Citrix clients fail to connect with Web Traffic Redirection

Products

• Endpoint Protection
• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Citrix Receiver client, and Citrix Workspace connections fail when the computer is configured to use the Web Security Service (WSS) through the Symantec Endpoint Protection (SEP) client Web Traffic Redirection (WTR) feature.

Cause

Citrix client connections sent through the WSS via WTR contain authentication header information that the Citrix server may reject.

Resolution

There are multiple solutions for this problem. The solution you choose to implement will depend on your organization's policies and preferences. To allow Citrix Receiver and Citrix Workspace clients to connect on computers running SEP WTR do one of the following:

1. Configure the Citrix client to ignore Windows proxy settings. For more information, see How to configure Receiver to not use proxy settings set up on IE
2. Use the LPSFlags.exe tool to reconfigure the SEP client's proxy.pac file to bypass the Citrix client traffic. For more information on the LPSFlags.exe tool see Bypass Endpoint Protection Web Traffic Redirection using LPSFlags.exe