Citrix Applications will not Launch
Error: An error has occurred while connecting to the requested resource
Greetings, I have 2 Citrix Farms (XenApp 6.0 & XenApp 6.5 with XenDesktops ) where I am using a single Web Interface with Citrix Secure Gateway to access both farms. When I logged onto either of the farms (externally) I can see a list of applications to choose from. When I click on any application it takes a few minutes and a error is return stating an error has occurred.
1. I am able to telnet to the Web Server (CSG) on port 80 & 443
2. I have NAT setup on the Firewall to allow Ports 1494 & 2598
3. There is an SSL certificate install on the CSG
4. I am able to launch the applications internally behind the firewall
5. Have all the latest hotfixes for both farms & CSG
6. Reviewed the checklist & articles from previous questions and websites
I have checked XenApp Servers (Worker Groups)
I have checked Firewall Settings (Open Ports)
I have checked CSG Settings (Configurations pointing to Data Collector)
I have checked License (No Issues)
Surely I must be missing something (there must be something simple)
Greetings, I have 2 Citrix Farms (XenApp 6.0 & XenApp 6.5 with XenDesktops ) where I am using a single Web Interface with Citrix Secure Gateway to access both farms. When I logged onto either of the farms (externally) I can see a list of applications to choose from. When I click on any application it takes a few minutes and a error is return stating an error has occurred.
1. I am able to telnet to the Web Server (CSG) on port 80 & 443
2. I have NAT setup on the Firewall to allow Ports 1494 & 2598
3. There is an SSL certificate install on the CSG
4. I am able to launch the applications internally behind the firewall
5. Have all the latest hotfixes for both farms & CSG
6. Reviewed the checklist & articles from previous questions and websites
I have checked XenApp Servers (Worker Groups)
I have checked Firewall Settings (Open Ports)
I have checked CSG Settings (Configurations pointing to Data Collector)
I have checked License (No Issues)
Surely I must be missing something (there must be something simple)
ASKER
Previously before using the CSG, I had the ALTADDR configure this is why the firewall is configured. Please note that the CSG is behind the firewall and not in the DMZ. Local Windows firewall is turned off and the Gateway settings ate configured to point to the CSG not Direct (Gateway Direct). Should it be Direct instead?
You need to undo all the altaddr stuff.
Follow this article I wrote:
http://carlwebster.com/learning-the-basics-of-xa5-fp3-for-windows-server-2003-and-xs-5-6-part-10-of-12/
Follow this article I wrote:
http://carlwebster.com/learning-the-basics-of-xa5-fp3-for-windows-server-2003-and-xs-5-6-part-10-of-12/
ASKER
Thanks Carl, after changing the Firewall settings to Direct I am able to get to launch the application but I get a different error message (see attachment). "Your app is not available; try again later"
I have checked the check the XenApp settings in the farm and ensure I have a Worker Group created. There is only one server in the Work Group to minimize if it is server related. I have also remove another application from the Worker Group and only place the server as the published application same issue (Full Desktop).
I have checked the check the XenApp settings in the farm and ensure I have a Worker Group created. There is only one server in the Work Group to minimize if it is server related. I have also remove another application from the Worker Group and only place the server as the published application same issue (Full Desktop).
What XML port are you using on your XenApp servers? Do you have the XML port specified in the web interface?
Worker Groups are flakey.
Worker Groups are flakey.
ASKER
Yes I do, I am using XML 8080 and have verified that is working properly. Also the ALTADDR was removed before I installed the CSG.
What makes the XenApp to display a 5000 or 7500 from time to time?
What makes the XenApp to display a 5000 or 7500 from time to time?
Are you talking about qfarm /load? If so, that is the load on the server when you ran the command (technically the last time the load was reported to the collector server being asked for the load numbers)..
ASKER
Yes, I checked DNS to ensure I do not have any resolution issue going on. Are there any hotfixes or service packs that I missing. In the attached screenshot I can access applications without any issues, truly there must be something going on with CSG/Web and the XenApp boxes.
Internal-App.png
Internal-App.png
Did you follow the article I linked earlier?
