Cloud Connector Proxy and Firewall Configuration

The Cloud Connector supports connection to the Internet through an unauthenticated web proxy server. Both the installer and the services it installs need connections to Citrix Cloud. Internet access needs to be available at both of these points.

Connectivity requirements

Use port 443 for HTTP traffic, egress only. For a list of required contactable addresses, see System and Connectivity Requirements. For a list of the addresses common to most Citrix Cloud services and their function, see Cloud Connector common service connectivity requirements.

The required contactable addresses for Citrix Cloud are specified as domain names, not IP addresses. Because IP addresses might change, allowing domain names ensures that the connection to Citrix Cloud remains stable.

Important:

Enabling SSL interception on certain proxies might prevent the Cloud Connector from connecting successfully to Citrix Cloud. SSL interception cannot be performed on Citrix Gateway addresses. For more information, see Citrix Gateway Services connectivity requirements. SSL interception must not impact the network connectivity or stability. For more information, see Citrix Cloud Connector

Check Cloud Connector connectivity

The Cloud Connector Connectivity Check Utility helps you verify connectivity between the Cloud Connector and Citrix Cloud using a series of connectivity checks. If you use a proxy server in your environment, the utility can help you configure proxy settings on the Cloud Connector and test connectivity through the proxy server. When a proxy server is configured, the connectivity tests are tunneled through the proxy server.

For more information about downloading and using the Cloud Connector Connectivity Check utility, see CTX260337.

Note:

Cloud Connector Connectivity Check utility is for use with commercial Citrix Cloud accounts only. Do not use it with Citrix Cloud Government or Citrix Cloud Japan.

Installer

The installer uses the settings configured for Internet connections. If you can browse the Internet from the machine then the installer should also function.

Services at Runtime

The runtime service operates in the context of a local service. It does not use the settings defined for the user (as described above).

You can configure the proxy settings during the installation process.

After the installer starts, before logging into Citrix Cloud, click Configure Proxy. You are prompted to add the proxy information.

Note:

There is no support for auto-detect or PAC scripts or authenticated proxies.