Bug ID 610125: Launching applications using Citrix HTML5 receceiver does not work in SSL offload mode

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP APM(all modules)

Known Affected Versions:
11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 12.1.3.2, 12.1.3.3, 12.1.3.4, 12.1.3.5, 12.1.3.6, 12.1.3.7, 12.1.4, 12.1.4.1, 12.1.5, 12.1.5.1, 12.1.5.2, 12.1.5.3, 12.1.6, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1

Opened: Aug 10, 2016

Severity: 3-Major

Related Article: K91727822

Symptoms

While launching the applications or desktops from Storefront UI using Citrix HTML5 receiver produces the following error "Citrix Receiver cannot reach the server".

Impact

Receiver for HTML5 cannot be used.

Conditions

APM is configured in Storefront integration mode with SSL offload (Only client side SSL is enabled). Enabled SSL/TLS for each VDA in Citrix environment.

Workaround

Use server side SSL as well on the virtual server to connect with SSL/TLS-enabled VDA. Otherwise, disable SSL/TLS on the VDA. Because the system does not use server side SSL on the virtual server, and VDA is enabled for SSL/TLS ICA connections, proxying plain ICA connections from APM to VDA is not supported.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips