Actually, 1494 is TCP and 1604 is UDP.
Here's a section from a working config (the IP's, of course, have been
changed):
static (inside,outside) 206.214.103.61 10.1.1.17 netmask 255.255.255.255 0 0
conduit permit tcp host 206.214.103.61 eq 1494 any
conduit permit udp host 206.214.103.61 eq 1604 any
conduit permit tcp host 206.214.103.61 eq www any
The last line is for Nfuse.
HTH,
Randall
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Ciaron Gogarty
Sent: Monday, September 10, 2001 09:03 AM
To: [EMAIL PROTECTED]
Subject: RE: PIX & Citrix/nfuse access [7:18938]
I believe 1494 is upd and 1604 is tcp. One port is used for the browser
sservice and is udp. A search on NAT on the citrix site will provide a doc
and how to set up citrix for nat through a firwall
c
-----Original Message-----
From: Jeff Smith
To: [EMAIL PROTECTED]
Sent: 9/7/01 4:05 PM
Subject: Re: PIX & Citrix/nfuse access [7:18938]
I am pretty sure that Citrix uses port 1604 also.
>From: "[EMAIL PROTECTED]"
>Reply-To: "[EMAIL PROTECTED]"
>To: [EMAIL PROTECTED]
>Subject: Re: PIX & Citrix/nfuse access [7:18938]
>Date: Fri, 7 Sep 2001 10:23:19 -0400
>
>make a static mapping
>
>static (inside,outside)
>conduit permit tcp glbol ip add (citrix port ) 1494 i guess and 80 for
web
>
>shd work fine
>----- Original Message -----
>From: "Matthew Tayler"
>To:
>Sent: Friday, September 07, 2001 2:18 PM
>Subject: PIX & Citrix/nfuse access [7:18938]
>
>
> > Has anybody any experience on how I can allow remote workers using
> > Citrix/nfuse through a PIX to access internal servers please.
> >
> > I have tried using the notes from citrix but they cannot help
further
>and
> > all I get when making the connection is a long delay and timeout.
> >
> > The idea is our home workers go to the site home page and hit a link
>which
> > redirects them to the Citrix/nfuse server, where they login.
> >
> > I am not a Citrix expert and the in house Citrix guys are saying
that
>any
> > problems are on the PIX. They are talking about kicking PIX out and
just
> > using some freebi firewall from microsoft.
> >
> > Any help or config extracts would be appreciated
_________________________________________________________________
Get your FREE download of MSN Explorer at
http://explorer.msn.com/intl.asp
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=19313&t=18938
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
