For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Greg_Crosby_319's avatar
Greg_Crosby_319
Historic F5 Account
Sep 15, 2015

XML traffic does not need to go through the BIG-IP since ICA traffic is not being controlled by BIG-IP with a LTM only deployment. Continue to use the iApp and place bogus information in the XML section. The iApp will create a XML VS and a pool which can be ignored. Point your clients to the webui virtual server the iApp creates and you should be able to communicate to web servers. With LTM only deployments, ICA traffic is going to come from Citrix client directly to app servers, so make sure your clients have access via tcp 2598/1494 to the application servers.

 

Greg_Crosby_319's avatar
Greg_Crosby_319
Historic F5 Account
Nov 23, 2015
LTM will not see ICA traffic unless you are routing the application servers network(s) through the BIG-IP. Try running Wireshark on your Citrix client to see what destination address is used to create ICA requests (TCP 1494/2598).