RE: ICA

["Aaron Lewter" <alewter () mscfl com>]

I have enclosed the KB page from the Citrix Solution CD. You need to open a
few more ports.

Summary:
Successfull ICA browsing on segmented networks, WANS and the Internet
If the ICA clients are separated from the WinFrame servers with the
published applications by a router or a firewall (as is common on WAN or
Internet connections), UDP Port 1604 must be open in both directions in
order for the ICA clients to communicate with the ICA Master Browser on
remote subnets. In addition, TCP Port 1494 and the High Ports (i.e. TCP
Ports above 1023) must also be opened according to the specifications in the
tables below.

Aaron Lewter
Enterprise Consulting Group, MSC
954-424-8004*207
alewter () mscfl com
http://www.mscfl.com

-----Original Message-----
From: owner-firewall-wizards () lists nfr net
[mailto:owner-firewall-wizards () lists nfr net]On Behalf Of Stan Anderson
Sent: Thursday, August 26, 1999 5:14 PM
To: firewall-wizards () nfr net
Subject: ICA


I have an IBM eNetwork firewall V3.3.  I am trying to open up ICA(Citrix
Encryption).  I have opened TCP port 1494 and udp 1604, but I can't get
connected through the firewall.  I can connect over my LAN, so I know the
Citrix server, and Client are setup.  Is there anything I am missing, or can
someone offer me any advise.


        Thanks,

          Stan Anderson
          ICON Health & Fitness, Inc.
          (435) 750-7795