[THIN] Re: Citrix License Server - Firewall

Hi James,
 
Firstly, Citrix are now standardising on port 7279 for licensing server 11.5 
and above, and it's already a static port. If you are using earlier versions of 
the licensing server, use this port instead of 27001, or whatever. Less 
firewall work to worry about when you upgrade.
 
Secondly, you should read the licensing admin guides and whitepapers, as they 
explain in detail how it all works. The Citrix product first communicates with 
the licensing server on TCP 27000. Then depending on the VENDOR CITRIX options 
settings, it will determine what port to use from there. If this is not set, it 
will use a port in the range of 27001 to 27009.
 
Cheers,
Jeremy.

________________________________

From: thin-bounce@xxxxxxxxxxxxx on behalf of James Scanlon
Sent: Fri 20/03/2009 4:12 PM
To: Thin
Subject: [THIN] Re: Citrix License Server - Firewall



I have found this article http://support.citrix.com/article/CTX103356
It mentions changing the citrix daemon port which all seems easy enough, but 
what i dont understand is how the connecting server (requesting the license) 
knows the new port to it is to converse on?? or does the LMGRD send this detail 
after the initial contact?
 
Thanks again!
James
 
 

________________________________

From: joe.shonk@xxxxxxxxx
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Citrix License Server - Firewall
Date: Thu, 19 Mar 2009 22:03:38 -0700



Not sure about the AG, but the other products also connect on a high port.  
This can be set statically on the license server.

 

From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of 
James Scanlon
Sent: Thursday, March 19, 2009 9:59 PM
To: Thin
Subject: [THIN] Citrix License Server - Firewall

 

Greetings List Champions!
 
Hopefully here is another easy one.
We are trying to get our Access Gateway 4.5.7 to talk to our inside citrix 
license server.
 
Setup:
Internet Firewall > Access Gateway > DMZ Firewall > License Server
 
Naively I assumed that it would be as easy as opening TCP port 27000 on 
Firewall2 into the license server? End of story..
We have currently just opened TCP 27000 from AG to License Server without any 
success thus far...
 
Is there a reverse rule that will need to be allowed for the return traffic 
from the license server to the AG?
 
Cheers
James

________________________________

Explore the new Windows Live. Looking for a place to manage all your online 
stuff? <http://www.microsoft.com/australia/windows/windowslive/> 


________________________________

Find car news, reviews and more Looking to change your car this year? 
<http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2Ecom%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801459%2Fpi%5F1004813%2Fai%5F859641&_t=762955845&_r=tig_OCT07&_m=EXT>
  

#####################################################################################
Confidentiality and Privilege Notice 
This document is intended solely for the named addressee.  The information 
contained in the pages is confidential and contains legally privileged 
information. If you are not the addressee indicated in this message (or 
responsible for delivery of the message to such person), you may not copy or 
deliver this message to anyone, and you should destroy this message and kindly 
notify the sender by reply email. Confidentiality and legal privilege are not 
waived or lost by reason of mistaken delivery to you.
#####################################################################################

Other related posts: