Citrix.Services

Description

This indicates an attempt to access Citrix services.
Citrix's services cover the server IPs listed on the official website.
Note: When enabled with the default Citrix services signatures in the database - like GoToMeeting, GoToMyPC, etc - this signature detects the Citrix domains that are not covered by the default database signatures.

Affected Products

Citrix

Impact

Unexpected network communication

Technology

Browser-Based, Network-Protocol, Client-Server, Peer-to-Peer, Cloud-Based, Mobile-Device

Behavior

• Reasonable

Default Ports

• TCP/80
• TCP/443
• TCP/1494
• TCP/1604
• TCP/1720
• TCP/1853
• TCP/2512-2513
• TCP/2598
• TCP/3000-4000
• TCP/8080
• TCP/8200
• UDP/123
• UDP/1494
• UDP/1604
• UDP/1853
• UDP/2512-2513
• UDP/2598
• UDP/3000-4000
• UDP/8200
• UDP/16500-16509
• UDP/45000-45999

References

• https://docs.citrix.com/en-us/tech-zone