Allowing Citrix through WS1 vpn tunnel

[MichaelZ]

Hi,

I was wondering if any of you could give me some pointers on how to allow citrix and the published apps through the tunnel? So far I have allowed the store in Chrome and Edge and allowed the Citrix Workspace through the tunnel. I can successfully conect to Citrix through a browser but I cannot connect directly through the workspace app. Also I cannot launch apps from inside citrix.
I get an error that the selected resource failed to respond in time. If I set the tunnel into per-device mode everything works
 

[Andreano Lanusse]

@MichaelZ did you create the device traffic rules adding the Chrome and Edge apps for the specific domains you want to connect via Workspace ONE Tunnel?

In this case you want to connect through Tunnel Service on UAG, do you have all the ports and protocols open on your firewall to allow the Tunnel client to connect via UAG? This article explains the Tunnel communication flow and might help you https://techzone.omnissa.com/resource/understand-and-troubleshoot-tunnel-connections-load-balancing

 

 

[MichaelZ]

The tunnel as such works with the other apps. It's just Citrix that won't work. When the tunnel is in device mode Citrix works and I can start published apps. When in per-app mode selfservice.exe will not let me log in and I cannot start apps from browsers as well. I can connect to web based citrix as I have added the url to  our browser rules. But I cannot start apps as this is initiated by selfservice.exe. As this works in device mode I believe that selfservice.exe calls another app to actually connect and since this is not added the connection will fail.

So basically what I need is a list of the citrix apps to allow in the tunnel or a pfn

Edited 7 hours ago by MichaelZ