[THIN] Re: Connectopn problem with latest ICA client and PS 4 .0

  • From: "Lilley, Brian" <brian.lilley@xxxxxxxx>
  • To: "'thin@xxxxxxxxxxxxx'" <thin@xxxxxxxxxxxxx>
  • Date: Thu, 1 Dec 2005 14:34:53 -0000

yeah watchout people!  another gotcha with CGP wrapped ICA, i.e. session 
reliability over 2598, is that some SSL/Firewall/intermediate so-called 
transparent comms kit will happily take a session at 2598, but should you drop 
session reliability on the server side, for instance, stop the ima service then 
the citrix server will fallback to 1494, but the SSL/Firewall/intermediate 
device will stay waiting on 2598 and keep the 2598 conversation up (on the 
servers behalf).. for ever..  unless of course you turn of spoofed 
handshaking/keepalives/orwhatever it is that keeps the conversation up on the 
intermediate device..  I must admit that I haven't looked into this too deeply, 
i.e. we fixed why the servers were not responding on 2598 and never went back 
to address the acknowledgements/keepalives on the SSL box.. so never really got 
to the bottom of it.. anyway, be aware.. since I think it is fairly common 
practice for admins to kill imaserv on the fly (and session reliability is
dependent on imaserv)...



-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx]On
Behalf Of Jonny Tobiassen
Sent: 01 December 2005 14:21
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Re: Connectopn problem with latest ICA client and PS 4.0


thanks
So simple can it be. It was the option 'session relibility'. It seems to be
standard set on newer clients, and I didnt think of that :-)



best regards,
Jonny


                                                                       
             "Matthew                                                  
             Shrewsbury"                                               
             <MShrewsbury@COSC                                          To
             ANHOMES.com>              <thin@xxxxxxxxxxxxx>            
             Sent by:                                                   cc
             thin-bounce@freel                                         
             ists.org                                              Subject
                                       [THIN] Re: Connectopn problem with
                                       latest ICA client and PS 4.0    
             01.12.2005 14:30                                          
                                                                       
                                                                       
             Please respond to                                         
             thin@xxxxxxxxxxxx                                         
                     g                                                 
                                                                       
                                                                       




Could it be the 9.x client is trying to use session reliability on port
2598 and the 7.1 is using ICA on 1494? Maybe the 2598 port is not open on
the firewall?

Matthew Shrewsbury, MCSE+Internet MCSE 2000 CCA Server+
Senior Network Administrator

-----Original Message-----
From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On
Behalf Of Jonny Tobiassen
Sent: Thursday, December 01, 2005 8:19 AM
To: thin@xxxxxxxxxxxxx
Subject: [THIN] Connectopn problem with latest ICA client and PS 4.0

Hello all,

I have a problem driving me crazy:

I have an application set on Presentation Server 4.0 and Cisco PIX FW with
NAT.
Everything is configured  to work through FW.

When using old ICA client, in this case v 7.1, everythng workes fine. I set
up application set with TCP/IP and use alternate address. I find the
application set and can connect.
Problem is when using newest ICA client, v. 9.1. Exactly same settings. I
can find application set, but connection times out.

Error says: "There is no Citrix Metaframe configured on the specified
address". But it works great with client v. 7.1.

I dont understand what can be the problem.
Any ideas??


mvh
Jonny Tobiassen
Hålogaland IKT-Senter AS
Tlf. 770 42605


--
This message has been scanned for viruses and dangerous content by The
MailScanner at Halogaland IKT Senter, www.hikt.no, and is believed to be
clean.


************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************

--
This message has been scanned for viruses and dangerous content by The
MailScanner at Halogaland IKT Senter, www.hikt.no, and is believed to be
clean.





-- 
This message has been scanned for viruses and dangerous content by The 
MailScanner at Halogaland IKT Senter, www.hikt.no, and is believed to be clean.


************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************

==============================================================================
Please access the attached hyperlink for an important electronic communications 
disclaimer: 

http://www.csfb.com/legal_terms/disclaimer_external_email.shtml

==============================================================================

************************************************
For Archives, RSS, to Unsubscribe, Subscribe or 
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************

Other related posts: