Citrix Technologies
This document provides an overview of ports that are used by Citrix components.
Page 1
Overview
Introduction
This document provides an overview of ports that are used by Citrix components and must be
considered as part of Virtual Computing architecture, especially if communication traffic traverses
network components such as firewalls or proxy servers, where ports must be opened to ensure
communication flow.
References
The assignments are listed by the Internet Assigned Numbers Authority (IANA), updated regularly,
and revised when new information is available and new assignments are made. The specific location
of the port numbers list is available at the following Web site:
http://www.iana.org/assignments/port-numbers.
Microsoft Article Network Ports Used by Key Microsoft Server Products.
Microsoft Article ID 832017 Service overview and network port requirements for Windows.
Source
Destination
Type
Port
Details
TCP
694
TCP
80/443/9002
TCP/UDP
389
LDAP connection
TCP/UDP
636
TCP
3268
TCP
3269
DNS Server
TCP/UDP
53
User Device
Radius Server
Access Gateway Appliance
TCP/UDP
TCP
1645 / 1812
443
Admin Workstation
TCP
443
Administration Website
TCP
9005
AAC Administration
TCP
80/443
TCP/UDP
389
LDAP connection
TCP/UDP
636
TCP
3268
TCP
3269
DNS Server
TCP/UDP
53
User Device
Radius Server
Access Gateway Appliance
TCP/UDP
TCP
1645 / 1812
443
Admin Workstation
TCP
9001
Administration Website
TCP
9002
TCP
9005
AAC Administration
AppController
TCP
9736
DNS Server
TCP/UDP
53
LDAP Server
(e.g. Active Directory
Domain Controller)
TCP/UDP
389
LDAP connection
TCP/UDP
636
TCP
3268
LDAP Server
(e.g. Active Directory
Domain Controller)
Page 2
TCP
3269
SMTP Server
TCP
25
SysLog Server
UDP
514
User Device
AppController
TCP
443
Admin Workstation
AppController
TCP
22
TCP
4443
GUI Administration
TCP
3820
TCP
21
HTTP
80
AppDNA 7.x
AppDNA Server
HTTPS
443
DCOM
135
HTTP
8199
HTTP
7199
Virtual machine
TCP
54593
Network share
TCP/UDP
445
TCP/UDP
53
DNS
TCP
1433
1746
1748
1750
AppDNA License server
TCP
8079
TCP
7279
27000
AppDNA Client
HTTP
80
HTTPS
443
DCOM
135
Branch Repeater
Branch Repeater Appliance
TCP
N/A
User Device
(Branch Repeater Plug-In)
Admin Workstation
TCP
443
TCP
80/443
TCP
3389
Admin Workstation
TCP
27000
TCP
7279
TCP
8082
TCP
8083
TCP
80
GoToMeeting
GoToWebinar
GoToMyPC
GoToAssist
TCP
80/443/8200
CloudStack Management
Server
Citrix XenServer Resource
Pool Master
TCP
9090 / 8250
Inter-server communication
TCP
22/80/443
CloudStack/CloudPlatform
CloudStack Management
Server
Page 4
KVM
TCP
22
TCP
443
MySQL Server
TCP
3306
MySQL Server
DNS
TCP
53
TCP
3922
Console Proxy VM
TCP
3922
Virtual Router
TCP
3922
Secondary Storage
TCP
111/2049
CloudStack Management
Server
TCP
8250
HTTP(s) Share
TCP
80/443
Secondary Storage
TCP
111/2049
SSVM to NFS
DNS
TCP
53
SSVM to DNS
CloudStack Management
Server
TCP
8250
DNS
TCP
53
CloudStack Management
Server
TCP
8250
DNS
TCP
53
CloudStack Management
Server
TCP
8080
User/Client/API to CloudStack
Management Server - Management
Port (authenticated communication)
TCP
8096
User/Client to CloudStack
Management Server - Management
Port (unauthenticated
communication)
Citrix Receiver
TCP
80/443
ICA / HDX
TCP
1494
TCP
2598
TCP
443
TCP
8008
UDP
16500-16509
Virtual Router
Admin Workstation
Page 5
IMA
TCP
2512
Independent Management
Architecture (IMA)
Management Console
TCP
2513
Application / Desktop
Request
TCP
80/8080/443
STA
TCP
80/8080/443
*Note:
EdgeSight
EdgeSight Server
TCP
1433
TCP
80/443
EdgeSight Agent
TCP
9035
SNMP Server
TCP
161
SMTP
TCP
25
TCP
1433
EdgeSight Agent
EdgeSight Server
TCP
80/443
TCP
9036
Admin Workstation
EdgeSight Agent
(Loopback)
EdgeSight Server
TCP
80/443
EdgeSight Agent
TCP
9035
TCP
8443
TCP
3389
TCP
5900
Lab Manager
End-Device to Lab
Manager Server User
Interface
End-Device to Virtual
Machines
Page 6
End-Device to
Virtualization Host
TCP
TCP
5900
5999
2179
TCP/UDP
35110 - 35112
TCP
8443
TCP
389
LDAP
NetScaler Appliance
(Access Gateway
Enterprise Edition)
DNS Server
TCP/UDP
53
UDP
3003
TCP
3008
TCP
3009
TCP
3010
TCP
3011
UDP
162
NetScaler LOM
TCP
5900/623
TCP/UDP
389
LDAP connection
TCP/UDP
636
TCP
3268
TCP
3269
TCP/UDP
1645 / 1812
RADIUS connection
XenDesktop / XenApp
Controller
TCP
80/8080/443
TCP
80/8080/443
XenDesktop Virtual
Desktop / XenApp Worker
Server
TCP
2598
TCP
1494
TCP
443
TCP
8008
IP
50
LDAP Server
(e.g. Active Directory
Domain Controller)
Radius Server
NetScaler Appliance
(CloudBridge)
NetScaler Appliance
(CloudBridge)
Admin Workstation
NetScaler Appliance
NetScaler Appliance
NetScaler Appliance
IP
51
UDP
500
TCP
22
TCP
80/443
TCP
3008
TCP
3010
TCP
8443
TCP
9091/9092/
9094
TCP
9091/9092
TCP
9094
TCP
1099/6010
TCP
22
UDP
161
TCP
22
TCP
80/443
ICMP
NetScaler Appliance
UDP
4739
VPN/XenApp/XenDesktop
TCP/UDP
3148
UDP
3108/3168/3188
TCP/UDP
445
TCP/UDP
135 - 139
TCP/UDP
389
LDAP connection
TCP/UDP
636
TCP
3268
CIFS
NetBIOS
Page 8
TCP
3269
TCP/UDP
524
ZENworks communication
TCP
443
Provisioning Server
UDP
6890 6909
UDP
6905 6909
TCP
1433
Domain Controller
TCP
389
UDP
67
UDP
67 / 4011
TFTP Server
UDP
69
Provisioning Server
UDP
6910
UDP
6910 6930
UDP
6969
TCP
54321
SOAP Service
TCP
54322
SOAP Service
TCP/UDP
80/443
SmartAuditor components
connecting to SmartAuditor Broker
TCP/UDP
1801
TCP
2101
MSMQ-DCs
TCP
2103
MSMQ-RPC
TCP
2105
MSMQ-RPC
TCP
2107
MSMQ-Mgmt
Target Device
(PVS outbound
communication on ports
6901, 6902 and 6905 for
Target Devices starting
with version 6.0)
Admin Workstation
Provisioning Server
SmartAuditor
SmartAuditor Agent
SmartAuditor Server
Page 9
UDP
3527
TCP
TCP/UDP
1433
80/443
End-Device to
StageManager Server User
Interface
TCP
9443
End-Device to Virtual
Machines
TCP
3389
TCP
TCP
5900
5900 5999
TCP
2179
TCP/UDP
35110 - 35112
TCP
9443
TCP
389
LDAP
TCP
636
StorageLink Service
TCP
21605
Communication of StorageLink
Manager to StorageLink Service
Database
TCP
1433
TCP
80 / 443
TCP/UDP
389
TCP/UDP
88
TCP/UDP
464
TCP
1433
SmartAuditor Server
Admin Workstation
MSMQ-Ping
Microsoft SQL Server
Console Access
StageManager
End-Device to
Virtualization Host
VMAgent to StageManager
Server
StageManager Server to
Active Directory
StorageLink
StoreFront
User Device
Storefront Server
StoreFront Server
Domain Controller
Page 10
StoreFront Server
XenDesktop
