I had a situation where I was have some clients that were getting ssl error 4 messages when connecting to a Citrix server that is behind my Check Point NG FP3 firewall. Clients were able to login to the Citrix box, but when attempting to run an application they would get the ssl error message. What made this difficult to troubleshoot is that it was not happening to all clients just some.
After researching this issue I found a possible solution which was to uncheck the "match for Any" in the advanced properties of the service objects for both the winframe (1494) and Citrix_STA (5783). Once the policy was reinstalled, the error went away. I understand that if the "match for Any" is selected that it indicates that the service will be included in the definition for the Any service. However, I did not have any rules before my Citrix rules where I had a drop for the Any service.
Any ideas on why this fixed my problem? Thanks.
_________________________________________________________________ Get a FREE online computer virus scan from McAfee when you click here. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
