WAAS and Citrix

Can Cisco WAAS running 4.4.5c.4 optimize Citrix Xendesktop/XenApp traffic?

hi Kashish
With Cisco WAAS 4.5.1 capabilities work "out-of-the-box", with no configuration needed within Citrix XenDesktop servers, or at the clients, to enable optimization of Citrix traffic. In contrast, earlier versions of Cisco WAAS required administrative actions to disable native ICA encryption and compression perform optimization.
please review the following:
http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6870/white_paper_c11-688526_ns978_Networking_Solutions_White_Paper.html
http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6870/qa_c67-688536_ns978_Networking_Solutions_Q_and_A.html
Regards,
Felix

Similar Messages

WAAS and Citrix ICA

I am looking to accelerate compressed and encrypted ICA traffic. Can WAAS handle this?
If WAAS turns off compression and handles it itself, will that mean LAN traffic will be uncompressed on the server end and client end?
thanks,
gb

WAAS versions greater than 5.0 all handle Citrix ICA with no configuration necessary, it is simply plug and play.
WAAS does not turn off compression, it removes the Citrix compression and uses its own compression that is better on your WAN, then puts the Citrix compression back on at the other end. The client sees the packet exactly as it was sent from the Citrix server, with Citrix compression. WAAS is transparent to your users. My WAAS system is currently claiming a 27% reduction in bandwidth for Citrix. Other acceleration is much more impressive, like file copying (CIFS), web traffic, replication traffic, and SQL, all of which consistently show 70%-95% reduction in bandwidth. All of which are also plug and play with WAAS.

WAAS conflict with oracle (with G initiator) and citrix)

Dear all,
I am in Proof of Concept "WAAS" in one of the big Companies ,
I have a problem with implementing WAAS , there are:
1. There is Oracle data base with G initiator that encrypted traffic before send to another client or server. At first time, I force the all of acceleration of WAAS (DRE,TFO, LZ).
ex:167.103.72.46:1598 167.103.48.5:9000 10445 00:14:5e:85:77:87 F,F,F,F
after that, the traffic performance slower than before, as I know the oracle encrypted packet so the WAAS is not optimized.so how to solve this case?
(l try to set the optimizations to just TFO not DRE but it is still slow)
2.The Application citrix have same problem with oracle, the packet after accelerated by WAAS (more bigger than before).Maybe, because double header after encrypted (in WAAS and application)
3.is a Packeteer influence WAAS performance? so how to put Packeteer in WAAS POC scheme ?
l think there is better to put packeteer after WAAS (switch-WAAS-packeteer-router) ?because bandwidth influence the traffic performance between WAAS and client if there is packeteer.or are there another opinions?
I need your suggestion, problem solving, or anything that can help me.
(POC WAAS versus River bed versus Expand in this company,please give me tricks to win the competition)
Best Regards
HSN

Seils,
thanks for your suggestion,
the WAAS 4.1 has been released. After reading the data sheet,
there are the sentences:
"Data-in-flight security is maintained during acceleration of Secure Sockets Layer (SSL) encrypted traffic while helping ensure that the server private keys never leave the data center.
â¢ Data-at-rest security is provided by disk encryption based on the Federal Information Processing Standards (FIPS) 256-bit Advanced Encryption Standard (AES) to secure data even in the event of physical compromise."
source:
http://www.cisco.com/en/US/partner/prod/collateral/contnetw/ps5680/ps6870/data_sheet_c78-445372.html
maybe, I think WAAS is not accelerate the encrypted files/data but waas will encrypted the data with SSL and AES.
any suggestion?
(update my case:
maybe l can open the encrypted setting in oracle but the company say it will not become secure that passing traffic without encryption(maybe between client - waas can be tapped)
Thanks
Best Regards
Muhammad

Adobe 9, TS and Citrix Launching PDF Documents 1 min+

Running Windows Server 2008R2 and Citrix Xenapp6. When connecting via Citrix ICA protocol and
launching any app that references a PDF file it takes a long time for the document to launch.
If I login via RDP it is quick to launch the document. I have changed rights, permissions, loaded and reloaded, patches, versions 9 and 10....about anything I can think of. PDF files still open so slow it is not acceptable.
Anyone have any ideas or had this issue before??

Does it help if you give a user a new Adobe profile?

Acrobat Licensing and Citrix

Does anyone know if you are required to purchase a license for both the desktop and Citrix if you are accessing Adobe Acrobat by both methods?

Per the Adobe EULA, you are allowed to install and activate the software on up to two computers, virtual or physical...
There's also a special item on that page about Deploying Adobe Acrobat X products on Citrix.

WAAS and IP SLA operation

we are currently using the IP SLA udp jitter measurement to monitor our voice paths accross the WAN. If we implement a partial WAAS across the same WAN the voice traffic will be acellerated but not the IP SLA jitter measurement. Does this mean that when WAAS is implemented IP SLA is limited in its use?

