<div>
The CAG is sitting behind the firewall on our internal network. 
</div>


The CAG is sitting behind the firewall on our internal network.

<div>
<div class="content wysiwyg-content">
Right now we do not have Session Reliability enabled in Citrix and we are looking to turn this feature on but we are a little confused on what ports we need to have open on our firewall to make this work. Right now we have everyone connecting to the Client Access Gateway over port 443 and then accessing their applications. Do we need to make any changes on our firewall or do we need to make some internal changes to make this feature work? I know it says you need to have port 2598 open for session reliability so is it as simple as opening 2598 on the firewall?
</div>
</div>


Right now we do not have Session Reliability enabled in Citrix and we are looking to turn this feature on but we are a little confused on what ports we need to have open on our firewall to make this work. Right now we have everyone connecting to the Client Access Gateway over port 443 and then accessing their applications. Do we need to make any changes on our firewall or do we need to make some internal changes to make this feature work? I know it says you need to have port 2598 open for session reliability so is it as simple as opening 2598 on the firewall?

How to configure ports for Session Reliability in Citrix

Citrix is the synonym for the virtualization and application infrastructure systems developed by the company of the same name. Main areas are application virtualization, Software-As-A-Service (SaaS), cloud-computing and networking. The two most well-known are Citrix XenApp or Citrix CloudPlatform.

Citrix

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).