Citrix empieza a mostrar un poco de lo que viene y de lo que va a ser una de los diferenciadores que es la integración de Access Gateway y Branch Repeater (WanScaler)
Muchos ya conocen el Access Gateway, pero acá la diferencia es el desconocido de Branch Repeater
Que nos permite el Branch Repeater?
Además de estar diseñado para las nuevas tecnologías de Citrix de HDX de XenApp y XenDesktop
Este componente se encarga de acelerar cualquier aplicación TCP hasta 50x, reduciendo el tráfico hasta en un 95% de uso
No solo está diseñado para optimización de tráfico, sino también de servicios conocidos como file, print, DHCP, DNS, WINS, AD, DFS. Ideal para redes remotas con poco ancho de banda libre y con necesidades de optimización.
Integración con Access Gateway
http://support.citrix.com/servlet/KbServlet/download/20133-102-392566/Turbocharge_Access_Gateway_Reference_Architecture2.pdf
Branch Repeater
http://www.citrixlac.com/products/branch_repeater.php
[View:
|
Citrix License Server |
|||
|
License Manager Daemon |
TCP |
27000 |
Handles initial point of contact for license requests |
|
Citrix Vendor Daemon |
TCP |
7279 |
Check-in/check-out of Citrix licenses |
|
License Management Console |
TCP |
8082 |
Web-based administration console |
|
Common Citrix Communication Ports |
|||
|
Citrix Receiver |
TCP |
80/443 |
Communication with Merchandising Server |
|
ICA |
TCP |
1494 |
Access to applications and virtual desktops |
|
Session Reliability |
TCP |
2598 |
Access to applications and virtual desktops |
|
IMA |
TCP |
2512 |
Independent Management Architecture (IMA) |
|
Management Console |
TCP |
2513 |
Citrix Management Consoles |
|
Application / Desktop Request |
TCP |
80/8080/443 |
XML Service |
|
STA |
TCP |
80/8080/443 |
Secure Ticketing Authority (embedded into XML Service) |
|
XenApp |
|||
|
Offline Plug-in |
SMB |
445 |
Communication with Application Hub (File Server / Share) |
|
HTTP/S |
80/443 |
Communication with Application Hub (Web Server/ File Server / Share) |
|
|
Power & Capacity Management Agent |
TCP |
11161 |
Communication with Concentrator |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
XenDesktop Virtualization Infrastructure |
|||
|
XenServer |
TCP |
80/443 |
Communication with XenServer infrastructure |
|
Hyper-V |
TCP |
8100 |
SCVMM Administrator Console |
|
VMware |
TCP |
443 |
VMware Web Services communication |
|
Virtual Desktop Agent |
TCO |
8080 |
Communication between Desktop Delivery Controller and Virtual Desktop Agent |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
XenServer |
|||
|
XenCenter |
TCP |
22 |
SSH |
|
TCP |
443 |
Management using XenAPI |
|
|
TCP |
5900 |
VNC for Linux Guests |
|
|
TCP |
3389 |
RDP for Windows Guests |
|
|
Resource Pool |
TCP |
22 |
SSH |
|
TCP |
443 |
Management using XenAPI |
|
|
Infrastructure |
TCP/UDP |
123 |
NTP |
|
TCP/UDP |
53 |
DNS |
|
|
TCP |
389 |
Active Directory |
|
|
TCP/UDP |
139 |
ISO Store: NetBIOS Session Service |
|
|
TCP/UDP |
445 |
ISO Store: Microsoft-DS |
|
|
Lab Manager |
|||
|
End-Device to Lab Manager Server User Interface |
TCP |
8443 |
End device communication with Lab Manager Server User interface |
|
End-Device to Virtual Machines |
TCP |
3389 |
RDP for Windows Guests |
|
TCP |
5900 |
VNC for Linux Guests |
|
|
End-Device to Virtualization |
TCP |
5900 –5999 |
Connections for XenServer Host |
|
TCP |
2179 |
Connections for Microsoft Hyper-V |
|
|
VMAgent to Lab Manager Server |
TCP/UDP |
35110 - 35112 |
Server Discovery ports for VMAgent |
|
TCP |
8443 |
Secure (HTTPS) Server Discovery ports for VMAgent |
|
|
Lab Manager Server to Active Directory |
TCP |
389 |
LDAP |
|
TCP |
636 |
LDAP over SSL (LDAPS) |
|
|
StageManager |
|||
|
End-Device to StageManager Server User Interface |
TCP |
9443 |
End device communication with StageManager Server User interface |
|
End-Device to Virtual Machines |
TCP |
3389 |
