Hi, I've got a real headscratcher here and am at a loss of how to resolve it.   We have an Active\Passive cluster of 2 SA4500's. A new Citrix web Interface setup has gone on using a web resouce with WSAM for access to a 'secure' citrix farm. This has worked flawlessly since it was put in, until the SA's failed over. When this happens, the end user can get into the web interface but when they try and launch an app, they get a message saying the resource is not availble. If I fail the SA's back to the original stance, the setup works again. As I'm not always availble to fail the SA's over when this occurs I could realy do with getting to the bottom of why this is happening. We have plenty of other Realms and Roles dealing with different Citrix setups but this is a new one on me.   I have rebooted the device that won't work with the resource but it has not made any difference.   Any help gratefully recieved.   Phil C ... View more

Hi All,   I have been tasked with using our corporate SA4500's to access another network domain which has been setup. The SA's reside on the corporate network and are used primarily for accessing the corporate resources. The new domain has been segragated off with there own AD etc and we would like to utilise the corporate SA's instead of purchasing another one for what is likely to be very limited traffic. I know we can configure the SA to do an LDAP query against the new domain, which will entail the opening of the fireall for port 389 and a route will need to be put in place between the networks. My question is, does anyone know of any best practises for this setup or does anyone know/see any potential risks/issues with this?   Any feedback will be gratefully recieved as I'm a bit doubtful about how this is going to work and worried about causing a potenial security risk.   Regards   Phil ... View more

Hi All,   I have been tasked to secure a Realm on our Juniper SA4500 cluster by invoking Hostchecker. My thoughts to set this up were to have the Hostcheker check for a specific txt file on the pc's HDD and if it wasn;t there, the user would have to call the Service Desk to request access and we can then record what machines are accessing the Realm.    I was hoping to create a new URL which fires up WSAM and runs a Session start script to run a basic bat file to copy a txt file from the server to the users machine, where they will then be able to log in as usual.   I cannot appear to get any script to run externally but it will run fine when running on the internal network and copied locally when the WSAM is running. I have now created a file share where the users can run the bat file when signed in but this isn't the way managment wanted it doing, as the staff members may then take the path where we are putting the txt file onto a number of machines.   I originally had access denied on the windows file share which I have now resolved for the bookmark but cannot see if this is the same issue with the session start script running.    My questions are:-   Could this be a permissons issue even though i have resolved the file share issue? Is there a specific way the bat file needs to be written? Does it require a time delay - if so - does anyone know the general command as this is going to run across a number of Windows OS's. I cannot even get it to run an echo text message!!   Any help, gratefully recieved.   Regards   Phil Colclough ... View more

Hi,   I have recently been tasked with setting Citrix access via our SA4500's as a proof of concept for our new Citrix environment and to prove all the required functionality will work instead of using a Netscaler.   I have successfully setup the Realm so that hostchecker checks if the device is corporate or personal, which works fine.   If the device is managed, they make a NC connection and the Web Interface opens up and everything works fine. The managed devices have Citrix Enterprise reciever installed, with the adm files loaded to enable SSO.   For personal devices, I have setup the 3 different ways of loading Citrix apps as bookmarks to enable the clients to decide how they want to procede:-   Custom ICA - Working Hosted Apps - Working   Both of these methods launch fine and SSO with no problems.   Web Interface using a Web Application Profile - Shows the applications but when any of them are selected we are just getting a black box in the centre of the screen. Occasionally we do see the Server 2008 sign in page and if we catch it quick enough, we are able to sign in and the application will load. I'm using CTS as we cannot leave a footprint on the end user PC.   How do I get the SA to pass thorough the credentials to the Citrix server?   After a bit of digging I have found references to adding State - state - LOGIN but this hasn't resolved the issue.   I'm also a bit confused re the Resource below Send the following data as a request headers, as when this is populated with the FQDN in the URL the web interface just loops and never shows the apps.   Any help or direction gratefully received.   Juniper SA4500 7.1r13 Web interface version: 5.4 XenApp version: 6.5   Phil           ... View more

Hi All, We currently have 2 SA4500's in a P\A cluster v8.0r1 and after a recent restructure have 2 clients. The cluster has 500 licenses and under the new licensing model, I understand we can purchase 500 more for the passive box, totalling the 1000max, with the same resiliance. My question is, is it possible that somewhere in the configuration it is possible  to direct Client A to node 1 and Client B to node 2 whilst retaining our current infrastructure? Each at the moment has 250 licenses but they are concerned that the other Client will be using there allocation etc and I need to let them know if this can be resolved now or investment will be required. Would a MAG be a viable option if there is no option with the SA's? Thanks in advance Phil Colclough Remote Access Officer ... View more