F5 is upgrading its customer support chat feature on My.F5.com. Chat support will be unavailable from 6am-10am PST on 1/20/26. Refer to K000159584 for details.

Forum Discussion

Rod_Dreyer_1830's avatar
Rod_Dreyer_1830
Icon for Nimbostratus rankNimbostratus
Jan 17, 2015

After F5 authentication, Citrix desktop and storefront session shutting down

Infrastructure - F5 iApp w/Citrix Storefront servers and 2 Factor Authentication

 

Determined the issue below is only happening when authenticating via F5 frontend. If we authenticate via Storefront server URL, Citrix timeout works as document. Anyone having similar session timeout issue documented below? Is there F5 session timeout related settings that we can validate?

 

Issue: Authenticating via F5. After 20 minutes the citrix desktop and storefront session shuts down. After 17 minutes a 3-min countdown starts in the storefront browser. After 3 minutes the desktop session disappears and the browser windows displays a message “you have been logged out due to inactivity”.

 

If we bypass F5 and enter thru Citrix Storefront server, the countdown timer starts but the desktop session does not disappear after it expires. This is what we see in Citrix web insterfaceproduction (minus the countdown timer).

 

We created a test site Storefront site. After authenticating from the test site, the countdown timer starts but the desktop session does not disappear after it expires. We see similar behavior in our Citrix web insterface production minus the countdown timer.

 

Temporary workaround is to increase the Storefront session timeout to 24hrs to allow testers time.

 

Any support on F5 configuration settings would be appreciated.

 

Rod Dreyer

 

citrix
devops
iApps

3 Replies

  • Greg_Crosby_319's avatar
    Greg_Crosby_319
    Historic F5 Account
    Jan 19, 2015

    Hi Rod,

     

    was your f5 configuration done with an iApp or manually? If you used the latest iApp there is a question that controls apm's behavior to storefront session timeouts. The question reads: "Should the iApp remove the APM session when users log out of the Web Interface or StoreFront servers?". Try cahging the answer to "No....." and see if this resolves the behavior you are seeing. If this does not resolve it for you, there are 2 other profile idle timeout values to check. The APM policy itself has a default idle timeout value of 15 minutes which you can adjust and the TCP profile also has a idle timeout value of 15 minutes (30 if created by iApp) which you can adjust.

     

    • JG's avatar
      JG
      Icon for Cumulonimbus rankCumulonimbus
      Jul 26, 2017

      What exactly does the iApp do when you specify the answer to be "No"? Does it simply not add a URL to "Logout URI Include" as seen in the access profile configuration page?