Citrix ICA and TCAM

This table summarizes how NAM reports Citrix user names. Depending on the Citrix infrastructure and XenApp configuration, NAM can pick up user names from the network protocol monitoring, or using the TCAM agent installed on the XenApp server, or both, or neither of the techniques can be applied.

  • User names detected from the ICA protocol analysis take precedence over user names reported by the TCAM agent.
  • ICA network protocol decode works for XenApp and XenDesktop.
  • TCAM agent cannot be installed on XenDesktops. It works for XenApp only. Effectively for XenDesktop there is only one method of user name recognition available (protocol decode).

Table notes (see Notes column):

  1. Whichever comes first to the analyzer in the NAM Probe
  2. TCAM user name not reliable - may not be reported for some users. Some Windows configurations will not report some user names to TCAM - this depends on the specifics of individual client connections. Check Windows Security Log before installing TCAM.

Conditions and Citrix user name reporting in NAM:

Condition: Is there a NAT device used on the Client side? Condition: Is the NetScaler present? Condition: Is the XenApp Session Reliability enabled? Condition: Is the Secure ICA enabled? Condition: Iis the TCAM installed on XenApp server? Would NAM ICA decode pick up the user name from the network traffic? Would the TCAM report the user name (for the client-to-XenApp session)? Notes
N N N N N Y N
N N N N Y Y Y 1
N N N Y N N N
N N N Y Y N Y
N N Y N N Y N
N N Y N Y Y Y 1
N N Y Y N N N
N N Y Y Y N Y
N Y N N N Y N
N Y N N Y Y Partial 2
N Y N Y N N N
N Y N Y Y N Partial 2
N Y Y N N Y N
N Y Y N Y Y N
N Y Y Y N N N
N Y Y Y Y N N
Y N N N N Y N
Y N N N Y Y Partial 2
Y N N Y N N N
Y N N Y Y N Partial 2
Y N Y N N Y N
Y N Y N Y Y N
Y N Y Y N N N
Y N Y Y Y N N
Y Y N N N Y N
Y Y N N Y Y N
Y Y N Y N N N
Y Y N Y Y N N
Y Y Y N N Y N
Y Y Y N Y Y N
Y Y Y Y N N N
Y Y Y Y Y N N