Hi Steve,
The answer to your question depends on 1) how you deploy WAAS and 2) how you use IP SLA. If you deploy WAAS using WCCP for interception, UDP traffic will never be intercepted. If the WAAS device is deployed inline, all traffic flows through the WAAS device, so an IP SLA probe using UDP will be subject to WAAS pass-through handling behavior.
What are you trying to measure with regards to WAAS?
Zach

WAAS and Juniper Netscreen Interoperability

I've been doing a dig on historical posts relating to WAAS deployed through firewalls.
I am working on a deployment with Juniper Netscreens & ASA5520 sitting between WAE's. IP connectivity is fine. I can ssh to remote device etc. but users cannot login (XP). The login scripts calls upon CIFS etc and I suspect this is being broken through the fw's.
When I disable WAAS for this flow - it all works fine i.e. users can login and access full set of corporate resources. I suspect the firewalls but would appreciate any leads..
thanks
Ajaz

Hi Ajaz,
WAAS adds TCP Option 0x21 and increments TCP packet sequence number during TCP handshake. FW needs to be configured to allow
these changes.
On the latest PIX/ASA a new command "ip inspect waas" has been added to allow above changes by wae. You might want to check
Netscreen config guide on command to disable TCP sequence number checking.
If SSH to Servers is working fine then it might not be FW dropping packets. However to confirm it might be best to use
tcpdump/tethereal on both WAEs and to sniff the traffic on whether its being dropped along the path by the FW.
Few questions:
- Whats the version running on WAEs?
- Is it only CIFS traffic which is affected? Try disabling CIFS AO if its enabled and then test.
Hope this helps,
Best Regards,
Rahul Vavale

WAAS and TACACS

We are trying to get our WAAS environment to authenticate against TACACS and then fall over to local if TACACS is unavailable. For engineer logins everything is working as expected. However we are seeing several thousand failures against the TACACS server from a username of "CMS". This user is not configured in the CM or in TACACS. So we log the failed login and CMS logs into the WAE due to the failover to local mechanism. Looking at packet captures, and debugging aaa on the WAE's it is definitely a CMS user that logs in but shows 127.0.0.1 as its "from" host. I am fairly confident this is automation within the WAE syncing with the CM or vice versa. Does anyone know how to get WAAS and TACACS to work together without a mass amount of login failures? Is there a way this CMS user can be cloned/duplicated on the tacacs server? What is the password for this automation user?
Thanks in advance.

Hi Stan,
WAE can authenticate against TACACS, RADIUS and Central Manager (Local) at any time depending on your configuration.
There are couple of things to keep in mind while configuring TACACS on WAE, on both sides - TACACS adn WAE CM.
On TACACS side:
1. Please make sure to create right username.
2. Please make sure to verify if you are using ASCII password authentication.
3. Try to use less than 15 letters - Alphanumeric TACACS password.
4. Please provide right user level / group level persmissions. This is somewhere under user account properties. Please also make sure to select right user password under user properties.
5. Verify if this user needs level 15 (admin equivalent account).
On WAE CM side:
1. Please make sure to select right authentication method as primary and secondary.
2. Please make sure to enable the check box for authentication methods.
You can verify the failure / successful log events on TACACS server in order to find out if the user is atleast trying to authenticate against TACACS.
I am sure you have looked at this link to find out all the required steps: Configuring TACACS+ Server Settings
Hope this helps.
Regards.
PS: Please mark this as Answered, if this resolves your issue.

WAAS and Symantec Vertitas Volume Replicator

Hi,
We are forwarding Symantec replication traffic via our WAAS infrastructure over a 20Mb WAN link. The CM appears to register the traffic but does not optimize it at all. Has anyone had any experience with WAAS and Symantec Veritas Volume Replicator (VVR) 4.3?

I tested with VVR in the lab. VVR default uses UDP and using the nerd knob in the GUI did not force VVR to start using TCP. To get VVR to use TCP, I had to input these commands:
vrport data 1999-1999
vrport heartbeat 2000-2000
or use what ever ports you want to use. The previous answer was asking if you were seeing TCP sessions in the WAE's. This can be seen by telneting to the WAE and issueing a "show tfo connection summary". Can you post the output of that command?

WAAS and 512 Deployment

Attach is the Visio as well as config for the India site. The Visio has 2 tabs (POC-WAAS and Proposed-WAAS). The POC (Proof of Concept) tab does not have the spare 3660 installed yet but I plan to do that soon. The "Proposed WAAS" is where we would want to be. However, my question will most likely address POC tab with the preparation to move to the Proposed tab.
Current assumptions:
Since we have a Manager in India, we will be getting another Manager in Calif, If so, I would like to setup a Primary/Standby deployment for redundancy.
Questions:
1. For Calif Primary WAE, the visio shows a Management interface but do I need a management interface or is it better to go with a standby interface instead as well as use MHSRP?
2. Since we have a high speed link (4 Mb Internet for VPN in POC but 10mb WAN for proposed), should we tune the buffers to the max? If so how?
3. Is this a recommend design for California? for India?
4. Is my configs a recommend configs for California 3660 in POC? If so, what do I need to change in 3825 in Proposed?

