External Citrix Access giving the Protocoll Driver Error

Posted on 2013-12-24
Last Modified: 2013-12-27
Running environment we had power outage and everything came back up except for external access for remote users.

Internal citrix works fine. Working with Web Interface 5.4.

What services need to be running on the WI?
Question by:stoledog
LVL 11

Accepted Solution

Manjunath Sullad earned 500 total points
ID: 39738875
You must increase the time for the Access Gateway to verify the STA ticket using the following procedure:
1. Increase the ticket timeout value in the web.config file on the Advanced Access Control server. The path to the file is:

2. Find lines 104-106 in the web.config file. The default setting for the CGP ticket time is 15 seconds (shown below):

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,15,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,15,600,true,true" />
3. Increase the expiration time from 15 to 85 or to something a bit more suitable for your particular environment. For example:

<add key="TicketProfile_SGC_HTTP" value="MULTIUSE,85,1200,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
<add key="TicketProfile_ICA_CGP" value="REVOLVING,85,600,true,true" />
4. Save the web.config file and restart the Advanced Access Control services using the service configuration.

Refer below Citrix suggestions :
LVL 23

Expert Comment

by:Dirk Kotte
ID: 39739355
good hints by manjusullad ...

if you use Citrix Secure Gateway (CSG) check if no other service is using port 443.
especially if SCG and IIS running at the same server.
often admins use the IIS to create the request for the certificate used by the CSG.
This enables SSl for the IIS default webpage and bind port 443 to the IIS.
... mostly without notice, because the CSG is running this time and all works fine if the new cert is imported and used by the CSG.
But if the server restarts the IIS often starts faster than the CSG service ... the result: you see the app-icons (IIS:Port443 TCP) but are unable to start the session (no CSG:port443 TCP).
LVL 12

Expert Comment

by:Daniel Borger
ID: 39740033
Check your STA servers.

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenDesktop 7.6 Citrix Policies Graphics
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
How to install and configure Citrix XenApp 6.5 - Part 1. In this video tutorial we have explained step by step installation of Citrix XenApp 6.5 Server on Windows Server 2008 R2 is explained in this video. We have explained the difference between…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question