Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 28 subscribers
  • Views 8007 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Citrix disconnects after period of time.

Bill Gerth

I upgraded from pfsense to xg firewall.  Since I am getting constant disconnects on citrix connections.  Seems like some sort of idle timeout.  Not sure the amount of time, but happens all the time..  This happens to several different sites I manage.  Was wondering if anyone had any ideas for me?  For test put back in pfsense back in place issue gone.

I am running a quad processor with 8Gb ram.  Processor is about nil and memory is at 50%.  

thanks in advance.



This thread was automatically locked due to age.
Parents
  • 0

    Bill,

    are you using HTTPS decrypt and scan on your Firewall rule?

    IPS?

    More info on your configuration are needed.

    Thanks

  • 0 in reply to lferrara

    > We have multiple customers who are facing same issue, raised multiple TAC tickets but still issue persists. Heard about GES & CE team was working as well.

    > Mostly with UDP protocols stability issue is there, CR OS or SF OS.

    > Logs kept saying: timed out/RESET, which is not supposed to happen. Team was saying that remote server sends RESET packet (FYI: this only happens on CR & SF).

    > Team always needs live logs, which we are providing continuously. I would expect we should be able to troubleshoot from historical logs as well.

    > We have tried by applying DPI and bypassing DPI, removed all UTM profiles, kept rule on top.

    > If any alternate solution is there let us know.

Reply
  • 0 in reply to lferrara

    > We have multiple customers who are facing same issue, raised multiple TAC tickets but still issue persists. Heard about GES & CE team was working as well.

    > Mostly with UDP protocols stability issue is there, CR OS or SF OS.

    > Logs kept saying: timed out/RESET, which is not supposed to happen. Team was saying that remote server sends RESET packet (FYI: this only happens on CR & SF).

    > Team always needs live logs, which we are providing continuously. I would expect we should be able to troubleshoot from historical logs as well.

    > We have tried by applying DPI and bypassing DPI, removed all UTM profiles, kept rule on top.

    > If any alternate solution is there let us know.

Children