Juniper Citrix Terminal Services Client wont load in Intranet zone

[mtessier_]

We're having a strange issue that we are scratching our heads over. We have a realm set up specifically for contractors and vendors.This realm assigns a Web Application Profile that makes uses of the Non-Java ICA client with our internal Citrix web interface page (aka NFuse). It works very well.

The issue we're having is that when a vendor or contractor with a corporate PC connects to this realm, the Juniper Citrix Terminal Services client will not install or run. We have determined that when the VPN URL loads in IE as a "Local Intranet Zone" site, the Juniper Citrix client will not kick off.

If we force the VPN URL to load as an "Internet Zone" site, it works fine. Can anyone explain why this would be? If anything I'd expect the problem to be the other way around since "Internet Zone" is treated as less secure than "Intranet Zone" by IE.

[dcvers_ · Accepted solution]

This is an old KB on CTS load issues that may or may not help.

http://kb.pulsesecure.net/InfoCenter/index?page=content&id=KB18241&smlogin=true

For you it could be in the Intranet zone the site is automatically "Trusted".

[mtessier_]

This looks very promising.

Thanks, dcvers. I'll give this a shot.

[mtessier_]

Dcvers, your solution worked! Thank you.

There was a caveat though, which is why it took so long to confirm.

We found that the filter didn't actually take affect until it was disabled once and then re-enabled in the GUI. JTAC is investigating this quirk right now.

For anyone else out there that implements this fix be aware that JTAC recommended to modify the default filter URL to be more specific to our URL as opposed to the *.* that it contains.