RE: Allowing Citrix over SSL through ISA?

  • From: Paul Hutchings <PAUL.HUTCHINGS@xxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 15 Apr 2002 09:09:16 +0100

I think I've got it working now.  It appears the ISA Firewall service needed
to be fully stopped and restarted - I assumed the rule would work on the
fly?

rgds
Paul

--
Paul Hutchings
Network Administrator
Tel: 024 7635 5378, Fax: 024 7635 8378
mailto:paul.hutchings@xxxxxxxxxx 

-----Original Message-----
From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx]
Sent: 15 April 2002 09:07
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Allowing Citrix over SSL through ISA?


http://www.ISAserver.org


Hi Paul,

check out
http://www.isaserver.org/cgi-bin/ultimatebb.cgi?ubb=get_topic;f=6;t=000682

HTH,
Stefaan

-----Original Message-----
From: Paul Hutchings [mailto:PAUL.HUTCHINGS@xxxxxxxxxx]
Sent: maandag 15 april 2002 9:39
To: [ISAserver.org Discussion List]
Subject: [isalist] Allowing Citrix over SSL through ISA?


http://www.ISAserver.org


I have a Citrix Metaframe 1.8 (Windows 2000) server on my internal LAN
behind ISA.

Citrix has been configured to use the SSL Relay Service, on port 443.

Internal use is no problem, however I can't figure out how to open ISA to
allow access to the Citrix box?

So far I've asssigned a dedicated IP to ISAs external NIC, setup a packet
filter for port 443, and setup a Server Publishing Rule mapping the external
IP to the internal IP of the Citrix box.

I'm sure that the Citrix client is trying to make a connection on port 443
as I installed Zonealarm to monitor outoging connections - it just doesn't
appear that ISA is letting it through.

Running the Citrix SSL Relay in debug mode I'm not seeing any connections
being made through ISA

All of the white papers I've found on Citrix and ISA concentrate on the
"standard" port of 1494 so I'm not finding much on SSL

TIA
Paul
--
Paul Hutchings
Network Administrator
Tel: 024 7635 5378, Fax: 024 7635 8378
mailto:paul.hutchings@xxxxxxxxxx

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
stefaan.pouseele@xxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
paul.hutchings@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: