Citrix Reverse Proxy

[ozydave]

Evening

I have 1 public IP address.

I have setup apache2 on Ubuntu with a reverse proxy for 2 internal websites. One of which is moodle and the other is a Citrix web interface website with published applications.

 

Moodle is working, as it should.

It’s the citrix I am having problems with and where I need some help.

 

My external URL https://citrix.domain.com points to my reverse proxy which then goes to my citrix server. I get the citrix page displayed, can log in, and get the applications displayed, as it should.

 

When I then select one of the applications it fires up the ica client. Its then that the process hangs and finally errors with servername:1494 timeout

 

The ports on the County firewall are open 80,443,1494,2598 inbound and outbound. There is no firewall at the moment on the Ubuntu machine or the citrix machine. The apache ports config is listening on the ports as well.

 

I assume it the config of the reverse proxy with port 1494. Or is there a change I could make to Citrix. Citrix is not my strong point, its presentation server 4.5

 

Any pointers would be a great help

Cheers

[Ric_]

You need to set up Citrix Secure Gateway or Access Gateway so that all traffic is tunnelled over port 443. I also recommend disabling session reliability so that you won't need extra ports for that.

[ozydave]

Thanks for the response.

Can I setup the secure gateway on the same server that the web interface is installed on?

[Ric_]

Thanks for the response.

Can I setup the secure gateway on the same server that the web interface is installed on?

 

Yes you can... Ideally CSG and WI should be installed together in the DMZ and that machine should not be domain joined.

 

Reconfigure IIS to run on port 444 (disable port 80!) And run CSG on port 443.