ICA Nfuse Problem

S

srivathsan.a

Hi all

When Citrix ICA 8.1 / 8.0 is installed in the SP2 image there is a
problem in the NFuse web interface when accessing a published
application through it. I got a messagebox "Your security settings do
not allow this file to be downloaded".
All the settings of the internet explorer are set to default as in the
TD.
This is not in the case of the SP1 (with exactly same configuration)
and in the XP pro with SP2.
Also i found that when the following changes in the security settings
of local intranet solves the problem
-> Uncheck the "Include all local (intranet) sites not in other zones"
-> Uncheck the "Include all the sites that bypass tge proxy server" if
a proxy server is configured.
But the server in which the Published application is present is a local
intranet server.
Why is this behaviour?
Help me out.
Thanks
Srivathsan.A
 
S

Srivathsan

Hi

There is a add-on to this problem i also installed the same in the XP
Pro emulation ( Which i constructed by upgrading the KM's XPpro
emulation.sld and clearing the dependancies of the SP2) there also the
problem exists.

I think there is a problem with IE SP2 in the full SP2???

This is not the case of the WINDOWS XP PRO SP2..
Did any body tried this out...
Regards
Srivathsan.A
 
K

KM

Srivathsan,

Could you describe the exact problem? It was not clear to me what issue you are trying to resolve.

Please keep in mind that Service Pack 2 tightens the security settings that relate to executing active content in local files in
Internet Explorer. There were also some other changes in other security zones to tighten the security settings.

KM
 
G

Guest

Hi

This is my exact problem
We have a SP1 image, which we upgraded to SP2 By adding only the SP2
specific dependencies like (Resource DLL's etc) and installed Citrix ICA 8.1.
Everything is working fine except a problem in the NFuse web interface when
accessing a published application.
Even though all the settings of the Internet explorer are set to default as
in the TD,
I got a messagebox "Your current security settings do not allow this file to
be downloaded".


Also i found that when the following changes are made in the security
settings of local intranet zone solves the problem
-> Uncheck the "Include all local (intranet) sites not in other zones"
-> Uncheck the "Include all the sites that bypass the proxy server" (if a
proxy server is configured.)
Following changes are made in the Internet Zone
-> Change the settings to the Medium.

But the server in which the Published application is present is a local
intranet server.(Within the subnet)

As per my studies the IE is not at all detecting the intranet Addresses and
considers it as the Internet addresses.

Also my observations on the other trials with default settings in the
Internet explorer as in TD.

_____________________________________________
s/N Image Observation
_____________________________________________
1. XP SP2 Working
2. XPe SP2 Not Working
3. XP Pro Emulation SP2 Not Working
4. XPe SP1 Working
_____________________________________________


What should I do to get rid of this problem???

Srivathsan.A
 
G

Guest

Hi
// (I think there is a problem with google today)
This is my exact problem

We have a SP1 image, which we upgraded to SP2 By adding only the SP2
specific dependencies like (Resource DLL's etc) and installed Citrix ICA 8.1.
Everything is working fine except a problem in the NFuse web interface when
accessing a published application.
Even though all the settings of the Internet explorer are set to default as
in the TD,
I got a messagebox "Your current security settings do not allow this file to
be downloaded".


Also i found that when the following changes are made in the security
settings of local intranet zone solves the problem
-> Uncheck the "Include all local (intranet) sites not in other zones"
-> Uncheck the "Include all the sites that bypass the proxy server" (if a
proxy server is configured.)
Following changes are made in the Internet Zone
-> Change the settings to the Medium.

But the server in which the Published application is present is a local
intranet server.(Within the subnet)

As per my studies the IE is not at all detecting the intranet Addresses and
considers it as the Internet addresses.

Also my observations on the other trials with default settings in the
Internet explorer as in TD.

_____________________________________________
s/N Image Observation
_____________________________________________
1. XP SP2 Working
2. XPe SP2 Not Working
3. XP Pro Emulation SP2 Not Working
4. XPe SP1 Working
_____________________________________________


What should I do to get rid of this problem???

Srivathsan.A
 
S

Srivathsan

Hi

Here is my problem explained in detail.
Could you describe the exact problem? It was not clear to me what
Click to expand...
issue you are trying to resolve.

I have a SP1 image which i recently upgraded to SP2 clearing
all the SP2 Specific dependancies (Like SP2 Resource DLL's etc..). In
the SP2 image we installed the Citris ICA Client 8.1, every thing
worked fine except the Citrix NFuse Web Interface, in which the problem
occured

The problem is when trying to access the published applications through
the NFuse ,
(NFuse is the IE based plugin the access the Published
Applications )
the following message box appears "Your current security settings do
not allow this file to be downloaded."

Also i found that when the following changes in the security settings
of local intranet zone are made, All the problem gets solved.
-> Uncheck the "Include all local (intranet) sites not in other zones"
-> Uncheck the "Include all the sites that bypass tge proxy server"
(if a proxy server is configured)
-> Change the Security settings of the Internet Zone to MEDIUM.

When I Studied on these facts I found that when the above said changes
are made all the Local addresses (which has the Medium Security by
default ) will be treated as the Internet Addresses (With High Security
By Default). That's why the the 3 rd change should be made.