Controller, XenApp
Controller,
AppController
TCP
Randomly selected
unreserved port
per service
TCP
808
TCP
80 / 443/ 389
Workflow Studio
Console
Database
TCP
TCP
8010
1433
XenApp Server
TCP
2512
TCP
1433
TCP
1434
TCP
11168
Application Streaming
App Hub on File Share
SMB
445
Application Streaming
App Hub on Web Share
HTTP/S
80/443
TCP
135
TCP
Randomly selected
unreserved port
XenClient Synchronizer
TCP
443
Hyper-V Host
RDP
2179
Admin Workstation
XenApp Server
XenClient
XenClient Synchronizer
Page 11
TCP
1433
Domain Controller
TCP
389
TCP
636
XenClient Engine
(User Device)
XenClient Synchronizer
TCP
443
Admin Workstation
XenClient Synchronizer
TCP
8443
TCP
80/443
TCP
8100
TCP
443
TCP
1433
TCP
1434
TCP
80
UDP
TCP
135
TCP
135
Dynamically allocated
high-port
(49152-65535)
Virtual Desktop
TCP
Page 12
Director Server
TCP
80
TCP
5985
TCP
135
3389
Endpoint
(Receiver)
TCP
2598
TCP
1494
TCP
443
TCP
8008
UDP
16500-16509
Controller
TCP
80
Controller
TCP
8080
TCP
3268
Admin Workstation
TCP
80/443
Director Server
Used by process
WorkstationAgent.exe for
communicating with Controller
Page 13
Admin Workstation
Controller
TCP
80/443
License Configuration
Service
(Citrix.LicensingConfig.Sdk
WcfEndpoint.exe)
TCP/UDP
Dynamically allocated
high-port
(49152-65535)
TCP
3389
TCP
443
NTP Service
TCP/UDP
123
DNS Service
TCP/UDP
53
DNS
TCP
389
TCP
636
XenMobile
See the following link for XenMobile Ports CTX139012
XenServer
XenServer
XenServer
Domain Controller
Page 14
File Server
Admin Workstation
(XenCenter)
TCP/UDP
139
TCP/UDP
445
SAN Controller
TCP
3260
iSCSI Storage
TCP
2049
NFS Storage
StorageLink Gateway
TCP
21605
XenServer
TCP
22
SSH
TCP
443
TCP
5900
TCP
3389
Virtual Machine
Page 15
By Port
Port
Product
Component
Type
Details
XenDesktop
Microsoft Configuration
Manager Wake on LAN
UDP
22
CloudStack/CloudPlatform
KVM
TCP
XenServer
TCP
22
Command Center
TCP
SSH administration
TCP
22
XenServer
Resource Pool
TCP
SSH
XenCenter
TCP
SSH
22
AppController 2.x
Administration
TCP
25
AppController
SMTP
TCP
43
SmartAuditor
TCP
50
Cloud Bridge
TCP
Cloud Bridge
TCP
Secured connections
IPSec Encapsulating Security
Protocol (ESP) traffic
IPSec Authentication Header (AH)
traffic
53
DNS
TCP/UDP
53
AppController
CloudStack/CloudPlatform
DNS
Console Proxy VM
TCP/UDP
53
51
TCP
DNS
TCP
SSVM
TCP
SSVM to DNS
Virtual Router
TCP
DNS
TCP/UDP
DNS
TCP/UDP
53
Infrastructure
TCP/UDP
DNS
67
Provisioning services
DHCP
UDP
68
Provisioning services
DHCP
UDP
69
Provisioning services
TFTP
UDP
80
TCP
80
Branch Repeater
Administration
TCP
53
53
By Port
Port
Product
80
80
CloudStack
80
Common Citrix
Communication Ports
Component
Type
Details
GoToMeeting
GoToWebinar
GoToMyPC
GoToAssist
SSVM
TCP
TCP
XenServer
TCP
Application / Desktop
Request
TCP
XML Service
Citrix Receiver
TCP
STA
TCP
80
EdgeSight
Agent
TCP
80
HTTP/S administration
TCP
GUI Administration
80
TCP
80
SmartAuditor
Components (Agent /
Player)
TCP/UDP
SmartAuditor components
connecting to SmartAuditor Broker
Components (Agent /
Player)
TCP/UDP
SmartAuditor components
connecting to SmartAuditor Broker
TCP
Secured connections
TCP
80
StoreFront
Application/Desktop Req.
