SA2500 7.1r6 -> Windows 8 RDP and Citrix Proxy

[Kita_]

Dolsey,

Are you utilizing the CTS plug-in through the SA device?

[zanyterp_]

7.4R2 does not have the same fix for this issue (it was released prior to 7.3R5); but the same fix is expected to merge in the future. Do you have an environment to test 7.3R5?

[zanyterp_]

And the fix for _MS_ terminal services may not apply to Citrix terminal services (theoretically it should because they are proxied in similar manners & I believe I have received positive feedback on the same from others); but what we have been tracking/testing with internally is the Microsoft TS session.

[dolsey01_]

We are just using MS RDP, no Citrix.  I did confirm that diabling NLA in Win 8 on a wireless connection seems to fix the disconnects.  We only have 2-3 Windows 8 users at the moment so until the fix is available in a later release, we will continue to just have them disable NLA, I don't want to roll back our SA.

Thanks!

[nbe_]

As far as I can tell, the Citrix TS proxy still uses 127.0.0.3 on 7.3R5.  I had a few disconnects with Citrix when I was testing 7.3R5, but they didn't occur right away.  I still need to do more testing with it.  When can we expect the CTS client to be fixed as well?

[Kita_]

I am working on this issue and will update the thread accordingly when the release dates are confirmed.

[Kita_]

Any customers running into this issue with CTS that have a open case with JTAC.  Please post your case number or DM me.

[Kita_]

CTS issue is scheduled for 7.3R6 which is tentative for the last week of June.

[siwepo_]

We have the same issue with Windows 8 and JSAM or CTS Client. But juniper seems not to understand the issue. I have opened a ticket and juniper tells us that they cannot reproduce the issue. But it is so simpel to do it. Having a active Citrix session over JSAM Tunnel and just ping a host in the same subnet of your local workstation which is not responding.Sending this ping and the session freezes. It seems that the ARP Request brings the JSAM Tunnel to reset.

We have this issue by customers who are using printer management software to collect data from the printer. If the printer is offline the software tries to collect the and send a arp requests. this causes the JSAM to reset.

Can anyone agree to this procedure

[zanyterp_]

yes, it should be happening with JSAM & WSAM as well since they also use the loopback address for proxying traffic; however, as you mentioned it is not something we can replicate in-house.

when you say reset, do you mean that the communication starts over (but then doesn't complete, in the case of your printer management software) OR do you mean that the session acts as it is disconnected even though it shows as connected?

can you send me the case number, please?