Summary
This article clarifies which ports are active on the Citrix Application Firewall 7000 and 12000 and what their functions are.
Background
When the Application Firewall ships on the 7000 and 12000 hardware, there are more ports available than are required. Ports and their functions are assigned prior to shipping and cannot be changed. This information is included on the shipping card sent with each model.
Application Firewall 7000
The Application Firewall 7000 is a single-slot (1U) form factor, rack-mountable appliance intended to be installed on a server room rack.
On this unit, when you are facing the bezel, the wide-area network (WAN) port is the top Ethernet port in the rightmost column. The local area network (LAN) port is directly beneath the WAN.
Both of these ports are Gigabit ports.
The control (CTRL) port is the lower port in the leftmost column, and is a 10/100 Base-T Ethernet port. The other Ethernet ports on the unit are unused.
The light-emitting diodes (LEDs) to the left of each Ethernet port are amber when that port is connected and active. The lower LEDs are green when the port is sending or receiving traffic.
The unit’s serial port is located to the right of the Ethernet ports.

Application Firewall 12000
The Application Firewall 12000 is a double-slot (2U) form factor, rack-mountable appliance intended to be installed on a server room rack.
On this unit, when you are facing the bezel, the CTRL port is the rightmost Ethernet port. The LAN port is the port directly to the left of the CTRL port. The WAN port is directly to the left of the LAN port.
All the network ports on this unit are Gigabit Ethernet ports. The other Ethernet ports on the unit are unused.
The upper LEDs to the left of each Ethernet port are amber when that port is connected and active. The lower LEDs are green when the port is sending or receiving traffic.
The unit’s serial port is located to the left of the Ethernet ports.

More Information
The unused ports may or may not become available in future releases.