What did he work on? Maybe switches\routing? Perhaps he has created problems by rearranging the uplinks or maybe a conflict with 10/100 vs Gb ports\switches\nics. Maybe ACLs created on routers or some other fudging. Had that happen recently at a site where jr. tech created loop by incorrectly placed uplink and same thing where the Citrix servers at that site where up and down till someone discovered the mistake. -----Original Message----- From: Matthew Shrewsbury [mailto:MShrewsbury@xxxxxxxxxxxxxxx] Sent: Thursday, March 23, 2006 1:36 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] Known ICA vulnerabilities? We had a Network Engineer leave (not on good terms) and since then I've been experiencing problems with our Citrix servers locking up. Maybe I'm just paranoid but the problem started happening right after he left and generally occurs between 10am and noon (never had problems before this). It doesn't happen everyday but has occurred on both of our servers (win2K SP4/PS4). The server seems to just go slow with no disk or CPU utilization. Are there any known ICA vulnerabilities? Both of these servers have port 1494 open facing the Internet. Any suggestions would be most helpful as I can't get on the server to diagnose when the problem occurs and all logs show things are normal. Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA Server+ Network Manager