Go Premium for a chance to win a PS4. Enter to Win


External Citrix Access giving the Protocoll Driver Error

Posted on 2013-12-24
Medium Priority
Last Modified: 2013-12-27
Running environment we had power outage and everything came back up except for external access for remote users.

Internal citrix works fine. Working with Web Interface 5.4.

What services need to be running on the WI?
Question by:stoledog
LVL 11

Accepted Solution

Manjunath Sullad earned 2000 total points
ID: 39738875
You must increase the time for the Access Gateway to verify the STA ticket using the following procedure:
1. Increase the ticket timeout value in the web.config file on the Advanced Access Control server. The path to the file is:

2. Find lines 104-106 in the web.config file. The default setting for the CGP ticket time is 15 seconds (shown below):

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,15,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
3. Increase the expiration time from 15 to 85 or to something a bit more suitable for your particular environment. For example:

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,85,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
4. Save the web.config file and restart the Advanced Access Control services using the service configuration.

Refer below Citrix suggestions : http://support.citrix.com/article/ctx111064
LVL 24

Expert Comment

by:Dirk Kotte
ID: 39739355
good hints by manjusullad ...

if you use Citrix Secure Gateway (CSG) check if no other service is using port 443.
especially if SCG and IIS running at the same server.
often admins use the IIS to create the request for the certificate used by the CSG.
This enables SSl for the IIS default webpage and bind port 443 to the IIS.
... mostly without notice, because the CSG is running this time and all works fine if the new cert is imported and used by the CSG.
But if the server restarts the IIS often starts faster than the CSG service ... the result: you see the app-icons (IIS:Port443 TCP) but are unable to start the session (no CSG:port443 TCP).
LVL 12

Expert Comment

by:Daniel Borger
ID: 39740033
Check your STA servers.

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What if you have to shut down the entire Citrix infrastructure for hardware maintenance, software upgrades or "the unknown"? I developed this plan for "the unknown" and hope that it helps you as well. This article explains how to properly shut down …
Working from home is a dream for many people who aren’t happy about getting up early, going to the office, and spending long hours at work. There are lots of benefits of remote work for employees.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

963 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question