Core issue
The Citrix product allows a client to use applications running on a remote server as if they were running locally. The client keyboard, mouse and monitor are used for interaction with the applications, but the actual process happens on the server.
Independent Computing Architecture (ICA) is the protocol developed by Citrix for remote display. Metaframe XP is a Web-based application deployment system that provides users with access to Metaframe Applications through a standard Web browser with ICA.
The admin configures the Metaframe server (farm) with published applications. The applications are accessible by remote users with the proper access rights from their browsers. Citrix uses a TCP session when a published application is opened and intermingles different kinds of traffic in the same session. By default ICA uses TCP port 1494.
Currently, the VPN 3000 Concentrator supports these ICA clients:
- Web Client (ActiveX and Netscape Plug-in)
- Program Neighborhood Agent
- Program Neighborhood Client
- Java Client
Resolution
To configure Citrix MetaFrame support on the VPN 3000 Concentrator, these steps are required:
- Configure the basic parameters to define a group which will be used to connect to the concentrator.
- Enable Citrix Metaframe access for that group under WebVPN.
- Obtain an SSL certificate for the public interface to facilitate Web VPN users to connect.
Note: If the Citrix Java Web Client is to be used, JVM version 1.4.2_06 or later must be installed on the client workstation. In addition, the root certificate must also be installed in the JVM root certificate store. All other ICA clients only require that the root certificate be installed in the browser.
- Access Citrix-enabled terminal service resources through a clientless WebVPN session.
This requires no additional download from Cisco.
