I seem to have Globalprotect working fine for access to any internal resource.
The one thing that does not seem to be working is the connection Citrix Receiver (PNAgent legacy version 13.3) makes to our internal Citrix Web Interface / Services site.
I'm getting the error "citrix receiver could not contact the server. please check your network connection"
I'm starting to think this is a Globalprotect issue, because:
- On the internal LAN everything is fine.
- Using an old style Windows VPN that terminates on one of our DC's, everything is fine.
The only difference with GP is that GP clients terminate at the firewall, so traffic has an extra route to the Citrix servers. - I can actually download the Citrix config.xml file over GP VPN. That's the file the Citrix client uses to find what resources are available.
- All related Citrix servers (portal, xenapp servers) are all reachable over GP. Name resolution is fine (both netbios and fqdn names).
- Policy is in testing phase, so everything between the GP zone and trusted zone is allowed.
Anyone recognise this ? Anything else I can try ?