RDP for Windows Guests |
|
TCP |
5900 |
VNC for Linux Guests |
|
|
End-Device to Virtualization Host |
TCP |
5900 – 5999 |
Connections for XenServer |
|
TCP |
2179 |
Connections for Microsoft Hyper-V |
|
|
VMAgent to StageManager Server |
TCP/UDP |
35110 - 35112 |
Discovery ports for VMAgent/GuestAgent Server |
|
TCP |
9443 |
Secure (HTTPS) Server Discovery ports for VMAgent/GuestAgent |
|
|
StageManager Server to Active Directory |
TCP |
389 |
LDAP |
|
TCP |
636 |
LDAP over SSL (LDAPS) |
|
|
StorageLink |
|||
|
StorageLink Service |
TCP |
21605 |
Communication of StorageLink Manager to StorageLink Service |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
NetScaler / Access Gateway Enterprise Edition |
|||
|
Administration |
|
|
|
|
SSH |
TCP |
22 |
CLI Administration (encrypted) |
|
HTTP/S |
TCP |
80/443 |
GUI Administration |
|
Java |
TCP |
3008 |
GUI Administration (encrypted ) |
|
TCP |
3010 |
GUI (no encryption) |
|
|
Authentication |
|
|
|
|
LDAP |
TCP/UDP |
389 |
LDAP connection |
|
TCP/UDP |
636 |
LDAP SSL connection |
|
|
TCP |
3268 |
LDAP connection to Global Catalog |
|
|
RADIUS |
TCP/UDP |
1812 |
RADIUS connection |
|
DNS |
TCP/UDP |
53 |
|
|
High Availability |
UDP |
3003 |
Exchange of Hello packets for communicating UP/DOWN status (heartbeat) |
|
TCP |
3008 |
Secure High Availability configuration synchronization |
|
|
TCP |
3009 |
Secure command propagation and MEP |
|
|
TCP |
3010 |
High Availability configuration synchronization plus web-logging and audit server logging |
|
|
TCP |
3011 |
Command propagation and MEP |
|
|
Access Gateway Standard / Advanced Edition |
|||
|
Client Connections |
TCP |
443 |
TCP Port used for connecting to an Access Gateway Deployment |
|
Advanced Access Control (AAC) |
TCP |
80/443 |
Communication between Access Gateway Standard and Advanced Access Control Server |
|
Administration |
|||
|
Appliance |
TCP |
9001 |
Administration Website |
|
TCP |
9002 |
Administrative Desktop (until 4.5) |
|
|
TCP |
9005 |
AAC |
|
|
AAC |
TCP |
2513 |
IMA-based communication |
|
Authentication |
|
|
|
|
LDAP |
TCP |
389 |
LDAP connection |
|
RADIUS |
TCP/UDP |
1812 |
RADIUS connection |
|
DNS |
TCP/UDP |
53 |
DNS name resolution |
|
Branch Repeater |
|||
|
Administration |
TCP |
80/443 |
Citrix Repeater Console |
|
TCP |
3389 |
RDP connection to server console (Windows) |
|
|
Appliance to Appliance |
TCP |
N/A |
Pass through of native application ports |
|
Client to Appliance |
TCP |
443 |
Client to Appliance communication |
|
EdgeSight |
|||
|
Agent |
TCP |
80/443 |
Communication with EdgeSight Server for payloads and alerts |
|
TCP |
9036 |
EdgeSight Agent internal communication (client-side database) |
|
|
Web Console |
TCP |
9035 |
Communication with RSCorSvc on EdgeSight Agent |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
EasyCall |
|||
|
EasyCall Client |
TCP |
8443 |
PSync |
|
EasyCall Gateway |
TCP |
5060 |
EasyCall Gateway communicates with the SIP trunk over port 5060 |
|
Admin Console |
TCP |
443 |
Administration of EasyCall |
|
LDAP |
TCP |
389 |
Active Directory/LDAP |
|
PBX |
TCP |
N/A |
The PBX port depends on the vendor and varies. |
|
Password Manager |
|||
|
Password Manager Service |
TCP |
443 |
Communication with Management Console and Password Manager Agent (non-IMA) |
|
Credential Store on Network File Share |
TCP/UDP |
445 |
CIFS |
|
TCP/UDP |
135 - 139 |
NetBIOS |
|
|
Active Directory |
TCP/UDP |
389 |
LDAP connection |
|
TCP/UDP |
636 |
LDAP SSL connection |
|
|
TCP |
3268 |
LDAP connection to Global Catalog |
|
|
TCP |
3269 |
LDAP SSL connection to Global Catalog |
|
|
Novell File Share |
TCP/UDP |
524 |
ZENworks communication |
|
Provisioning services |
|||
|
PXE |
Broadcast |
|
Target devices PXE booting from network |
|
DHCP |
UDP |
66 |
DHCP Option for TFTP Server Name (Bootstrap Protocol Server) |
|
UDP |
67 |
