1. Transparent Mode
   

2. LAN user mode
   

3. Single Hop Gateway mode
   

4. Double hop Gateway mode
   

This article covers various diagnosis and troubleshoot tips for these modes.

Prerequisites for Configuring HDX Insight

• Choosing the right deployment type - Based on the existing XenApp/XenDesktop deployment choose one of the deployment modes.
  • If you have a standalone XenApp/XenDesktop deployment, Transparent Mode or Lan User Mode of deployment is recommended.
  • If you have an existing Gateway deployment, based on the type choose SingleHop or Double Hop Mode.

• Test connectivity - Before configuring HDX Insight, ensure that you existing XenApp/XenDesktop solutions (Application/ desktop launches and functionality) works. Ensure that the required ports are open for the solution to work. Citrix Documentation - Before You Begin.

• Configuration - Creating AppFlow collector action and policy is common for all modes of operation.
  add appflow collector af_collector_1.2.3.4 -IPAddress 1.2.3.4
  add appflow action af_action_VPN_1.2.3.4 -collectors af_collector_1.2.3.4
  add appflow policy af_policy_VPN_1.2.3.4 true af_action_LB_1.2.3.4

  For Transparent or Lan User Deployment Type you will have to bind the policy to AppFlow global bindpoint and set icaports in ns parm setting.
  set ns param -icaPorts 1494 2598
  bind appflow global af_policy_VPN_1.2.3.4 1 END -type ICA_REQ_DEFAULT

  For Single Hop Deployment Type, you can bind the policy either globally or to the VPN vserver
  bind vpn vserver _XD_GW -policy global af_policy_VPN_1.2.3.4 1 -priority 254 -gotoPriorityExpression END -type ICA_REQUEST
  bind appflow global af_policy_VPN_1.2.3.4 1 END -type ICA_REQ_DEFAULT

  For Double Hop Deployment Type, you can bind the policy either globally or to the VPN vserver.
  Note: One of the hop should have only otherTcp Bindpoint while the other hop ICA_Request/ICA_Request_Default/ICA_Request_Override
  bind vpn vserver _XD_GW1 -policy global af_policy_VPN_1.2.3.4 1 - priority 254 -gotoPriorityExpression END -type ICA_REQUEST
  bind vpn vserver _XD_GW2 -policy global af_policy_VPN_1.2.3.4 1 - priority 254 -gotoPriorityExpression END -type OTHERTCP_REQUEST
  bind appflow global af_policy_VPN_1.2.3.4 1 END -type ICA_REQ_DEFAULT
  bind appflow global af_policy_VPN_1.2.3.4 1 END -type OTHERTCP_REQ_DEFAULT

Troubleshooting

• Configuration
  • Example: Globally Bound AppFlow policy with type ICA_REQ_OVERRIDE. This overrides all other ICA policy bindings and prevents ICA reporting to multiple Collectors.
  • Example: AppFlow Logging not enabled on the Vserver
• Firewall blocking AppFlow port 4739
• Supported Receiver/XenApp/XenDesktop server’s data traffic
• Unsupported Receiver / XenApp/XenDesktop server.

Issues Related to ICA parsing

After the requirements for configuring the HDX Insight solution are met and the Insight Center is configured, if the status / reports of the ICA session is not available on the Insight center dashboard, check for following error messages.

On NetScaler appliance, type the following command at the shell prompt:
# cat /var/log/ns.log  

Error Counter details

There are various counters with respect to ICA parsing is captured. The description of these counters are shown below:
# nsconmsg –g hdx –d statswt0

Checklist before Contacting Citrix Technical Support

Make sure that you have the following items checked before contacting Citrix Technical Support.

• Check Appflow config thoroughly.

  • Is Appflow feature enabled?
  • How many AppFlow collectors are present?
  • What are the vservers which have AppFlow policies bound?
  • Classify based on vserver type.
  • Check for AppFlow logging enabled knob
    > sh vpn vserver <vserver_name>
  • Check for AppFlow hit counter on the respective AppFlow policy/action
  • Check nsconmsg counters for hdx search key
  • Check for resolution in the following troubleshooting tips at Citrix Documentation - Troubleshooting Tips.
  • If it is a crash grade issue:
    • Ensure ns_ica or nsica_ is present in the backtrace
    • Unbind the AppFlow policy from vservers one at time and observe for crashes rather than disabling AppFlow feature itself.
    • After above steps disable Appflow to confirm it to be an AppFlow/ HDX Insight issue

Information to collect before Contacting Citrix Technical support

• Details of the deployment and network topology.
• XenApp/XenDesktop server versions
• Client Receiver versions
• Number of Active ICA sessions when the issue occurred.
• Tech support bundle captured by typing the following command at the NetScaler command prompt:
  > show techsupport
• If it is Insight center issue, do collect techsupport bundle for Insight Center as well
• Packet traces captured on all NetScalers.
  To start a packet trace, type the following command at the NetScaler command prompt:
  > start nstrace-size 0
  To stop packet trace, type the following command at the NetScaler command prompt:
  > stop nstrace
• Output of the following command typed at the NetScaler command prompt:
  > show arp