Client for 32-bit Windows Administrator's Guide - Citrix Knowledge ...

86 Client for 32-bit Windows Administrator’s Guide Go to Document CenterUsing Citrix SSL Relay with Non-Standard TCP PortsBy default, Citrix SSL Relay uses TCP port 443 on the server running MetaFramePresentation Server for SSL/TLS-secured communication. If you configure SSLRelay to listen on a port other than 443, you must make the Client aware of the nonstandardlistening port number.In Program Neighborhood, users can change the port number in the FirewallSettings dialog box. For step-by-step instructions, see the Program Neighborhoodonline help.To apply a different listening port number for all connections1. Make sure all Client components, including the Connection Center, are closed.2. Open the individual’s user-level Appsrv.ini file (default directory: %UserProfile%\Application Data\ICAClient) in a text editor.3. Locate the [WFClient] section.Set the value of the SSLProxyHost parameters as follows:SSLProxyHost=*:,where is the number of the listening port.4. Save and close the file.To apply a different listening port number to particular connections only1. Make sure all Client components, including the Connection Center, are closed.2. Open the individual’s user-level Appsrv.ini file (default directory: %UserProfile%\Application Data\ICAClient) in a text editor.3. Locate the particular [Connection_Section].Set the value of the SSLProxyHost parameters as follows:SSLProxyHost=*:,where is the number of the listening port.4. Repeat Step 3 for all connection sections for which you want to specify adifferent listening port number.5. Save and close the file.Configuring and Enabling Clients for SSL and TLSSSL and TLS are configured in the same way, use the same certificates, and areenabled simultaneously.When SSL and TLS are enabled, each time you initiate a connection the client triesto use TLS first, then tries SSL. If it cannot connect with SSL, the connection failsand an error message appears.