80
XenApp
Offline Plug-in
80
XenDesktop
TCP
Used by
Citrix.ADIdentity.SdkWcfEndpoint.e
xe
Broker
TCP
TCP
Used by process
WorkstationAgent.exe for
communicating with Broker
Citrix XenServer
Virtualization
Infrastructure
TCP
Configuration Service
TCP
Used by
Citrix.Configuration.SdkWcfEndpoin
t.exe
HTTP/S
Page 16
By Port
Port
Product
Component
Type
Details
Desktop Director
TCP
Host Service
TCP
Used by
Citrix.Host.SdkWcfEndpoint.exe
License Configuration
Service
TCP
Used by
Citrix.LicensingConfig.SdkWcfEndp
oint.exe
TCP
Used by
Citrix.MachineCreation.SdkWcfEndp
oint.exe
TCP
Used by
Citrix.MachineIdentity.SdkWcfEndp
oint.exe
TCP
TCP
88
StoreFront
Kerberos
111
CloudStack/CloudPlatform
NFS
TCP
SSVM
TCP
SSVM to NFS
123
XenServer
135
SmartAuditor
135
XenDesktop
Infrastructure
MSMQ Service (default)
TCP/UDP
TCP/UDP
NTP
TCP
RPC
Virtual Desktop/Delivery
Agent(VDA)
TCP
Microsoft Configuration
Manager Wake on LAN
TCP
TCP
135 - 139
Password Manager
139
XenServer
161
Command Center
UDP
162
Command Center
UDP
389
AppController
Authentication
TCP
Credential Store on
Network File Share
Infrastructure
TCP/UDP
NetBIOS
TCP/UDP
Page 17
By Port
Port
Product
Component
Type
Details
389
StoreFront
Authentication
TCP/UDP
LDAP connection
389
LDAP authentication
TCP
LDAP connection
389
Lab Manager
TCP
LDAP
389
LDAP authentication
TCP/UDP
LDAP connection
LDAP authentication
TCP/UDP
LDAP connection
LDAP authentication
TCP/UDP
LDAP connection
LDAP authentication
TCP
LDAP connection
389
Active Directory
TCP
389
StageManager
TCP
LDAP
389
XenServer
StageManager Server to
Active Directory
Infrastructure
TCP
Active Directory
443
Appliance administration
TCP
Administration Website
TCP
Client Connections
TCP
389
389
389
443
AppController
Client Connections
TCP
Connect to AppController
443
StoreFront
Application/Desktop Req.
