Solved

External Citrix Access giving the Protocoll Driver Error

Posted on 2013-12-24
3
2,026 Views
Last Modified: 2013-12-27
Running environment we had power outage and everything came back up except for external access for remote users.

Internal citrix works fine. Working with Web Interface 5.4.

What services need to be running on the WI?
0
Comment
Question by:stoledog
3 Comments
 
LVL 11

Accepted Solution

by:
Manjunath Sullad earned 500 total points
ID: 39738875
You must increase the time for the Access Gateway to verify the STA ticket using the following procedure:
1. Increase the ticket timeout value in the web.config file on the Advanced Access Control server. The path to the file is:

C:\Intepub\wwwroot\CitrixAuthService\Web.config
2. Find lines 104-106 in the web.config file. The default setting for the CGP ticket time is 15 seconds (shown below):

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,15,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
3. Increase the expiration time from 15 to 85 or to something a bit more suitable for your particular environment. For example:

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,85,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
4. Save the web.config file and restart the Advanced Access Control services using the service configuration.

Refer below Citrix suggestions : http://support.citrix.com/article/ctx111064
0
 
LVL 23

Expert Comment

by:Dirk Kotte
ID: 39739355
good hints by manjusullad ...

if you use Citrix Secure Gateway (CSG) check if no other service is using port 443.
especially if SCG and IIS running at the same server.
often admins use the IIS to create the request for the certificate used by the CSG.
This enables SSl for the IIS default webpage and bind port 443 to the IIS.
... mostly without notice, because the CSG is running this time and all works fine if the new cert is imported and used by the CSG.
But if the server restarts the IIS often starts faster than the CSG service ... the result: you see the app-icons (IIS:Port443 TCP) but are unable to start the session (no CSG:port443 TCP).
0
 
LVL 12

Expert Comment

by:Daniel Borger
ID: 39740033
Check your STA servers.
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Citrix XenDesktop 7.6 Citrix Policies Disable Peripherals
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now