Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a small Citrix farm that's giving out ICA files with public IP addresses to clients that are in our internal network. The public IPs are translated (NAT'd from public IP to the appropriate server) and are set as such in the Secure Access Settings. (these aren't public) has Direct specified as its access method; Default method is translated. The internal address and external addresses are correct as well. We do not use a Citrix Access Gateway.

enter image description here enter image description here

Throughout the day clients will start receiving public IPs in their ICA files despite being in the range.

This problem does not happen consistently, but will happen to all new connections at the same time, and seems to afflict both web interfaces at the same time. Eventually the problem seems to correct itself and the web interfaces start handing out the internal address again.

For what it's worth, I believe I've ruled out other network weirdness. Packet captures show addresses that should match the criteria for the Direct access method.

What's causing this and how do I fix it?

share|improve this question
Are you using the Secure Gateway? Can you post a screenshot of your secure access settings? – Dan Feb 1 '13 at 9:09
@Dan No Secure Gateway. – Tanner Faulkner Feb 1 '13 at 15:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.