Citrix CVAD: Network Connection Target Hosts

This post lists the internet communication targets of Citrix Virtual Apps and Desktops (formerly XenApp/XenDesktop). This post is a part of my application network connection monitoring series, a group of articles that explain how to analyze the network traffic of any Windows or macOS app.

The series consists of the following articles:

  • Part 1: explanation of the methodology
  • Part 2: list of MS Office & Teams communication targets
  • Part 3: list of Windows, OS services & UWP apps communication targets
  • Part 4 (this article): list of Citrix CVAD communication targets
  • Part 5: list of Adobe Acrobat Reader, Photoshop, & Creative Cloud communication targets

TL;DR

Citrix Virtual Apps and Desktops (CVAD) talks to 12 hosts and 69 IPs on the internet. List of URLs & details below.

About This Data

What Is This List?

The table below lists the internet hosts Citrix Virtual Apps and Desktops communicated with in a real environment. For each application, the table shows:

  • Application name
  • Application version(s)
  • Process(es) of the application
  • Number of distinct target IP addresses
  • Names and ports of the target hosts

Where Does the Data Come From?

The data was collected in vast limits’ internal network by uberAgent, our endpoint monitoring and analytics product. The data spans a 30-day time range in early 2021. The table contains metadata of actual network communications. It is accurate and complete insofar as I did not alter anything. I did, however, remove some internal systems and the results of manual web browsing (or similar). Some hostnames may be specific to our location (Germany).

List of Citrix CVAD Network Connection Target Hosts

ApplicationApp version(s)Process(es)#Target IPsTargets
Citrix Analytics7.24.2000.12 7.27.0.12Citrix.Analytics.exe1cis.citrix.com:443
Citrix Config Synchronizer7.15.2000.243 7.24.2000.12 7.27.0.25ConfigSyncRun.exe2crl4.digicert.com:80 ctldl.windowsupdate.com:80 ocsp.digicert.com:80
Citrix Licensing16.4.0.32000ctxcloudlicclient.exe ctxuploader.exe2cis.citrix.com:443 ocsp.digicert.com:80
Citrix Monitor Service7.24.2000.11 7.27.0.21Citrix.Monitor.exe36ssl.google-analytics.com:443
Citrix Telemetry Service3.11.0.23002 3.15.0.27001 3.3.2000.8TelemetryService.exe1rttf.citrix.com:443
Citrix Workspace19.11.0.17 20.12.0.21 20.12.0.23 21.02.0CWAFeatureFlagUpdater.exe CitrixReceiverUpdater.exe Receiver.exe SelfService.exe TrolleyExpress.exe24citrixupdates.cloud.com:443 downloadplugins.citrix.com:443 events.launchdarkly.com:443 ocsp.digicert.com:80 stream.launchdarkly.com:443 www.google-analytics.com:443
Citrix Workspace(SSON)19.11.0.17CitrixReceiverUpdater.exe3citrixupdates.cloud.com:443 downloadplugins.citrix.com:443 ocsp.digicert.com:80

Comments

Related Posts

Remote Management of Windows PCs in an Isolated Security Zone

Remote Management of Windows PCs in an Isolated Security Zone
With the advent of BYO it has become fashionable to regard PCs as untrusted devices that should be isolated in a dedicated security zone. Zoning Such an approach has a big advantage: by separating clients from servers it is possible to treat them differently and potentially apply more relaxed security policies - which is a basic requirement for BYO. In a truly BYO-only environment you block everything except Citrix ICA or some other remoting procotol of choice at the firewall and life is good. In real corporate networks things are a bit more complicated, however. Say you want to isolate your managed Windows PCs. In that case you might want to be able to manage them remotely from systems outside the client security zone (e.g. from management terminal servers). And suddenly you have a problem: Windows management protocols, especially RPC and DCOM, are not exactly firewall-friendly.
Security

Latest Posts

Fast & Silent 5 Watt PC: Minimizing Idle Power Usage

Fast & Silent 5 Watt PC: Minimizing Idle Power Usage
This micro-series explains how to turn the Lenovo ThinkCentre M90t Gen 6 into a smart workstation that consumes only 5 Watts when idle but reaches top Cinebench scores while staying almost imperceptibly silent. In the first post, I showed how to silence the machine by replacing and adding to Lenovo’s CPU cooler. In this second post, I’m listing the exact configuration that achieves the lofty goal of combining minimal idle power consumption with top Cinebench scores.
Hardware