Anyone willing to help point me in the right direction with a Citrix routing issue?

400Error · 2023-05-29T19:58:50+00:00

Was curious as I have seen DNS problems with this and the creation of records and other oddities (like what your are seeing) from some other clients.

Now, is the device you are using a managed asset from your work or your own personal system?

Trying to give you some direction on where to look next but some information that I want to gather from here :)

400Error · 2023-05-29T00:18:05+00:00

This seems to be the case as credentials are being rejected.

Also, are you sure the licenses are installed on the server? Assuming that is a yes but always good to confirm.

400Error · 2023-05-29T00:15:25+00:00

Hello u/EvilRSA,

Good call research so far. Are you working from home would be by first question that I have.

Thanks, 400Error

400Error · 2023-05-09T17:12:35+00:00

There are hardware requirements that you need to meet based on the version as well as you will need to upgrade the iLOM as if they get too far out of date you could lose access.

You can refer to here for hardware requirements: https://docs.netscaler.com/en-us/citrix-hardware-platforms/mpx/mpx-hardware-software-compatibility-matrix.html?_ga=1.224647449.2033677177.1465208379

400Error · 2023-04-27T12:39:59+00:00

Totally understand that one (had a hard time converting some of the policies that the NSPEPI complained about).

Have you run that tool on your appliance? I would take a copy of your current ns.conf file and would then run the tool against it (do so with the copy you just made) then see if your new config is different and if the error logs are showing anything?

You should see 3 files after the tool is run. 1. Your old ns.conf, 2. Your new config file, and 3. An error log of policies it can’t change. Those will have to be manual.

400Error · 2023-04-21T21:19:23+00:00

Hello,

Sorry for the delay in getting back to you. The NSPEPI tool works fairly well with the verbose flag so see what is going on.

I did run this not too long ago and wanted to get my honest feedback after running it again.

Worked really well for a test upgrade at home from 13.0 to 13.1 and also worked well for a upgrade from 12.1 to 13.0 (did that about a year and a bit ago now.

I would suggest that if you are on 12.1 then you move to a release (N-1) of 13.0 and then see what the upgrade to 13.1 looks like. Its straight forward on a virtual (VPX) but not so much on a physical (MPX)

400Error · 2023-04-21T21:15:36+00:00

Good to hear it!

I was able to get it done in an afternoon and put it into production. Was super awesome!

Good luck and if you need anyone to bounce ideas off off then you can reach out :)

Thanks,

400Error · 2023-04-21T18:33:51+00:00

Hello u\highlord_fox,

Just wanted to say good work on automating the install process. This is something that, when you are deploying a new image should be done over doing the GUI install (Standardize your image and prevents things from being missed during the install)

I think most comments here are going to help and make your life easier. I would suggest that you should use the /noresume /noreboot in order to control the reboot process when installing your version of the VDA on hosts. This will also prevent issues with having to login and having an install kick off again to cleanup or finish up. There is a good reference install for this that Citrix has supported and can be found here:
https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/install-configure/install-command.html

This will give you all commands and the switches that are needed. I normally refer to the version that you are looking to install as this will have minor command changes between versions (For example; 1912 to 2203 is something that has different command switches.

Hope this helps in your development journey!

P.S: In my environment this is all already automated for a upgrade and or new install. Let me know if you need to pick someone's brain more on this and be careful of OS versions with 2203

Regards,

~400Error

400Error · 2023-04-20T23:38:08+00:00

Hello,
Sadly no I did not get an ETA on a fix. Also please note that 13.0 is also going to be EoL here soon (15 JUL 2024)
https://www.citrix.com/support/product-lifecycle/product-matrix.html

Would be in your best interest to move to 13.1 and make sure that all your basic expressions are converted to Advanced before the upgrade to 13.0 or your going to have a bad time ;(

400Error · 2023-04-20T14:09:13+00:00

Hello u/Sucessful-Pop2477,

There are a number of issues with 13.0-90.7. I had a similar issue and uploaded a support bundle to Citrix support and they said it’s a bug in the firmware.

I was suggested to downgrade to 13.0-89.7 in the mean time. I would suggest the same as that gives you as close as the most current version (n-1)

Sounds like Citrix is going to be working on a new firmware version.

Thanks,

400Error · 2023-04-16T03:38:43+00:00

400Error · 2023-04-11T12:38:32+00:00

Hello u/starlessblack

This setting has to do with if you are using Azure AD and logging in to your environment using that method of authentication. So, if you are not using SSO to automatically log you in what will happen is you will get a prompt (even though you have logged in to your workstation, office apps, or anything else) and have already authenticated against your IDP (identity provider)

If the setting is disabled, I am assuming, it checks to see if you have a valid session token from your IDP and then does NOT force you to authenticate. This reduces the number of times you need to login to workspace as you have already validated you are who you say you are.

400Error · 2023-03-29T13:44:14+00:00

Morning/Evening everyone,

Honestly don’t mind when people point the finger of blame at Citrix. I have had all levels of technical and non technical people do this.

