+ Post New Thread
Results 1 to 4 of 4
Internet Related/Filtering/Firewall Thread, Citrix Reverse Proxy in Technical; ...
  1. #1
    ozydave's Avatar
    Join Date
    Jun 2007
    Posts
    248
    Thank Post
    71
    Thanked 34 Times in 23 Posts
    Rep Power
    31

    Citrix Reverse Proxy

    Evening
    I have 1 public IP address.
    I have setup apache2 on Ubuntu with a reverse proxy for 2 internal websites. One of which is moodle and the other is a Citrix web interface website with published applications.

    Moodle is working, as it should.
    Itís the citrix I am having problems with and where I need some help.

    My external URL https://citrix.domain.com points to my reverse proxy which then goes to my citrix server. I get the citrix page displayed, can log in, and get the applications displayed, as it should.

    When I then select one of the applications it fires up the ica client. Its then that the process hangs and finally errors with servername:1494 timeout

    The ports on the County firewall are open 80,443,1494,2598 inbound and outbound. There is no firewall at the moment on the Ubuntu machine or the citrix machine. The apache ports config is listening on the ports as well.

    I assume it the config of the reverse proxy with port 1494. Or is there a change I could make to Citrix. Citrix is not my strong point, its presentation server 4.5

    Any pointers would be a great help
    Cheers

  2. #2

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,596
    Thank Post
    109
    Thanked 764 Times in 595 Posts
    Rep Power
    181
    You need to set up Citrix Secure Gateway or Access Gateway so that all traffic is tunnelled over port 443. I also recommend disabling session reliability so that you won't need extra ports for that.

  3. Thanks to Ric_ from:

    ozydave (12th April 2013)

  4. #3
    ozydave's Avatar
    Join Date
    Jun 2007
    Posts
    248
    Thank Post
    71
    Thanked 34 Times in 23 Posts
    Rep Power
    31
    Thanks for the response.
    Can I setup the secure gateway on the same server that the web interface is installed on?

  5. #4

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,596
    Thank Post
    109
    Thanked 764 Times in 595 Posts
    Rep Power
    181
    Quote Originally Posted by ozydave View Post
    Thanks for the response.
    Can I setup the secure gateway on the same server that the web interface is installed on?
    Yes you can... Ideally CSG and WI should be installed together in the DMZ and that machine should not be domain joined.

    Reconfigure IIS to run on port 444 (disable port 80!) And run CSG on port 443.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 0
    Last Post: 2nd November 2007, 09:58 AM
  2. Reverse proxying SSH...
    By Joedetic in forum Wireless Networks
    Replies: 7
    Last Post: 6th August 2007, 11:56 AM
  3. Reverse Proxy and Moodle
    By wesleyw in forum How do you do....it?
    Replies: 3
    Last Post: 11th June 2007, 01:49 PM
  4. Reverse Proxying with Apache.
    By maniac in forum Web Development
    Replies: 7
    Last Post: 5th April 2007, 11:04 AM
  5. reverse proxy ajax apps
    By CyberNerd in forum Web Development
    Replies: 3
    Last Post: 15th June 2006, 07:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •