Forum Discussion

mike_61529's avatar
mike_61529
Icon for Nimbostratus rankNimbostratus
Apr 15, 2009

Citrix Web Interface 5.1 with Firepass Web Applicaitons

Hi,

 

 

I'm attempting to publish a Citrix Web Interface 5.1 portal for Xen Desktop on my Firepass 4000 device (running 6.0.3, with latest hotfixes). I've followed the F5 metaframe deployment guide for using Citrix within Portal Access, however hit upon an issue that I can't currently get past.

 

 

I'm able to open the web access session and get presented my Citrix Web Interface logon, when I attempt a logon however I get the following error returned by the citrix server:

 

 

"Session Error

 

 

There is a problem with your session. For security reasons, you must close your browser window and log on again to continue accessing your published resources."

 

 

I've allowed cookies to be past through, however am unable to get any further with this issue, any help appreciated.
BIG-IP Access Policy Manager (APM)
remote access
security
  • dropkin_24659's avatar
    dropkin_24659
    Icon for Nimbostratus rankNimbostratus
    Sep 09, 2009
    Anyone have any suggestions? I am runing into the same issue.

     

     

    I suspect that it has soemthing to do with the facts that you need to authenticate tot he Web Interface. If the user loses the sticky sesssion, then the next Web Interface to pick up that user doesn't have the authentication.

     

     

    This does not seem to be a problem for the PN Agent because it is a thick apps that can refresh itself and resend authentication as needed?

     

     

    Thoughts? So what I do I do for me Web users?
  • woodpecker_1136's avatar
    woodpecker_1136
    Icon for Nimbostratus rankNimbostratus
    Nov 18, 2009
    We do have an same problem with BigIP LTM 10.0.1 using SNAT to the Citrix Web Interface connection
  • mike_61529's avatar
    mike_61529
    Icon for Nimbostratus rankNimbostratus
    Nov 24, 2009
    I was unable to ever solve this issue, as a work around I used a dynamic web application tunnel and set the WI server for explicit authentication. This works however users have to authenticate twice as I could never get pass-through auth working to a XenDesktop client, this is due to the XML brokers used to pass authtication through to the VDI client.

     

     

    The latest Citrix client release, 11.2, now seems not to function through a web app tunnel and as such the F5 device is effectively stopping an upgrade to XenDesktop 4. Because of this I'm now looking to migrate to a Citrix Access Gateway virtual appliance. The end users get a far better user experience, SSO, session reliability and no clunky activeX components. Seems a shame that F5 seem to have given up on these devices.