Forum Discussion

Zdenda's avatar
Zdenda
Icon for Cirrus rankCirrus
Apr 02, 2016

Citrix StoreFront 3.5 not supported?

Hi! Latest Citrix iApp template f5.citrix_vdi.v2.3.0 does not support Citrix StoreFront 3.5 and we have problem to start citrix applications when published through F5 with this iApp template. Authentication done by LB works fine, but application does not start at all. This is probably related to connectivity and vdi profiles assigned to VIP. When these are removed from VIP it works, but client makes direct connection to Citrix servers through ICA protocol. But we want to publish Citrix vdi only through https VIP, does anyone know where can be problem? Maybe Citrix changed ICA protocol so rapidly that F5 no longer supports it till next iApp template?

 

application delivery
BIG-IP Access Policy Manager (APM)
iApps

2 Replies

  • Cody_Green's avatar
    Cody_Green
    Icon for Employee rankEmployee
    Apr 06, 2016

    Zdenda,

     

    F5 is working on certifying compatibility for StoreFront 3.5. Is this a new deployment or was this working previously with StoreFront 3.0?

     

    Cody

     

  • Zdenda's avatar
    Zdenda
    Icon for Cirrus rankCirrus
    May 11, 2016

    Update to this case:

     

    Our Citrix environment stopped working totally when we changed type from SSL offload to SSL bridging. We found out that LB does use port 443 on server side, but still sends user's requests in plaintext (GET requests is not encrypted, no SSL client hello sent to server).

     

    I tried to rebuild VIP via iApp template, or manually (add server ssl profile, change monitoring to https type, change server port to 443), but still same result, LB sends unencrypted traffic.

     

    Has someone same problem? For me it looks like clear bug.

     

    Software version - 11.5.2, iApp version - f5.citrix_vdi.v2.3.0