Disabled TLS 1.0 and TLS 1.1 on both Exchange Server 2010 and Xenmobile - iPhone users are having problems

[John Francis1709160537]

After disabling TLS 1.0 and TLS 1.1 on both Exchange Server 2010 and Xenmobile - iPhone users are having problems getting emails.

 

One user is getting the following message "You have exceeded the time allowed to use this app offline.  When your Internet access is restored, sign on to Secure Hub to continue using this app". I tried asking the customer to restart his iPhone and also log out of SecureHub and log back in and still it is the same.

 

 

 

 

[Alex Rubio]

you said only iOS?  It works fine on Android?

 

It may be worth checking to make sure TLS 1.2 is enabled properly:

https://support.citrix.com/article/CTX247095

 

Other than that I would contact support so we could get logs from SH to see why its failing.

 

[Alex Rubio]

It sounds like Secure hub can't access XenMobile.  Are you sure you correctly set the NetScaler TLS Ciphers?

[John Francis1709160537]

5 minutes ago, Alex Rubio said:

It sounds like Secure hub can't access XenMobile.  Are you sure you correctly set the NetScaler TLS Ciphers?

 

Yes and infact it was set on the XenMobile servers by the Citrix Support.   

As, I remember from another posting of mine, I was told the following and if it was SSL-Bridge. So, we configured this on the XMS nodes. 

It will depend if your configuration is SSL-Offload or SSL-Bridge on your ADC.

If SSL-Offload, you need to configure those on ADC, if SSL-Bridge you need to configure those on each XMS Nodes (reboot required).