ASKER
Yes I did, I have a SSL Cert from Go Daddy and I am using IIS7 (Windows 2008 R2) as the Web Server OS. The certificate imported successfully and works fine. If the issue is IIS Port 444 vs. CSG Port 443 where do I change the post on IIS as posted (Figure 10-75)?
When you install the SSL cert you give it port 444 to use for SSL. That is what 10-75 is showing. Then CSG will use 443.
ASKER
At this point for test I will remove the cert and re-import it and assigning it the Port 444 to see if this works.
ASKER
I have re-added the cert, same issue. Also I ran the Citix CSG Diag and not error messages found. Surely there must be an easy way to fix this issue.
WHat errors are recorded on the WI/CSG server and the XenApp server?
ASKER
Sorry for late respond, there are no error messages in the event logs for either WI/CSG or XenApp Servers. I believe is a configuration error on the CSG in which I am not seeing, the firewall has the proper ports open. I am able to telnet to the web server from client (externally) to port 443.
The number one question is why can the external client recieved back applications from the CSG which is talking to the XenApp Servers.
The number one question is why can the external client recieved back applications from the CSG which is talking to the XenApp Servers.
ASKER
Carl Thanks for all your comments, this is my setup I have a single WI/CSG with SSL (combined on same server) behind the firewall (pix 501). The proper ports are open on the firewall (80 & 443 NAT to WI/CSG), I have 2 farms XenApp 6.0 & XenApp 6.5 (all hotfixes) using the single web interface.
I have see all published applications from both farms from the Citrix receiver externally and can successfully launch the applications internally. The main issue is that attempting to launch externally the applications are not available.
There are no error messages on the Wi/CSG or XenApp servers.
I have see all published applications from both farms from the Citrix receiver externally and can successfully launch the applications internally. The main issue is that attempting to launch externally the applications are not available.
There are no error messages on the Wi/CSG or XenApp servers.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes, I used this article to setup the WI and CSG. It is straight forward however I am not sure why I am getting this result.
ASKER
I found an application called Citrix Diagnostic Tool to help start the troubleshooting process.
ASKER
So I broke the Wi/CSG configuration and started over (Uninstalled Citix Web Interface & CSG), with just the WI installed and configure I am getting the same error message "Your App is Not Available, Try Again Later". I am only configuring one Citrix Farm at this time (XenApp 6.0). Default XML is 8080 for XenApp 6.0 and 80 for the external web (Not using the SSL Certificate at this time of testing).
http://carlwebster.com/learning-the-basics-of-xa5-fp3-for-windows-server-2003-and-xs-5-6-part-9-of-12/
This article walks you thru configuring altaddr to test external access.
This article walks you thru configuring altaddr to test external access.
ASKER
This may some like a dump question but what server (FQDN) needs to go in the Specify Secure Ticket Authority in the settings tab? Is this the Web Server that internal users connect to or the Data Collector that the XenApp Servers respond to?
The xenapp server that is the most preferred data collector.
ASKER
I was able to get AltAddr working so I know it is not a Firewall issue, I believe it is completely my CSG configuration (Has to be in the secure access). I cannot believe this is being more difficult than what it should be.
With AltAddr I was able to access published applications from both Citrix Farms, but with CSG I can only view them but when I click on them application is not available. I have gone over your entire document from end to end and not sure what I am missing. I will award you the points because you have been so helpful Carl Webster. Your documents are great!
With AltAddr I was able to access published applications from both Citrix Farms, but with CSG I can only view them but when I click on them application is not available. I have gone over your entire document from end to end and not sure what I am missing. I will award you the points because you have been so helpful Carl Webster. Your documents are great!
Thanks for the compliments.
I have never had an issue with CSG and accessing published resources.
My email address is in my profile. If you are allowed to, send me the external link when you get CSG installed and I will see if I can see anything amiss.
I have never had an issue with CSG and accessing published resources.
My email address is in my profile. If you are allowed to, send me the external link when you get CSG installed and I will see if I can see anything amiss.
In Web Interface, what is your Gateway setting set for? Should be Gateway Direct.