SSL Error

[vipinvij]

We are using Metaframe Xpe with FR3.
Web-Interface 2.0, Secure Gateway 2.0 and STA all on three different servers along with the three different SSL Certificate.

Web-Interface and CSG server are sitting in DMZ and STA in our Corporate LAN.

Web-Interface Client 8.0.

Most of the remote users can connect to our Published Applications but FEW of our users are getting the following error message when they click on any publish app.

"Can't connect to the citrix metaframe server and there's no citrix SSL server configured on a specified address".

If the user try to ping to our CSG server on internet, from where they cant access these applications, it does resolve to its IP address.

These remote users who can't access publish app are behind the firewall and proxy server.

Have looked all the settings which i could think off, i still cant figure out why few users cant use publish app while majority of users can.

looking forward for a Solution.

Thanks in Advance.

regards
Vipin

 

[dimensionquest]

We've recently setup a similar environment and are experiencing this exact problem. Have you found a resolution to this yet?

Burke Azbill MCP+I, MCSE, MCSD, CNE, CCA, CCNA, LPIC-1

http://www.dimensionquest.net

http://www.dimensionquest.com

http://www.website-utilities.com

 

[dimensionquest]

You can disregard my post.. I just got it. It turned out that we didn't have https (port 443) open from our LAN to the DMZ. Once that was opened, the apps launch as they're supposed to

Burke Azbill MCP+I, MCSE, MCSD, CNE, CCA, CCNA, LPIC-1

http://www.dimensionquest.net

http://www.dimensionquest.com

http://www.website-utilities.com

 

[vipinvij]

We are getting closer. Once i have the solution. I will post that over here. I know, so many organisations are planning to Install CSG and getting similar type of error message.

regards

 

[vipinvij]

It turned out that we didn't have https (port 443) open from our LAN to the DMZ.

Is it on the client side or where the CSG is installed.

 

[dimensionquest]

Client side (LAN):

LAN --- DMZ --- Internet

From LAN --> DMZ we had to open 443. 443 was already open for remote (Internet) to the DMZ for access to the CSG server so that has been working fine all along.

Burke Azbill MCP+I, MCSE, MCSD, CNE, CCA, CCNA, LPIC-1

http://www.dimensionquest.net

http://www.dimensionquest.com

http://www.website-utilities.com