TCP
443
Branch Repeater
Administration
TCP
Client to Appliance
TCP
GoToMeeting
GoToWebinar
GoToMyPC
GoToAssist
SSVM
TCP
TCP
vCenter
TCP
XenServer
TCP
Application / Desktop
Request
TCP
XML Service
Citrix Receiver
TCP
TCP
STA
TCP
443
443
CloudStack
443
Common Citrix
Communication Ports
Page 18
By Port
Port
Product
Component
Type
Details
443
EdgeSight
Agent
TCP
443
HTTP/S administration
TCP
GUI Administration
TCP
TCP
Client Connections
TCP
443
443
443
XenApp
Offline Plug-in
443
XenDesktop
Broker
TCP
Citrix XenServer
Virtualization
Infrastructure
TCP
Desktop Director
TCP
VMware vSphere
Virtualization
Infrastructure
TCP
Resource Pool
TCP
XenCenter
TCP
443
XenServer
HTTP/S
443
XenClient
Enterprise Engine
TCP
445
Password Manager
Credential Store on
Network File Share
TCP/UDP
445
XenApp
Offline Plug-in
SMB
445
XenServer
Infrastructure
TCP/UDP
464
StoreFront
Kpasswd
TCP/UDP
500
Cloud Bridge
524
Password Manager
623
NetScaler LOM
Administration
TCP
636
Lab Manager
TCP
CIFS
Communication with Application
Hub (File Server / Share)
UDP
TCP/UDP
ZENworks communication
Page 19
By Port
Port
Product
636
636
StageManager
636
AppController
694
1099
636
Component
Type
Details
LDAP authentication
TCP/UDP
TCP/UDP
TCP
Authentication
TCP
Appliance Failover
TCP
Command Center
TCP
1433
EdgeSight
Database
TCP
1433
Provisioning services
Database
TCP
1433
SmartAuditor
Database
TCP
1433
StorageLink
Database
TCP
1433
StoreFront
SQL Connection
TCP
1433
Workflow Studio
Database
TCP
1433
XenApp
Database
TCP
1433
XenDesktop
Database
TCP
1434
XenApp
Database
TCP
1434
XenDesktop
Database
TCP
1494
Common Citrix
Communication Ports
ICA / HDX
TCP
1801
SmartAuditor
TCP/UDP
MSMQ
1812
RADIUS authentication
TCP/UDP
RADIUS connection
1812
RADIUS authentication
TCP/UDP
RADIUS connection
RADIUS authentication
TCP/UDP
RADIUS connection
2049
NFS
TCP
2049
CloudStack/CloudPlatform
SSVM
TCP
SSVM to NFS
2049
XenServer
NFS Storage
2101
Storage
MSMQ Service (default)
TCP
SmartAuditor
TCP
MSMQ-DCs
1812
Page 20
By Port
Port
Product
Component
Type
Details
2103
SmartAuditor
TCP
MSMQ-RPC
2105
SmartAuditor
TCP
MSMQ-RPC
2107
SmartAuditor
TCP
MSMQ-Mgmt
2179
Lab Manager
End-Device to
Virtualization Host
TCP
2179
StageManager
End-Device to
Virtualization Host
TCP
2179
XenClient
Hyper-V
TCP
2512
Common Citrix
Communication Ports
IMA
TCP
Independent Management
Architecture (IMA)
2513
Controller administration
TCP
IMA-based communication
2513
Common Citrix
Communication Ports
Previous versions of Access
Gateway Standard / Advanced
Edition
Common Citrix
Communication Ports
Management Console
TCP
AAC administration
TCP
IMA-based communication
TCP
3003
High Availability
UDP
3008
High Availability
TCP
2513
2598
3008
Java administration
TCP
3009
High Availability
TCP
3010
High Availability
TCP
Java administration
TCP
High Availability
TCP
UDP
3260
XenServer
Storage
TCP
iSCSI Storage
3268
LDAP authentication
TCP
3268
TCP
3268
Password Manager
TCP
3268
AppController
Authentication
Credential Store on Active
Directory
LDAP Authentication
TCP
3011
3108, 3148,
3168, 3188
3148
TCP
Page 21
By Port
Port
Product
Component
Type
Details
3268
XenDesktop
VDA Agent
TCP
3269
AppController
LDAP Authentication
TCP
3269
AppControler
TCP
3269
Password Manager
Authentication
Credential Store on Active
Directory
TCP
3306
CloudStack/CloudPlatform
MySQL
TCP
3389
Branch Repeater
Administration
TCP
3389
Lab Manager
End-Device to Virtual
Machines
TCP
3389
StageManager
TCP
3389
XenDesktop
End-Device to Virtual
Machines
Virtual Desktop Agent 5
TCP
3389
XenServer
TCP
3527
SmartAuditor
XenCenter
MSMQ Service (default)
UDP
MSMQ-Ping
3922
CloudStack/CloudPlatform
Console Proxy VM
TCP
SSVM
TCP
Virtual Router
TCP
4443
AppController
Administration
TCP
GUI Administration
5900
Lab Manager
End-Device to Virtual
Machines
TCP
5900
NetScaler LOM
Administration
TCP
5900
StageManager
End-Device to Virtual
Machines
TCP
5900
XenServer
XenCenter
TCP
5900 - 5999
Lab Manager
End-Device to
Virtualization Host
TCP
5900 - 5999
StageManager
TCP
5985
XenDesktop
End-Device to
Virtualization Host
Virtual Desktop Agent 5
TCP
Page 22
By Port
Port
Product
Component
Type
Details
Used when you execute the Invoke
NSCLI option. Under Device, right
click under Map Between Command
Center Server and NetScaler. The
ping is the SNMP ping.
