Thursday, February 16, 2012

Accessing Citrix XenApp 6.5 over Web Interface 4.6 through Citrix NetScaler VPX 9.3 configured as an Access Gateway throws the error: "401–Unauthorized: Access is denied due to invalid credentials.” and “You do not have permission to view this directory or page using the credentials that you supplied.”

Problem

You’ve completed the configuration of your Citrix NetScaler VPX 9.3 as an Access Gateway to your internal Web Interface servers but when you attempt log in:

image

… the web interface login splash page flashes and you receive the following error:

image

Solution

This error is usually related to your Web Interface servers unable to communicate to your NetScaler VPX’s VIP IP.  Ensure that the firewall or web filter between your Web Interface server and your NetScaler VPX’s VIP (usually a DMZ or public IP) is allowing port 443 (SSL) traffic through.  The easiest way to test is to log directly onto your Web Interface server and try to initiate a “telnet <NetScaler VIP> 443”.  If you are unable to establish a connection over then check to ensure traffic is flowing correctly.

1 comment:

ryan said...

One of the reasons that contributed to my experience with this issue was that the Web Interface server did not trust the self signed cert that I had generated a for POC. Importing this certificate and ensuring DNS entries were correct.

This CTX KB article helps: http://support.citrix.com/article/CTX123433