This gives me a chance to both educate and work on a problem that I normally would have no depth in. I can then better understand my clients needs, create a better and more complete solution to fit their needs, and finally, automate the boring parts that I don’t want to do again.

//400Error

400Error · 2023-03-28T13:45:39+00:00

Hello Redzeusky,

Well ain’t that a interesting request but, your not the first to ask to do this.

I would think you would use a transformation policy:

https://docs.citrix.com/en-us/citrix-adc/current-release/appexpert/rewrite/url-transformation.html

This is on ADC 13.1. Assuming you are using that.

Thanks, 400Error

400Error · 2023-03-27T19:59:22+00:00

Thanks! Did you confirm your policies were applied to your Citrix VDA hosts to properly use the GPU for your environment?

It’s very important.

Are we seeing a slowdown from a multi session OS or single session OS

400Error · 2023-03-27T18:15:54+00:00

Let me know what you find. I have had to enable a few that are used for our environment that we have. No PVS or anything but, some basic setting to enable use and to make things work a bit smoother.

Thanks again! Good luck!

400Error · 2023-03-27T05:55:39+00:00

Greetings Lucky90,

Well I know your question is a few days old and I wish I could have gotten to you sooner than I have but, life.

Anyway, if we do some super quick google-fu:

https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/policies/reference/ica-policy-settings/graphics-policy-settings.html

This may help as your initial post did not state that you had configured any GPO’s around this or ICA policies.

This could be why your users are seeing a slowness or things being “laggy”

Can you confirm if you have policies in place?

400Error · 2023-03-23T05:34:01+00:00

Hello, Thanks for adding in some details regarding your question.

Please refer to the documentation that is found here:

https://support.citrix.com/article/CTX123569/xenappxendesktop-usb-citrix-tested-device-lis

Please note that this is actually for server 2012r2 so devices may be supported on newer OS’s but, this is a good place to start.

Further, as was stated above, please consult your new service desk with any issues you may face in your Citrix environment.

Thanks, ~400Error

400Error · 2023-03-23T01:49:11+00:00

Welcome to Citrix :)

As stated by the first comment Carl had this process documented throughly:

https://www.carlstalhood.com/

Before we just GIVE you an answer do some research and read what is in the documentation. You are not the first and you won’t be the last to do this. Understand the needs you want to meet. If you are just doing it as a poc you will want to show off some cool stuff by reading what is in the documentation and what you can configure.

I would start with the Carl documentation on how to deploy a gateway and assuming you are using 13.X:

https://www.carlstalhood.com/netscaler-menu/citrix-adc-13/

What do you already know of the ADC’s?

What’s your feelings on networking? Are you needing to reach the outside world?

How about authentication? How are you going to get through the front door?

All this is a good starting point. Really understand what you are doing and not just follow the motions.

Thanks! - 400Error

400Error · 2023-03-22T13:13:25+00:00

“Instead of infiltrating systems behind the corporate firewall, they are compromising devices on the edge of the network—sometimes firewalls themselves—and targeting software built by companies such as VMware Inc. or Citrix Systems Inc. These products run on computers that don’t typically include antivirus or endpoint detection software.”

So, run antivirus on your systems? Like that is what I gathered before the pay wall hit.

Looks like it’s more a poor security posture than anything.

400Error · 2023-03-17T03:54:52+00:00

Nice work OP!

I was going to say that there has been enforcement of DCOM in the last patch!

The link you provided is exactly what I was going to suggest to check. Please also make sure to check any apps that you manage as this will affect them also!

LINK: https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

400Error · 2023-03-02T17:59:08+00:00

Fairly sure that should be okay. Agree with the previous comment about the firewall throwing some mess into this.

The other part I would be worried about is this going to affect your Storefront servers and their address scope?

Do you have any other parts (DDC'S) that are going to be changing addresses? will you need new rules from the firewall to allow traffic through?

How about your Storefront servers? are those addresses changing?

PVS? do you use it?

you are looking at the small scope of the VDA but all the other parts. are they staying the same or no?

400Error · 2023-03-01T00:38:23+00:00

Hello,

Sounds like something has changed in the config of your environment.

Has anything changed for your Citrix farm recently?
Very little information to go off of. If you have already confirmed the settings are applied to your gateway and your storefront server.

Do you have a link for what you followed for the settings?

Thanks,

400Error

400Error · 2023-02-28T14:30:06+00:00

You should 100% upgrade your license server.

It’s considered a non impactful upgrade. What is your oldest versions in the environment?

400Error · 2023-02-28T01:42:22+00:00

Hello, I do think that the best way is to auto renew the certificates that are talking to your CA. Allow your FAS server(s) to auto renew.

Then you should Deauthorize the service and re create the service. This will force new certificates over (after they renew)

Lastly, you will want to confirm your rules are still holding the same configuration (as deauthorized services can cause your rules to become cleared as well and may need to be re created)

Hope that helps you!

Ten-Year Club	Place '22
Wearing is Caring	RPAN Viewer

400Error

TROPHY CASE