How to Obtain Fiddler Trace Network Traffic between Receiver for Web and StoreFront

How to Obtain Fiddler Trace Network Traffic between Receiver for Web and StoreFront

book

Article ID: CTX140750

calendar_today

Updated On:

Description

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information.
 

 

This article describes how to obtain a Fiddler trace of the network traffic between the Receiver for Web Proxy and the StoreFront services.

IMPORTANT:Before performing this procedure, note the following recommendations:
  • This procedure should be performed only in a non-production environment to avoid capturing and exposing sensitive data.
  • The confidentiality and integrity of outbound SSL connections proxied through Fiddler may be compromised while traffic is being captured.
  • If explicit authentication is enabled in Receiver for Web, user passwords will appear in the trace in clear text.

Instructions

  1. Log in to the StoreFront server as a local user with administrator privileges.

  2. Edit the web.config file for the Receiver for Web site and enable Fiddler tracing: <proxy enabled="true" processName="Fiddler" port="8888" />

  3. The web.config file is typically located in: C:\inetpub\wwwroot\Citrix\StoreWeb\web.config

  4. Run IIS Manager and click Application Pools under the server node. Select the application pool named Citrix Receiver for Web and click Advanced Settings. Change the Application Pool Identity to Custom Account and specify the same account used to log in to the StoreFront server.

  5. Install and run Fiddler on the StoreFront server (still logged in as the same local admin user).

  6. From Fiddler’s File menu, clear the checkbox Capture Traffic. (This is not required because network requests from Receiver for Web are sent directly to Fiddler.)

  7. From Fiddler’s Tools menu, select Fiddler Options.  On the HTTPS tab, select the Decrypt HTTPS traffic check box.

  8. Run Fiddler on the StoreFront server and export all Fiddler sessions after reproducing the problem.

  9. Once the trace has been captured, log in to the StoreFront server as the same local admin user that installed Fiddler and follow these steps to restore the system to its previous state.

  10. Run IIS Manager and reset the identity for the Citrix Receiver for Web application pool to the built-in account ApplicationPoolIdentity.

  11. Uninstall Fiddler.

  12. Run certmgr.msc and remove the Fiddler root certificate “DO_NOT_TRUST_FiddlerRoot” from the Trusted Root Certification Authorities store.

  13. Edit the web.config file for the Receiver for Web site and disable Fiddler tracing: <proxy enabled="false" processName="Fiddler" port="8888" />

Issue/Introduction

Tracing network traffic from Receiver for Web to StoreFront Services

Additional Information

Fiddler Software