Gateway

To monitor ICA® connections

December 4, 2025

Contributed by:

C S

You can monitor active user sessions on your server farm by using the ICA Connections dialog box. This dialog box provides the following information:

User name of the person connecting to the server farm
Domain name of the server farm
IP address of the user device
Port number of the user device
IP address of the server running Citrix Virtual Apps and Desktops
Port number of the server running Citrix Virtual Apps and Desktops

Navigate to Configuration > NetScaler Gateway.
In the Monitor Connections section, click ICA Connections.

ICA session logs

The ns.log file prints the ICA session logs in the following format:

May  2 09:29:02 <local0.info> 10.106.40.223  05/02/2023:09:29:02 GMT  0-PPE-1 : default ICA Message 141327 0 :  "[Remote ip = 10.10.99.86:514] [EDT] [CGP][ICAUUID=0006ab3454-d7de-1450-9678-c6333447a76] Received response from STA server {sta-server=10.11.40.222:80,type=ResponseData}"
<!--NeedCopy-->

Starting from release version 13.1 build 50.x, the following enhancements are made to the ICA logs:

Displays connection types such as TCP, EDT, CGP, and SOCKS.
Displays the ICA Universally Unique Identifier (UUID).
All the STA logs are displayed as info-level logs.

Enhanced ICA session monitoring with Citrix transaction ID Integration

Starting from NetScaler Gateway release 14.1 build 60.x, the Citrix transaction ID is directly integrated into NetScaler Gateway’s ICA process. This integration ensures that a consistent ICA UUID is used across NetScaler Gateway, Citrix Workspace app, and Virtual Delivery Agent (VDA) in ICA logs. Previously, the lack of a transaction ID on NetScaler Gateway caused correlation issues during end-to-end ICA session monitoring in NetScaler Gateway, Citrix Workspace app, and VDA environments.

Integrating the Citrix transaction ID into the ICA process offers the following benefits:

Streamlined monitoring: Enables comprehensive and consistent end-to-end monitoring of the ICA session.
Faster issue resolution: Facilitates quicker identification and resolution of issues by providing a consistent ICA UUID. This enhancement reduces troubleshooting time for administrators and support teams.

Integration of NetScaler Gateway with AoT log server

Starting from NetScaler Gateway release 14.1 build 60.x, NetScaler Gateway and the Always-on Tracing (AoT) log server are integrated. This enables NetScaler Gateway to forward detailed log streams to the AoT log server, enhancing monitoring and troubleshooting. For more information about deploying and integrating the AoT log server with your on-premises NetScaler Gateway, see Export audit logs to HEC endpoints.

Limitations

NetScaler Gateway sends the entire System Log to the AoT log server since the syslogAction is bound globally.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

NetScaler Secure Deployment Guide

To monitor ICA® connections

December 4, 2025

Contributed by:

C S

December 4, 2025

Contributed by:

C S

To monitor ICA® connections

ICA session logs

Enhanced ICA session monitoring with Citrix transaction ID Integration

Integration of NetScaler Gateway with AoT log server

Limitations

In this article