Please help with troubleshooting citrix connection.

Posted on 2007-04-06
Last Modified: 2012-06-27
Which other requirements have to be fulfilled apart from an ip-adress of the citrix server that can be pinged and that gives a proper reply ?

Do any ports have to be open for a working citrix connection ?
Question by:itbabe
LVL 36

Accepted Solution

Carl Webster earned 500 total points
ID: 18862930
Read this Using Firewalls with Metaframe article:!default.jspa?categoryID=118&entryID=2075

LVL 57

Expert Comment

by:Pete Long
ID: 18862943
Hello itbabe,

You need TCP port 1494 open to the citrix box - and if you are "Web accessing" the citrix box you will need TCP port 80 open as well :)


LVL 10

Expert Comment

ID: 18868344
itbabe, in addition to petelong's posting, port 2598 needs to be opened if you're using at least version PS3.  are you using nfuse/web interface?  are you having an issue connecting locally or through the internet?
LVL 19

Expert Comment

ID: 18879203
You can turn off Session Reliability and keep from opening 2598; with Secure Gateway you can open 443 and have the entire farm proxy through SSL.  You are passing cleartext data w/o Secure Gateway and SG is free (just buy an SSL cert).  
With just the Web Interface you would need port 1494-tcp for each Citrix server as well as 80 and 443 for the WI server.  
For a direct Citrix ICA connection from the Program Neighborhood you only need port 1494 (you must enable this in Citrix Connection Configuration).  
For a published app connection directly through your firewall you need 1494, your XML port (usually shared w/ IIS on port 80 if this is also a WI server).  

Everything but Secure Gateway can use Session Reliability and could need 2598; I think it is a stupid feature IMHO.  
LVL 19

Expert Comment

ID: 18879215
telnet from the outside to your Citrix server on port 1494 and look for the ICA Sounder ("ICA ICA ICA..."); this indicates you have a responsive listener on port 1494.  
Try a direct ICA connection to the server, if that works, try a Published App connection, then see if you can get to the Web Interface...where are you having issues?  Don't forget your Alternate Address, this must be set on each Citrix Server (except with Secure Gateway).  

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Citrix policies are the most efficient method to configure and tune XenDesktop environments, allowing organizations to control connection, security and bandwidth settings based on various combinations of users, devices or connection types.  Citrix …
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now