DHCP Option for Bootfile Name (Bootstrap Protocol Client) |
|
|
TFTP |
UDP |
69 |
Trivial File Transfer |
|
Console |
TCP |
54321-54322 |
SOAP Service |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
Streaming Services |
UDP |
6910 – 6930 |
Provisioning services Streaming Service |
|
Server Communication |
UDP |
6905 - 6909 |
Inter-server communication |
|
Boot Login |
UDP |
6910 |
Target Device logon at Provisioning services |
|
Write Cache |
UDP |
10802-10803 |
Target Device communication with its Write Cache |
|
SmartAuditor |
|||
|
Components (Agent / Player) |
TCP/UDP |
80/443 |
SmartAuditor components connecting to SmartAuditor Broker |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
|
|
|
|
|
Microsoft Message Queuing (MSMQ) |
|
|
Provides reliable transport of data from SmartAuditor Agent to SmartAuditor Server using an MSMQ private message queue named CitrixSmAudData |
|
MSMQ Service (default) |
TCP/UDP |
1801 |
MSMQ |
|
TCP |
2101 |
MSMQ-DCs |
|
|
TCP |
2103 |
MSMQ-RPC |
|
|
TCP |
2105 |
MSMQ-RPC |
|
|
TCP |
2107 |
MSMQ-Mgmt |
|
|
UDP |
3527 |
MSMQ-Ping |
|
|
TCP |
135 |
RPC |
|
|
MSMQ Service HTTP/S |
TCP |
80/443 |
Secured connections |
|
Workflow Studio |
|||
|
Console |
TCP |
8010 |
Connection to remote runtime |
|
Database |
TCP |
1433 |
Microsoft SQL Server |
|
Citrix Online Products |
|||
|
GoToMeeting |
TCP |
80/443/8200 |
Contacting GoToMeeting service broker using the Endpoint Gateway (EGW) |
|
GoToWebinar |
|||
|
GoToMyPC |
|||
|
GoToAssist |
|||
Ya van varios casos que veo que por motivos varios, como perdida del dominio, borrado de cuentas las granjas de Citrix quedan huérfanas sin administración.
Citrix Presentation Server como cualquier otro producto usa cuentas del dominio para su administración, en caso que por algún motivo perdamos esas cuentas o grupos o perdamos directamente conectividad con el dominio o peor todo el dominio entero, vamos a perder la administración de los Presentation Server.
Para evitar estos casos Citrix recomienda agregar a los administradores locales como administradores de la granja de Citrix. Pero en muchos casos por razones de seguridad no se puede.
En caso que perdamos las cuentas de administración de Presentation Server, Citrix recomienda la reinstalación del producto. Con lo que lleva horas e incluso días dependiendo de la cantidad de servidores y aplicaciones.
En estos casos donde la granja de Citrix queda huérfana de administración existe una herramienta llamada Slim Jim, que permite hackear la seguridad del DataStore de Citrix para borrar a todos los administradores y agregar a los administradores locales como administradores de Citrix.
Si bien esta herramienta no está soportada por Citrix en ningún caso. Funciona.
Aquí les dejo el link para bajarla Slim Jim
Slim Jim es simple, debemos copiarlo en la carpeta de Citrix\Independet Managament Arquitecture donde está el ODBC mf20.dsn el cual debemos usar para conectarnos a nuestro SQL o Access. En caso de Oracle debemos crear un ODBC con los driver de Microsoft Para Oracle.
Tenemos que tener las credenciales de acceso a la base de datos, y dar OK
Espero les sirva. Al menos a mi me ahorro mucho tiempo.
Si, Son cursos introductorios a las nuevas caracteristicas de Citrix XenDesktop 5.5 y Citrix XenApp 6.5, GRATIS,, solo h…
Esta disponible le Beta del Examen1y1-A20 Citrix XenApp 6.5 Administration para la certificación de CCA para XenAp…
Despues de dar el cansador examen beta 1y1-a20, ahora Citrix libera en beta el siguiente examen para XenApp 6.5 de Admin…
En la nueva versión de XenApp 6.5 existe una nueva opción para la configuración del servidor llamada session-host only q…
Les dejo una lista de Script para Hyper-V que les puede ayudar a tener informacion de los ambientes de las maquinas virt…
Les comparto un script creado por Nahuel Villar en PowerShell para crear un reporte en excel sobre los tipos de discos e…