This document describes the modifications to make to an ICA file to support connections when using the Citrix Extranet 2.0 client.
When using the Citrix Extranet 2.0 client, each client workstation acts as its own proxy server. Traffic that would ordinarily flow from the client directly to the MetaFrame server is instead proxied to TCP port 1080 on localhost, where it is encrypted and forwarded to the Citrix Extranet 2.0 server. The Citrix Extranet 2.0 server then unencrypts the traffic and forwards it to the internal MetaFrame server. Therefore, all client configurations must establish localhost (127.0.0.1) as a proxy server.
Note that all servers with which the ICA client is to communicate, including the address listed in TCPBrowserAddress= line and the MetaFrame server to which the client will be load balanced, must have appropriate permissions established in the Citrix Extranet Server Admin tool.
Beneath the [WFClient] section of the ICA file AND beneath the [Application Name] section of your ICA file, add the following lines:
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
Your ICA file should look something like this:
[WFClient]
Version=2
TcpBrowserAddress=10.9.1.1
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
[ApplicationServers]
Notepad=
[Notepad]
Address=Notepad
InitialProgram=#Notepad
DesiredColor=2
TransportDriver=TCP/IP
WinStationDriver=ICA 3.0
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
For NFuse 1.5 Web sites, these modifications need to be made beneath the [WFClient] section AND beneath the [[NFuse_AppFriendlyName]] section of Template.ica:
<[NFuse_setSessionField NFuse_ContentType=application/x-ica]>
<[NFuse_setSessionField NFuse_WindowType=seamless]>
[WFClient]
Version=2
ClientName=[NFuse_ClientName]
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
[ApplicationServers]
[NFuse_AppFriendlyName]=
[[NFuse_AppFriendlyName]]
Address=[NFuse_IPV4Address]
InitialProgram=#[NFuse_AppName]
DesiredColor=[NFuse_WindowColors]
TransportDriver=TCP/IP
WinStationDriver=ICA 3.0
<[NFuse_IFSESSIONFIELD sessionfield="NFUSE_ENCRYPTIONLEVEL" value="basic"]>
Username=[NFuse_User]
Domain=[NFuse_Domain]
Password=[NFuse_PasswordScrambled]
<[/NFuse_IFSESSIONFIELD]>
<[NFuse_IFSESSIONFIELD sessionfield="NFUSE_SOUNDTYPE" value="basic"]>
ClientAudio=On
<[/NFuse_IFSESSIONFIELD]>
[NFuse_IcaWindow]
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
[NFuse_IcaEncryption]
[EncRC5-0]
DriverNameWin32=pdc0n.dll
[EncRC5-40]
DriverNameWin32=pdc40n.dll
[EncRC5-56]
DriverNameWin32=pdc56n.dll
[EncRC5-128]
DriverNameWin32=pdc128n.dll
For NFuse 1.0 Web sites, these modifications need to be made beneath the [WFClient] section AND
beneath the [[NFuse_AppName]] section of Template.ica:
<[NFuse_setSessionField NFuse_ContentType=application/x-ica]>
<[NFuse_setSessionField NFuse_WindowType=seamless]>
[WFClient]
Version=2
ClientName=[NFuse_ClientName]
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
[ApplicationServers]
[NFuse_AppName]=
[[NFuse_AppName]]
Address=[NFuse_IPV4Address]
InitialProgram=#[NFuse_AppName]
DesiredColor=[NFuse_WindowColors]
TransportDriver=TCP/IP
WinStationDriver=ICA 3.0
<[NFuse_IFSESSIONFIELD sessionfield="NFUSE_ENCRYPTIONLEVEL" value="basic"]>
Username=[NFuse_User]
Domain=[NFuse_Domain]
Password=[NFuse_PasswordScrambled]
<[/NFuse_IFSESSIONFIELD]>
<[NFuse_IFSESSIONFIELD sessionfield="NFUSE_SOUNDTYPE" value="basic"]>
ClientAudio=On
<[/NFuse_IFSESSIONFIELD]>
[NFuse_IcaWindow]
ICASOCKSProtocolVersion=5
ICASOCKSProxyHost=127.0.0.1
ICASOCKSProxyPortNumber=1080
BrowserTimeout=10000
[NFuse_IcaEncryption]
[EncRC5-0]
DriverNameWin32=pdc0n.dll
[EncRC5-40]
DriverNameWin32=pdc40n.dll
[EncRC5-56]
DriverNameWin32=pdc56n.dll
[EncRC5-128]
DriverNameWin32=pdc128n.dll