Inter-server communication (version
6.0 and later)
6010
Command Center
TCP
6890 6904
Provisioning Services
Server Communication
UDP
6901
Provisioning Services
Target Devices
UDP
6901, 6902
6905
Provisioning Services
Target Devices
UDP
6905 - 6909
Provisioning Services
Server Communication
UDP
6910
Provisioning Services
Boot Login
UDP
6910 6930
Provisioning Services
Streaming Services
UDP
7279
TCP
8010
Workflow Studio
Console
TCP
8080
CloudStack/CloudPlatform
User/Client/API
TCP
User/Client/API to CloudStack
Management Server - Management
Port (authenticated communication)
8080
Common Citrix
Communication Ports
Application / Desktop
Request
TCP
XML Service
STA
TCP
8080
XenDesktop
TCP
8082
License Management
Console
TCP
8083
License Management
TCP
8096
CloudStack/CloudPlatfrom
User/Client
TCP
User/Client to CloudStack
Management Server - Management
Port (unauthenticated
communication)
8100
XenDesktop
Microsoft Hyper-V
Virtualization
Infrastructure
TCP
8008
Common Citrix
Communication Ports
ICA/HDX from
HTML5 Receiver
TCP
Page 23
By Port
Port
Product
Component
Type
Details
8200
GoToMeeting
GoToWebinar
GoToMyPC
GoToAssist
TCP
8250
CloudStack/CloudPlatform
CloudStack Management
Server
Console Proxy VM
TCP
TCP
SSVM
TCP
Virtual Router
TCP
8443
XenClient
Administrator
TCP
8443
Lab Manager
End-Device to Lab
Manager Server User
Interface
TCP
TCP
Appliance administration
TCP
Administration Website
TCP
Appliance administration
TCP
9001
9002
Appliance administration
TCP
AAC
9035
Web Console
TCP
9036
EdgeSight
Agent
TCP
9090
CloudStack/CloudPlatform
9091
CloudStack Management
Server
Command Center
9002
9005
9092
TCP
TCP
Command Center
TCP
Command Center
TCP
Page 24
By Port
Port
9094
9094
9443
Component
Type
Details
Command Center
TCP
Command Center
TCP
Command Center
TCP
StageManager
End-Device to
StageManager Server User
Interface
TCP
VMAgent to StageManager
Server
TCP
Product
10802
Provisioning services
Write Cache
UDP
10803
Provisioning services
Write Cache
UDP
11168
XenApp
TCP
16500
XenDesktop
UDP
16509
XenDesktop
UDP
16500-16509
UDP
21605
Common Citrix
Communication Ports
StorageLink
StorageLink Service
TCP
Communication of StorageLink
Manager to StorageLink Service
21605
XenServer
Storage
TCP
27000
TCP
35110 - 35112
Lab Manager
TCP/UDP
35110 - 35112
StageManager
VMAgent to StageManager
Server
TCP/UDP
54321
Provisioning services
Console
TCP
SOAP Service
54322
Provisioning services
Console
TCP
SOAP Service
Page 25
Revision
Change Description
Updated By
Date
2.4
Steve Weizman
2.3
2.2
Steve Weizman
Stehanie Roper,
June 2013
2.1
Fred Donovan
December, 2012
2.0
Fred Donovan,
John Scoles
February, 2012
1.9
Fred Donovan
January, 2012
1.8
Added CloudStack
John Scoles
1.7
Steve Weizman
1.6
John Scoles
1.5
Tarkan Koolu
1.4
John Scoles
November, 2010
1.3
Update
Tarkan Koolu
November, 2010
1.2
Update
John Scoles
November, 2010
1.1
Update
John Scoles
June, 2010
1.0
Initial document
Michael Palesch
Thomas Berger
Tarkan Koolu
April 2014
September 2013
November, 2011
October, 2011
September, 2011
July, 2011
Page 26