have a responsive listener on port 1494.  
Try a direct ICA connection to the server, if that works, try a Published App connection, then see if you can get to the Web Interface...where are you having issues?  Don't forget your Alternate Address, this must be set on each Citrix Server (except with Secure Gateway).  
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.