Forum Discussion

Jon-Michael_DeS's avatar
Jon-Michael_DeS
Icon for Nimbostratus rankNimbostratus
Apr 24, 2015

Connecting Android and iOS to Citrix StoreFront 2.6 through APM

I am running into the following issue. I currently have an F5 VPX using the APM iApp module for Citrix. I have a brand-new Xenapp 7.6 installation using the F5 as its gateway. Aside from the following issue, I have the APM successfully talking to the store front and it is able to broker connections successfully using Citrix Receiver on Windows and Mac OSX. However, any iOS and Android device are unable to do so. I have poured through the documentation for the module found here and haven't found an answer to this specific issue. The iApp is built with the default settings, which includes trusting connections on the XML listener found on the F5, the proper iRule that gets built automatically into the iApp to detect the client version, found here:

when ACCESS_ACL_ALLOWED {
 set type [ACCESS::session data get session.client.type]
 if { !($type starts_with "citrix") } {
 if { [HTTP::uri] == "/" } {
 log local0. "Redirecting to Web..."
 ACCESS::respond 302 Location "https://[HTTP::host]/Citrix/web/"
 }
 }
}

I have also verified the access policy to set ensure the Storefront URI Redirect object isn't there (and it wasn't put there by the iApp install to begin with).

When attempting to connect with the Android device, I have tried using the standard FQDN of the F5, I've tried using the /Citrix//discovery URI, as well as the legacy /Citrix//PNAgent/config.xml URI and none of these work. I get an error saying Could not Add Account.

When I run a tcpdump while connecting, I do see a great deal of traffic hitting the storefront through the F5 when I initially add the account, but when attempting to refresh or load any apps, the TCPDUMP shows no traffic, indicating to me that the F5 isn't allowing it through to the store front to populate apps into the client.

The logs inside the F5 show the following as well when attempting to connect:

2015-04-24 14:07:16
Received User-Agent header: CitrixReceiver%2f3.7.2%20Android%2f5.0%20LRX21T.G900TUVU1DOB1%20VpnCapable.
2015-04-24 14:07:16
Received client info - Type: CitrixReceiver Version: 1 Platform: Android CPU: unknown UI Mode: CitrixReceiver Javascript Support: 0 ActiveX Support: 0 Plugin Support: 0
2015-04-24 14:07:16
New session from client IP  (ST=Colorado/CC=US/C=NA) at VIP  Listener /Common/Citrix-StoreFront.app/Citrix-StoreFront_webui_https (Reputation=Unknown)
2015-04-24 14:07:16
**\N: Session deleted due to user inactivity or errors.**
2015-04-24 14:07:50
Session statistics - bytes in: 0, bytes out: 0

I also have source address persistence turned on, as this is the default setting for the module.

I am out of ideas on this one and I'm this close to submitting a ticket to get this resolved. Am I missing something or is this a bug with 11.6?

2 Replies

  • Unfortunately I haven't. Apparently the white page on the APM for Citrix module supports Android 4.4, but not 5.0 yet. I submitted a ticket to F5 and they said that. Is that the version of Android you're running?

     

    A decent, though no great workaround is to log into the site using the browser on your Android device. You can open the ICA file with the Receiver App on your phone and it works great.