28-Mar-2018 23:49 - last edited on 02-Jun-2023 09:36 by JimmyPackets
I’m struggling getting to connect our Citrix 7.13 XenApp and XenDesktop farm through the BIG-IP using Citrix’s HTML5 receiver
I’m new to the F5 BIG-IP.
I can connect to the virtual server on the BIG-IP from within our internal network just fine! I can log on, my desktop is opened and all applications are available and I can start them all.
But whatever I do, when I start the session (HTML5 client) from the internet (home PC) I can log on but immediately get the message: ‘Citrix Receiver cannot create a secure connection in this browser. Please refer to Citrix Knowledge Center article CTX134123’. I do see all available applications, but when I try to start one of them I get the same error.
The Citrix article does not offer help.
I think some kind of network traffic isn’t working through the BIG-IP (because I don’t see this problem when I connect from the internal network)
I’ve implemented the iApp using with most default settings, except:
No, do not proxy ICA traffic and authenticate users with the BIG-IP
In Virtual Server for Web Interface or StoreFront servers:
Terminate SSL for clients, re-encrypt to Citrix servers (SSL bridging) The ip address that clients will use is the external ip BIG-IP (virtual Server) address The Citrix environment uses StoreFront 3.0 BIG-IP virtual servers are on the same subnet as the StoreFront servers
In Virtual Server for XML Broker or Desktop Delivery Controller (DDC) Servers:
BIG-IP virtual server in relation to your XML Broker or DDC servers? Same subnet for the virtual server and the XML Broker
In ICA Traffic:
How will ICA traffic travel between the clients and the ICA servers? BIG-IP system acts as gateway (router) to the ICA server network Which VLANs should accept ICA traffic? ICA traffic is allowed from all VLANs
I'v implemented the citrix html5 client bundle on the BIG-IP
Any help you can offer will be greatly appreciated! Kind regards, Paul
This is an older thread, unanswered so just for the sake of reference, there is https://support.f5.com/csp/article/K14803726 that may be the answer to this.