Common Citrix^® communication ports

As you are building your infrastructure, it's important to know what type of protocols will run across your network. Sometimes, system administrators separate devices with network routers, switches, and firewalls that can block the XenDesktop implementation from working. The following is a list of protocols that you should allow through the routers, switches, and firewalls. All the Citrix protocols can be found in CTX Article 101810 at http://support.citrix.com/article/CTX101810.

Citrix product	Protocol	Port(s)	Description
Citrix license server
License Manager Daemon	TCP	27000	Handles license requests
Citrix Vendor Daemon	TCP	7279	Check-in and check-out of licenses
License Management Console	TCP	8082	Browser-based administration console
Common communication ports
Citrix Receiver	TCP	80, 443	Communication with StoreFront or the NetScaler gateway
ICA, HDX	TCP	1494	Desktops and applications flow over this protocol
Session Reliability	TCP	2598	Session Reliability for ICA, HDX
Management Console	TCP	2513	Citrix Management Consoles
XML Server	TCP	80, 8080, 443	Desktop and application requests
STA	TCP	80, 8080, 443	Secure Ticket Authority embedded into XML service requests
Citrix XenDesktop
Citrix XenServer	TCP	80, 443	Communication with XenServer
Microsoft Hyper-V	TCP	8100	SCVMM Administrator Console
VMware vSphere	TCP	443	VMware Web Services communication
Broker	TCP	80, 443	Used for communication with VDA, SDK, and XML service
Active Directory Identity Service	TCP	80	Used for Active Directory communications
Configuration Service	TCP	80	Used by the configuration service
Host Service	TCP	80	Used by the host service
Machine Creation Service	TCP	80	Used by machine creation services
Machine Identity Service	TCP	80	Used by machine identity services
License Configuration Service	TCP	80	Used by the licensing service
Desktop Director	TCP	80, 443	Used by Desktop Director
Virtual Desktop Agent	TCP	80	Communication with the Desktop Delivery Controller
	TCP	135, 3389	Communication with the Desktop Delivery Controller for remote assistance
	UDP	16500~16509	HDX audio
	TCP	80, 5985	Communication with Desktop Director
Citrix Desktop Service	TCP	80	Used by the workstation agent to communicate with the Broker
Database	TCP	1433, 1434	Microsoft SQL Server
Citrix XenServer
XenCenter	TCP	22	SSH
	TCP	443	Management using XenAPI
	TCP	5900	VNC for Linux guests
	TCP	3389	RDP for Windows guests
Resource Pool	TCP	22	SSH
	TCP	443	Management using XenAPI
Infrastructure	TCP/UDP	123	Network Time Protocol
	TCP/UDP	53	DNS
	TCP	389	Active Directory
	TCP/UDP	139	ISO Store: NetBIOS Session Service
	TCP/UDP	445	ISO Store: Microsoft-DS
Storage	TCP	3260	iSCSI storage
	TCP	2049	NFS storage
	TCP	21605	SOAP over HTTP StorageLink