Netscaler hangs on ../cgi/setclient?wica

[Chris Isaksen]

NSVPX 10.5 & Storefront 2.6

 

I've a number of articles on this and they all point to a communication problem between the netscaler and storefront.

 

I'v even redone all my settings using http://support.citrix.com/article/CTX139963 as a guide but it still hangs.

 

Are there any logs can look at to see where this is failing ?   I've tried to verify web connections using ping, traceroute, telent & openssl s_client -connect.  Ping and traceroute completed successfully.

 

telent and openssl both give http responses. storefront is configured for both http and https.

 

So I don't know where to look next.

 

[Brian Wagner]

Seems like this is due to AG trying to use TLS 1.2 on NS 11.x to talk to StoreFront. To resolve in my environment, I setup a VIP for SF (even though I only had one server) and set the service/service group to disable TLS 1.1 and 1.2. I changed the session profile to use the VIP and all was OK. I found this out as there were TLS errors in the SF logs...

 

Hops this helps.

[Mark Kroehler 2]

I'll second the TLS Settings fix. Had used IISCrypto on the StoreFront servers (3.15) to lock it down to TLSv1.2 only. Even though the Virtual Server was configured to use 1.0, 1.1 & 1.2, it wouldn't connect. Relaxed the setting on the web server, and it worked. Unfortunately, the NetScaler is 10.5 (don't ask) and I'm trying not to break it. Fortunately, I'm replacing it as part of this project. :-)