TS Agent not working for Windows File Explorer

LeFwAdmins — Thu, 19 Dec 2019 14:03:26 GMT

Hi!

We found out, that it is not possible to track the user when he starts a Windows-File-Explorer via Citrix. Source-Port is used from the System-Context and not from the User-Context.

This behaivour is confirmed by Palo Alto, and it seems to be similar to

https://live.paloaltonetworks.com/t5/General-Topics/TS-Agent-no-port-mapping-when-using-windows-net-use/m-p/257607#M73083

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClkCCAS

So what I would like to know: Are we the only customers that try to provide a File-Explorer (also valid when e.g. opening files within Office-Products) via Citrix, trying to track the user using the TSA?

Wouldn't that be a base feature that should be provided and also tested before release of the product by Palo Alto as Vendor of the TSA?

At least such constraint should also be highlighted more clearly to the customers (e.g. directly in the white paper). As a user I would expect that such built in functionality of windows is also tested during the QA process.

It would be great if others could confirm that they have the same problem or suggest some workarounds. We really would like to avoid providing individual Terminal-Servers per User-Group accessing the server.

Kind Regards

Walter

Re: TS Agent not working for Windows File Explorer

Remo — Thu, 19 Dec 2019 19:13:02 GMT

Hi @LeFwAdmins

I (and I assume a lot more admins) had to learn this the hard way like you. Unfortunately so far this is a limitation by windows which so far cannot be changed ...

But I absolutely agree with you, this should be mentionned in a more obvious place rather than in a knowledgebase article which is not that easy to find ...

topic TS Agent not working for Windows File Explorer in General Topics

TS Agent not working for Windows File Explorer

Re: TS Agent not working for Windows File Explorer