Zach
After reading the SRND, I believe the best design is to move the 512 to the Cores. Please see the updated Visio and planned configs. Here's my updated requirements:
1. Calif is hub
2. All traffic to India (10.2/10.26) should go through the VPN tunnel through (ASA5520)
3. All traffic to 10.3 and 10.5 should go through WAN via (R-Voice2)
4. Latency to India is btwn 280 to 340msec and BW is 2mb. Do I also need to be concern with the BDP, L2 redirect(forwarding), and Mask assignments?
TIA

WAAS and SSA Baan ERP

Hi all,
Anybody how have setup Cisco WAAS and ERP application BAAN?
I am interesting to setup a full optimization for ERP Baan.
Jan

Hi all,
We found the problem.
TCP/512 was in Classifier Unix-Remote-Execution and this Classifier was in pt.
Jan

Thin clients for both Tarantella and Citrix

What thin clients out there (hardware) supports Tarantella over the
internet?
Currently many of the users in my organization have a laptop at home and a
thin client at work. The laptop could be removed now, after having
installed Tarantella.
Wyse doesn't seem to support both Tarantella and Citrix - who does?
Any pointers welcome. Thanks in advance.
Jakob Breivik Grimstveit, http://www.grimstveit.no/jakob, +47 48298152

Jakob Breivik Grimstveit wrote:
What thin clients out there (hardware) supports Tarantella over the
internet?
Currently many of the users in my organization have a laptop at home and a
thin client at work. The laptop could be removed now, after having
installed Tarantella.
Wyse doesn't seem to support both Tarantella and Citrix - who does?
Any pointers welcome. Thanks in advance.
We do have a Tarantella client for Tarantella
http://www.tarantella.com/download/clients/#EEwince

SBO and Citrix. Hardware requeriments

Hi,
We are looking for the hardware requeriments for a SBO and Citrix installation. It would be for moreless 30-40 concurrent users.
We have downloaded the SBO hardware requeriments sizing guide, but we are looking for real experience feedback.
Anybody can give us some feedback on this issue?
Thanks in advance,
Ibai Peña
PS: Nobody has used Citrix? This is not what Citrix says...

I've checkes it for you, here it comes:
SBO & MSSQL Server
Intel Xeon 3.2 Ghz, 1,5 GB RAM
Clients
Intel Xeon 3.2 Ghz, 2 GB RAM
However, keep in mind that these are virtual servers, and I don't know on what 'real' servers those virtual servers are hosted, and not know the amount of memory I get allocated per user...
Kind regards,
Rowdy
Concerning Virtual Servers, it's some software that runs on a 'real' server, wich can host multiple operating systems. So you have one piece of hardware, but in your network you can have multiple servers/clients etc. Need a nice test server? Add one to your Virtual Server and your ready, no need to buy new hardware...
Usefull links:
<a href="http://www.microsoft.com/windowsserversystem/virtualserver/default.mspx">Microsoft Virtual Server</a>
<a href="http://en.wikipedia.org/wiki/Microsoft_Virtual_Server">Virtual Server (Wikipedia)</a>
<a href="http://www.vmware.com/">VMWare</a> (Other Virtualisation software vendor)

Remote desktop and citrix server

On my corporate network, which is Windows based, we are able to hit our Citrix server from inside the firewall using the Windows remote desktop program. How do I do the same with my Mac, when I am on the network inside our firewall? I can reach the server with no problems from outside the firewall.

What application are you using to try and connect? I would guess that you're using the Citrix app or Microsoft's Remote Desktop Connection Client for Mac, neither of which will be most likely to get assistance with in this forum which is for Apple's own software for managing networked Macs. If you'll tell us what software you're using to try and connect, we can probably direct you to the place where you'll be most likely to get quick and accurate suggestions.
Regards.

SAP BPC 7.5 SP3 and Citrix Entering Data through BPC Client and Citrix

Hello BPC experts,
my client is using SAP BPC 7.5 SP3 in combination with Citrix. We are having problems now, while entering data through the BPC Client (installed on BPC Server) and the BPC Client (running on Citrix).
When we enter data through the BPC Client (Server) and expand the sheet, we can only see the data that we entered through the BPC client (Server). When entering data through the BPC Client (Citrix), we can see only the data we enter through the BPC Client (Citrix).
The database, however, saves both entries correctly. For test purposes we created a test report which shows both entries correctly in the BPC Client on the server and on Citrix.
Does anyone have an idea what can be wrong with our system? We tried to create an EvDRE log File for this BPC version as well, but failed. Maybe one of you already did that and can help me with this.
Thanks in advance!

You can greatly improve your chance of receiving a helpful answer to your question if you state the version (MS or NW) of BPC which you are using.
Also notice the sticky [note|Please do not post BPC, SSM or FI/CO questions here!; at the top of this forum whereby we announced new dedicated forums for BPC which are the proper place to post your questions regarding BPC in the future to be able to reach the right audience for your question.
Thanks and best regards,
[Jeffrey Holdeman|http://wiki.sdn.sap.com/wiki/display/profile/Jeffrey+Holdeman]
SAP Labs, LLC
BusinessObjects Division
Americas Applications Regional Implementation Group (RIG)

WAAS and Citrix

Similar Messages

Maybe you are looking for