FireWall-1 FAQ: Citrix Winframe
Please note: This content was from when I was operating my FireWall-1 FAQ site, which I stopped operating in August 2005. For some reason people still have links to this stuff on the Internet that people are still clicking on.
I am making this information available again AS IS. Given how old this information is, it is likely wildly inaccurate. I have no plans to update this information.
If you're still running versions of Check Point VPN-1/FireWall-1 where this information is still relevant to you, do yourself a favor and upgrade to a more recent release. If you happen to be running a current release and the information is useful, it's by happenstance :)
To allow Citrix Winframe, you can either use the pre-defined services for Winframe, or create a TCP Service with port 1494. Allow the appropriate service through the rulebase.
Additional information can be found on Citrix Support.
To make it work with NAT, you will need version 1.7 of the Winframe Server with hotfix se170037 (or a version that includes it).
On the WinFrame Server, run the following command
altaddr /set a.b.c.d
Where a.b.c.d is the “translated” IP address of the WinFrame server. On the WinFrame client, you also need to add the following to the [WFCLIENT] section of the APPSRV.INI file:
UseAlternateAddress=1
