I have a problem with Citrix dropping connections when going through the CSS.
I am just doing a L3 content and the CAG is handling all the SSL.
I have set the flow-timeouts and verified that flows are NOT timing out with a show flows.
I have enabled tcp fragments. Otherwise the config is very simple. Just two CAGs with a VIP to load balance.
When I go through the CSS, the connections are dropped after about 1 1/2 hours. The client side appears to issue a "FIN" Packet to close out the connection.
However, when we bypass the CSS, we DO NOT get this behavior.
Has anyone seen this or have any suggestions?
