Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 5630 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Transparent Proxy preventing Citrix from working

mule
Hello,

I'm using a Vasco token to remote connect to my work computer with an application called Citrix Web Access.
Basically, it's a browser applet that works as a remote control to my work computer. It uses Citrix ICA (port 1494).
This works from everywhere except from my home computer which is connected to an Astaro.

Turning off the Transparent Proxy solves the problem, but that's just a lead for the solution - Transparent Proxy is needed.
Tried adding the site to the exception list - no luck either.

Help much appreciated.


This thread was automatically locked due to age.
Parents
  • 0
    Hello,

    Turning off the Transparent Proxy solves the problem, but that's just a lead for the solution - Transparent Proxy is needed.

    Help much appreciated.


    Why is the Proxy (Transparent needed?)
    What is your Live log (Packet Filter) telling you or the HTTP Proxy log
    Do you use more computers at home (Static IP/DHCP?)
    How many Filter rules do you use.

    Can you try a Packet filter rule for Cirix ICA 1494
    Example:
    INternal pc (yours) -> Citrix ICA services -> Work Address ALLOW with LOG on!
  • 0 in reply to SilverOne
    Why is the Proxy (Transparent needed?)
    What is your Live log (Packet Filter) telling you or the HTTP Proxy log
    Do you use more computers at home (Static IP/DHCP?)
    How many Filter rules do you use.

    Can you try a Packet filter rule for Cirix ICA 1494
    Example:
    INternal pc (yours) -> Citrix ICA services -> Work Address ALLOW with LOG on!


    - The Proxy is needed since we have around 500 computers on the LAN.
    - About Live log Pack Filter - We'll try to run Citrix again soon and come back to you.
    - More computers? Yes, 500 DHCP.
    - Filter rules: (If you refer to Packet Filtering) 29 divided to four groups: LAN, WAN, DMZ1 and DMZ2. Contet Filter is off.

    Will come back to you about the packet filter rule for ICA.

    Thanks!
  • 0 in reply to mule
    Ok problem solved.

    Added the citrix sites to the exception of the tranparent proxy. Didn't know exactly where it was.

    Thanks!
  • 0 in reply to mule
    Nice running Mule....[:)]
  • 0 in reply to SilverOne
    Hmm... I could've sworn I'd posted the answer to this already (adding the site to the transparent skiplist)... you'll also see this same issue if, for example, one attempts to connect to certain SFTP sites... I've had to add those sites to the transparent skiplist for some of my customers.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to SilverOne
    Hmm... I could've sworn I'd posted the answer to this already (adding the site to the transparent skiplist)... you'll also see this same issue if, for example, one attempts to connect to certain SFTP sites... I've had to add those sites to the transparent skiplist for some of my customers.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data