I think I've got it working now. It appears the ISA Firewall service needed to be fully stopped and restarted - I assumed the rule would work on the fly? rgds Paul -- Paul Hutchings Network Administrator Tel: 024 7635 5378, Fax: 024 7635 8378 mailto:paul.hutchings@xxxxxxxxxx -----Original Message----- From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx] Sent: 15 April 2002 09:07 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Allowing Citrix over SSL through ISA? http://www.ISAserver.org Hi Paul, check out http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=6;t=000682 HTH, Stefaan -----Original Message----- From: Paul Hutchings [mailto:PAUL.HUTCHINGS@xxxxxxxxxx] Sent: maandag 15 april 2002 9:39 To: [ISAserver.org Discussion List] Subject: [isalist] Allowing Citrix over SSL through ISA? http://www.ISAserver.org I have a Citrix Metaframe 1.8 (Windows 2000) server on my internal LAN behind ISA. Citrix has been configured to use the SSL Relay Service, on port 443. Internal use is no problem, however I can't figure out how to open ISA to allow access to the Citrix box? So far I've asssigned a dedicated IP to ISAs external NIC, setup a packet filter for port 443, and setup a Server Publishing Rule mapping the external IP to the internal IP of the Citrix box. I'm sure that the Citrix client is trying to make a connection on port 443 as I installed Zonealarm to monitor outoging connections - it just doesn't appear that ISA is letting it through. Running the Citrix SSL Relay in debug mode I'm not seeing any connections being made through ISA All of the white papers I've found on Citrix and ISA concentrate on the "standard" port of 1494 so I'm not finding much on SSL TIA Paul -- Paul Hutchings Network Administrator Tel: 024 7635 5378, Fax: 024 7635 8378 mailto:paul.hutchings@xxxxxxxxxx ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: stefaan.pouseele@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: paul.hutchings@xxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')