Hence the IE is not detecting the Intranet Zone.
-> In Xp Pro emulation too there is a similar problem

These are the ADD ON Trials I made
-> In SP1, installing ICA CLient 8.1 Resulted in no problem.
Please keep in mind that Service Pack 2 tightens the security
Click to expand...
settings that relate to executing active content in local files in
Internet Explorer. There were also some other changes in other
Click to expand...
security zones to tighten the security settings.
What should I do in order to overcome this?????

Thanks

Srivathsan.A
 
S

Srivathsan

Hi

This is my exact problem
We have a SP1 image, which we upgraded to SP2 By adding only the SP2
specific dependencies like (Resource DLL's etc) and installed Citrix
ICA 8.1. Everything is working fine except a problem in the NFuse web
interface
when accessing a published application through NFuse.
Even though all the settings of the Internet explorer are set to
default as in the TD,
I got a messagebox "Your current security settings do not allow this
file to be downloaded".

Also i found that when the following changes are made in the security
settings of local intranet zone solves the problem
-> Uncheck the "Include all local (intranet) sites not in other zones"
-> Uncheck the "Include all the sites that bypass the proxy server" (if
a proxy server is configured.)
And following changes are made in the Internet Zone
-> Change the settings to the Medium.

But the server in which the Published application is present is a local
intranet server.(Within the subnet)

As per my studies the IE is not at all detecting the intranet Addresses
and considers it as the Internet addresses.

Also my observations on the other trials with default settings in the
Internet explorer as in TD are

_____________________________________________
S/N Image Observation
_____________________________________________
1. XP SP2 Working
2. XPe SP2 Not Working
3. XP Pro Emulation SP2 Not Working
4. XPe SP1 Working
_____________________________________________

security zones to tighten the security settings.
What should I do to get rid of this problem???

Srivathsan
 
K

KM

Srivathsan,

Not sure yet about your problem, although it is a good sign that you got it working with XP Pro SP2.

Btw, since you created "XP Pro Emulation SP2", can you post it on www.xpefiles.com for everybody's access?

Also, when you say "Also i found that when the following changes are made in the security settings of local intranet zone solves the
problem ...." does this mean you have got a workaround? Or does this workaround only works on XP Pro SP2 (and XPe SP1)?
 
K

KM

Srivathsan,

Can you make a quick sniff test? To your XPe SP2 image, please add the following registry value, test the Intranet zone and let us
know if the problem is still there:

[HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOWS_RESTRICTIONS], "iexplore.exe"=dword:1

(if the value is not there yet. If it is there, please set it to 0 and test)
 
S

Srivathsan

Hi KM

As You said i will share the XP Pro Emulation in the XPE Tools Today
positively and give a intimation to all.

Regards
Srivathsan
 
K

KM

Srivathsan,

I am sorry, I shuld have mentioned one more settings that is relevant to your problem with NFuse (.ica).

Please set [HKLM\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING],"iexplore.exe" to 0 (dword) in
image BEFORE you install the Citrix client.

Let us know if it does not help. I will have a little bit more info then.

KM
 
S

Srivathsan

Hi KM

The problem still continues
I made the changes and then reboot followed by the install.
The problem still remains.
Thanks
Srivathsan
 
K

KM

Srivathsan,

Just to verify, your last try was about FEATURE_MIME_HANDLING reg.value, right?
And you set "iexplore.exe"=0 ?

if so, could you also try this:
Go to Control Panel' > 'Internet Options' > 'Security' > 'Trusted Sites' and add the fully qualified internet name of your
NFuse gateway, for example 'https://citrix.mydomain.com'.
Re-install the Citrix ICA web client (or, as you mentioned you installed the client manually, add the trusted site first and
then install the client).

Regards,
KM
 
S

Srivathsan

Hi KM

The Problem you are saying is regarding the .ICA extension is asked to
save in the disk
That too in the RC1 but is solved in the release.

IF my analysis is correct
this is a problem in the IE which arrises due to the improper
classification of the IP Addresses.
I Came to this conclusion through the work arround i found in the
Internet Options

Noting can make it work than these settings
-> Uncheck the "Include all local (intranet) sites not listed in
other zones"
-> Uncheck the "Include all sites that bypass the proxy server"

These means that the settings includes the local intranet addresses in
the Internet zone.

I shared the XPe emulation in the http://www.xpefiles.com so that any
one intrested in ICA can try out this and can inform Microsoft about
this problem if we are correct.

This resides only in the XP EMBEDDED and Not in PROFESSIONAL.

(Thanks KM for answering in all the possiblity)
Srivathsan.A
 
S

Srivathsan

Thanks KM,

If there is really a bug in IE how can it be known to microsoft???
Is there any way?
I have posted this in the Citrix Forum but without reply.
Thanks
Srivathsan
 
S

Srivathsan

HI KM & Slobodan

I have sent a bug report to microsoft, for which i was replied that a
bug report has been opened and they will look for fix.
I continue with the work arround i found out. In case of any fix lets
be informed.
Thanks
Srivathsan.A
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

nfuse ica download error 25
SHOCKWAVE, FLASH, NFUSE, AND FAX NO LONGER WORK 14
ICA Bitmap Cahe Problem. 3
nfuse 500 error "Page cannot be displayed" 1
Running Citrix ICA v8 on 2003 Terminal Server 1
RDP wrapped in ICA 1
ICA C$ Local Drive Browsing VERY Slow 1
"Do you want to move or copy files from this zone?" 1

Top