topic Re: communication with citrix in Network Security https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178545#M877163 <HTML><HEAD></HEAD><BODY><P>thks. Just tried your solution but its not going trough. if i use port scan, i still receive the message that the port is closed.</P></BODY></HTML> Tue, 27 Jan 2009 13:49:58 GMT lomuwagun 2009-01-27T13:49:58Z communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178543#M877159 <P>i needed to allow users to be able to connect to a remote citrix server. After allowing all the ports on my firewall, the port status is still showing blocked. below is an extract of my config</P><P></P><P>access-list outside_access_in extended permit tcp any eq citrix-ica any</P><P> </P><P>access-list outside_access_in extended permit udp any eq 1604 any</P><P></P><P>access-list outside_access_in extended permit tcp any eq 2598 any</P><P></P><P>how can i get this thing to work.</P> Mon, 11 Mar 2019 14:42:31 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178543#M877159 lomuwagun 2019-03-11T14:42:31Z Re: communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178544#M877161 <HTML><HEAD></HEAD><BODY><P>Hi</P><P>The above access-list will not allow you to initiate a citrix connection. please try the following.</P><P>access-list outside_access_in extended permit tcp any any eq citrix-ica</P><P></P><P>access-list outside_access_in extended permit udp any any eq 1604</P><P></P><P>access-list outside_access_in extended permit tcp any any eq 2598</P><P></P></BODY></HTML> Tue, 27 Jan 2009 11:25:58 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178544#M877161 Jithesh K Joy 2009-01-27T11:25:58Z Re: communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178545#M877163 <HTML><HEAD></HEAD><BODY><P>thks. Just tried your solution but its not going trough. if i use port scan, i still receive the message that the port is closed.</P></BODY></HTML> Tue, 27 Jan 2009 13:49:58 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178545#M877163 lomuwagun 2009-01-27T13:49:58Z Re: communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178546#M877165 <HTML><HEAD></HEAD><BODY><P>Your ACL is inbound on the inside interface, right?</P><P></P><P>Vlad</P></BODY></HTML> Tue, 27 Jan 2009 14:54:59 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178546#M877165 hunnetvl01 2009-01-27T14:54:59Z Re: communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178547#M877169 <HTML><HEAD></HEAD><BODY><P>Something else:</P><P>How do you use the port scan&gt;</P><P>Did you check that there is no windows firewall enbled on the PCs?</P></BODY></HTML> Tue, 27 Jan 2009 15:07:14 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178547#M877169 hunnetvl01 2009-01-27T15:07:14Z Re: communication with citrix https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178548#M877171 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P> Could you please refer the below link &amp; open corresponding ports depending on your environment. As Hunnet said in the prevoius conv, can u confirm that the you are doing the port scan from right direction?</P><P><A class="jive-link-custom" href="http://www.dabcc.com/article.aspx?id=1755" target="_blank">http://www.dabcc.com/article.aspx?id=1755</A></P><P></P><P>regards</P><P>Jithesh </P></BODY></HTML> Wed, 28 Jan 2009 04:53:56 GMT https://community.cisco.com/t5/network-security/communication-with-citrix/m-p/1178548#M877171 Jithesh K Joy 2009-01-28T04:53:56Z