This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Citrix ICA

When I try to connect to my Citrix ICA server I get a popup error message " Firewall ERROR" Cannot connect to the Citrix server: Read Timeout.
I have entered the following services: 1494, 1604
I have DNAT configured from external to internal citrix server allowing the above ports. Anybody have an idea of why it is not allowing the connection?

This thread was automatically locked due to age.

Parents

0 ReD-MaN over 23 years ago

Have you allowed access to the ICA port of 1494 in your packet filter? You can not just set it up in DNAT, you also have to add it in the packet filter.

I know this because I have several working Citrix Metaframe 1.8 and XP servers behind Astaro. I only enabled port 1494 not 1604.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 ReD-MaN over 23 years ago

Have you allowed access to the ICA port of 1494 in your packet filter? You can not just set it up in DNAT, you also have to add it in the packet filter.

I know this because I have several working Citrix Metaframe 1.8 and XP servers behind Astaro. I only enabled port 1494 not 1604.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Gadget over 23 years ago in reply to ReD-MaN

redman,

Thanks for the reply, I have enabled port 1494 in DNAT also 1604, I have tried with just 1494 but either way I get the same result. "firewall error".
Cancel
Vote Up 0 Vote Down

Cancel
0 coronmang over 23 years ago in reply to Gadget

gadget,

just as redman said chek your packet filter under rules
Cancel
Vote Up 0 Vote Down

Cancel
0 Gadget over 23 years ago in reply to coronmang

coronmang,

Thanks for the reply, I had the config any - any any, howerver I have changed the configurations to be specific in the packet filter rules, from the internal network I am able to establish a ica connection to the firewall. I have not been able to test from a external site yet, hopefully you guys are right that specific entries must be placed in the packet filter rules.
Cancel
Vote Up 0 Vote Down

Cancel
0 Gadget over 23 years ago in reply to Gadget

Thanks for your help guys, I got it working, I deleted and recreated all the configurations, DNAT, Packet filter rules. Not sure why it was not working from the start though.
Cancel
Vote Up 0 Vote Down

Cancel