378-1833 update and Citrix with IE

[rled]

Hello,

one of our customer has an issue with the last update, it break the access to Citrix 6.5 Server for users with Internet Explorer (8 or 9 same behavior), but no issue with Firefox.

They revert the Apps and Threats to 376-1817 update and now it works.

The problem seems to be caused by the added Spyware Signature ID 13371 in this update.

Are you aware of identical issues with the last update?

Regards,

Renan

[goku123]

Hi,

Does the Citrix server work with IE when you allow/alert for threat 13371 on content 378? If so, then please open a support case for investigation as a potential false positive.

[syseng]

We also saw this same issue.  Reverted to 377-1826 and resolved it.  Opened case 00143344.

[rled]

Ok, thank you guys, will ask customer to check  

And after I will open a case to have the confirmation and a corrected version for next update.

Regards,

Renan

[nthen]

We are having the same issue here.  launch.ica from our Citrix web application is being flagged as spyware under one of the new definitions 13373.  We reverted back to 387-1826 and the issue was resolved.

[cchristiansen · Accepted solution]

You can either disable that signature, or revert as others in this thread have done.  The content team is working on a fix and it should be in next weeks release.

-chadd.

[syseng]

I see Apps/Threats update 379-1840 was released yesterday.  Has anyone been able to confirm if this fixes this issue (Citrix on IE)?

Rick

[syseng]

I installed 379-1840 and retested.  All worked properly thru the PAN for Citrix traffic from Internet Explorer.