{"id":5803,"date":"2013-11-27T16:05:10","date_gmt":"2013-11-27T15:05:10","guid":{"rendered":"https:\/\/ingmarverheij.com\/?p=5803"},"modified":"2013-12-10T08:56:27","modified_gmt":"2013-12-10T07:56:27","slug":"citrix-netscaler-applet-hangs-at-99-logging-in","status":"publish","type":"post","link":"https:\/\/ingmarverheij.com\/en\/citrix-netscaler-applet-hangs-at-99-logging-in\/","title":{"rendered":"Citrix: NetScaler applet hangs at 99% &ldquo;Logging in&rdquo;"},"content":{"rendered":"<p>When a Citrix NetScaler is configured using a graphical interface a browser is used to connect to the Citrix NetScaler. Starting NetScaler release 10 a part of the configuration is migrated from Java Applets to HTML5, but most configuration are still depending on Java Applets.<\/p>\n<p>When you open a more advanced configuration the Java Applet is loaded automatically., If it hangs at 1% \u201cDownloading Applet\u2026\u201d you might want to read <a href=\"https:\/\/ingmarverheij.com\/citrix-netscaler-hangs-downloading-applet\/\" target=\"_blank\">this article<\/a>.If it hangs at 99% \u201cLogging in\u201d <strong>continue reading<\/strong>.<\/p>\n<p><a href=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Logging-in1.png\"><img loading=\"lazy\" decoding=\"async\" style=\"margin: 0px auto; border: 0px currentColor; padding-top: 0px; padding-right: 0px; padding-left: 0px; float: none; display: block; background-image: none;\" title=\"Logging in\" alt=\"Logging in\" src=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Logging-in_thumb1.png\" width=\"354\" height=\"93\" border=\"0\" \/><\/a><\/p>\n<p><!--more--><\/p>\n<p>After loading the Java Applet and trying to log in the following error is raised.<\/p>\n<p><a href=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Login-Failed-No-Response-from-System.-Please-check-your-connection.-Connection-timed-out-conne.png\"><img loading=\"lazy\" decoding=\"async\" style=\"border: 0px currentColor; padding-top: 0px; padding-right: 0px; padding-left: 0px; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" title=\"No Response from System. Please check your connection. (Connection timed out: connect)\" alt=\"Login Failed - No Response from System. Please check your connection. (Connection timed out: connect)\" src=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Login-Failed-No-Response-from-System.-Please-check-your-connection.-Connection-timed-out-conne1.png\" width=\"354\" height=\"100\" border=\"0\" \/><\/a><\/p>\n<h1>\u00a0<\/h1>\n<h1>Diagram<\/h1>\n<p>In my case the Citrix NetScaler was placed in a different VLAN than my client was, the VLANs where separated by a firewall.<\/p>\n<p>What is good to know is that for the normal GUI\u00a0 communication is done via TCP port 80 for <strong>non-secure <\/strong>(HTTP) or TCP port 443 for <strong>secure<\/strong> (HTTPS). The Java Applet communicates uses different ports: TCP port 3008 for <strong>secure<\/strong> or TCP port 3010 for <strong>non-secure<\/strong> .<\/p>\n<p>&nbsp;<\/p>\n<p><a href=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Diagram.png\"><img loading=\"lazy\" decoding=\"async\" style=\"border: 0px currentColor; padding-top: 0px; padding-right: 0px; padding-left: 0px; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" title=\"\" alt=\"\" src=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Diagram_thumb.png\" width=\"354\" height=\"466\" border=\"0\" \/><\/a><\/p>\n<p><strong>Source<\/strong>: <a href=\"https:\/\/support.citrix.com\/servlet\/KbServlet\/download\/2389-102-654859\/CitrixPorts_by_Port_1103.pdf\" target=\"_blank\">Communication ports used by Citrix Technologies<\/a> [PDF]<\/p>\n<h1>\u00a0<\/h1>\n<h1>Port Query<\/h1>\n<p>To determine if your client could reach the port you can use Port Query GUI (provided by Microsoft \u2013 <a href=\"https:\/\/www.microsoft.com\/en-us\/download\/details.aspx?id=24009\" target=\"_blank\">link<\/a>). This standalone utility can verify if ports can be reached and tells you within seconds if this is the problem.<\/p>\n<ul>\n<li>Specify the destination IP or FQDN of the NetScaler IP (NSIP)<\/li>\n<li>Select query type <strong>Manually input query ports<\/strong>\n<ul>\n<li><strong>Ports to query<\/strong>: 80,443,3008,3010<\/li>\n<li><strong>Protocol<\/strong>: TCP<\/li>\n<\/ul>\n<\/li>\n<li>Click on <strong>Query<\/strong><\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>The query should return <strong>LISTENING<\/strong> for port 80+3010 for non-secure communication or 443+3008 for secure communication.<\/p>\n<p><a href=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Port-Query.png\"><img loading=\"lazy\" decoding=\"async\" style=\"border: 0px currentColor; padding-top: 0px; padding-right: 0px; padding-left: 0px; margin-right: auto; margin-left: auto; float: none; display: block; background-image: none;\" title=\"Port Query\" alt=\"Port Query\" src=\"https:\/\/ingmarverheij.com\/wp-content\/uploads\/2013\/11\/Port-Query_thumb.png\" width=\"354\" height=\"384\" border=\"0\" \/><\/a><\/p>\n<p>This example clearly shows that TCP port 3008 and 3010 are <strong>filtered<\/strong> by a firewall.<\/p>\n<p>&nbsp;<\/p>\n<p>&nbsp;<\/p>\n<p>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>When a Citrix NetScaler is configured using a graphical interface a browser is used to connect to the Citrix NetScaler. Starting NetScaler release 10 a part of the configuration is migrated from Java Applets to HTML5, but most configuration are still depending on Java Applets. When you open a more advanced configuration the Java Applet [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"site-container-style":"default","site-container-layout":"default","site-sidebar-layout":"default","disable-article-header":"default","disable-site-header":"default","disable-site-footer":"default","disable-content-area-spacing":"default","footnotes":""},"categories":[502],"tags":[613,612,503],"class_list":["post-5803","post","type-post","status-publish","format-standard","hentry","category-netscaler","tag-firewall","tag-java","tag-netscaler-2"],"_links":{"self":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/5803","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/comments?post=5803"}],"version-history":[{"count":7,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/5803\/revisions"}],"predecessor-version":[{"id":6028,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/posts\/5803\/revisions\/6028"}],"wp:attachment":[{"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/media?parent=5803"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/categories?post=5803"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ingmarverheij.com\/en\/wp-json\/wp\/v2\/tags?post=5803"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}