on the pix make 2 conduit entries for tcp traffic on port 1494 and udp
traffic on port 1494. This will enable users to uses Citrix Program
Neigborhood to connect to the Citrix Server. If you want them to use
NFuse you have to have Citrix Service Pack 2 Installed (or the 3, the
newest SP) that supports XML. Then on the Web server that is going to
host NFuse install the NFuse application and uses XML port 80. When this
is done all you have to do at the PIX is make a conduit entry permitting
port 80 to the web server. I have done this many times like this and it
works great.
-----Original Message-----
From: Jeff Smith
Sent: Fri 9/7/2001 8:05 AM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: PIX & Citrix/nfuse access [7:18938]
I am pretty sure that Citrix uses port 1604 also.
>From: "[EMAIL PROTECTED]"
>Reply-To: "[EMAIL PROTECTED]"
>To: [EMAIL PROTECTED]
>Subject: Re: PIX & Citrix/nfuse access [7:18938]
>Date: Fri, 7 Sep 2001 10:23:19 -0400
>
>make a static mapping
>
>static (inside,outside)
>conduit permit tcp glbol ip add (citrix port ) 1494 i guess and
80 for web
>
>shd work fine
>----- Original Message -----
>From: "Matthew Tayler"
>To:
>Sent: Friday, September 07, 2001 2:18 PM
>Subject: PIX & Citrix/nfuse access [7:18938]
>
>
> > Has anybody any experience on how I can allow remote workers
using
> > Citrix/nfuse through a PIX to access internal servers
please.
> >
> > I have tried using the notes from citrix but they cannot
help further
>and
> > all I get when making the connection is a long delay and
timeout.
> >
> > The idea is our home workers go to the site home page and
hit a link
>which
> > redirects them to the Citrix/nfuse server, where they login.
> >
> > I am not a Citrix expert and the in house Citrix guys are
saying that
>any
> > problems are on the PIX. They are talking about kicking PIX
out and just
> > using some freebi firewall from microsoft.
> >
> > Any help or config extracts would be appreciated
_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
[EMAIL PROTECTED]
[GroupStudy.com removed an attachment of type application/ms-tnef which had
a name of winmail.dat]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19064&t=18938
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
