VDAs showing as unregistered in Studio Console even though they are on and services are running properly

Note: It is not advisable to run with the firewall permanently disabled on virtual desktops.

In order to verify this behavior, follow these troubleshooting steps:
Try disabling all firewall software on the virtual desktop and restart it. If registration now succeeds, the problem points to misconfiguration of the firewall; reconfigure it and re-enable it.

To resolve this issue, verify the VDA's firewall rules allow inbound connections on each of the required ports (CTX101810).
If no rules exist, configure new firewall rules.
To configure new firewall rules:

1. On the VDA, launch Server Manager and click Tools > Windows Firewall with Advanced Security.
2. In the left pane, click Inbound Rules
3. In the right pane, click New Rule
4. Complete the New Inbound Rule wizard for each required port

Problem Cause

The Windows Firewall configuration on the VDA is preventing inbound connections from Delivery Controllers in the Site.

The VDA must allow inbound connections on the ports listed in VDA, Delivery Controller, and Director section of Citrix documentation. 

These ports enable the VDA to communicate with the Delivery Controllers, register with the Site, and provide access to users' applications and desktops. If these ports are blocked or used by other applications, users cannot launch sessions and access these resources.