This message was deleted.
# _general
s
This message was deleted.
a
Have done a couple of deployments where it's been in the picture
k
anything special regarding the cloud connectors and zscaler? i have the issue that i cannot connect to the vdi from citrix cloud. machine is registered and connectors online, but the ICA connection just times out
a
Have you disabled TLS inspection from the Cloud Connectors? If I recall correctly it breaks the outbound connection to the gateway service if TLS inspection is enabled
k
thats the direction we are looking for and there is even a citrix article stating that CTX338497
a
last times we disabled it for all traffic from the connectors, but you can probably do it based on the target address *.nssvc.net
k
sadly the zscaler admin is not available atm but im pretty sure this is the issue
j
Been nailed by zscaler, it's worth doing the subs domains too
Even better when users start hitting gateway pops in the wrong region due to zscaler egress, that really sucks
k
thanks for the hints
👍 1
m
zscaler sucks if you’re using workspace app because it constantly gets confused about beacons as it can see the internal and external ones at the same time
it’s a total pain in the ass and I don’t recommend using it for ICA connections at all
k
its citrix cloud, therefore only external connections. but even with ssl inspection disabled, it does not work
a
getting any errors in the event log on the connectors? It usually logs something when it can't get to the gateway service
k
nothing helpful actually. i have opened a support case now. the Cloud Connector Connectivity Check Utility returns all green.