WEM Agent cloud integration issue

[Mikael GENAUDEAU1709163664]

Hi,

 

I have an issue with a master Image that can't joined the WEM infra cloud.

- the GPO is well set with the Cloud Connector

- the right rules are set between the CC and the Internet.

- the CC and the VDA Master are on the same VLAN (no firewall in between).

- all the TCP tests are ok between the CC and the VDA master.

- The wem agent is well configured with the Cloud Sercices Options

 

But, there's no communications between the VDA agente and WEM Cloud.

The WEM logs have been enabled on the VDA, it says the following.

 

23:24:48 Exception -> ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient() : System.TimeoutException : Le canal de demande a dépassé le délai imparti en tentant d'envoyer après 00:00:00. Augmentez la valeur du délai d'attente transmise à l'appel à Request ou augmentez la valeur SendTimeout sur Binding. Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long.
23:24:48 Exception -> ConfigurationDataSourcesHelper.CheckAgentBrokerServiceClient() : System.TimeoutException : La requête HTTP à 'https://tlrwxrgkykuofuagbvspzgobztk5rr6w.wem.cloud.com/AgentBrokerSvc/service' a dépassé le délai d'attente alloué de 00:00:00. Le temps alloué à cette opération fait peut-être partie d'un délai d'attente plus long.

 

This is weird... it is as if a "time out" for the communications have been set to 0. 

 

I've reinstalled the Agent, same issue.

 

Any tack would be welcome.

 

Regards

Mikael

 

[James Kindon]

You need to allow the VDAs to talk to the wem cloud service, they do not proxy via the cloud connectors 

[Mikael GENAUDEAU1709163664]

ok... but How I do that?

the VDA already receive the Cloud Connector by GPO for the WEM configurations.

[James Kindon]

https://docs.citrix.com/en-us/workspace-environment-management/service/reference/ports.html
 

plenty of documentation online on Citrix docs…

[Mikael GENAUDEAU1709163664]

But, I just realize this matrix...

First line, doesn't it means that we have to open the TCP 443 for the Whole VDA  to the Citrix Cloud? non!

 

It should be the Cloud Connector Which proxy the request!

[James Kindon]

Correct - this is nothing new, it's always been the case with the WEM service -> it's always been documented too ?

[Mikael GENAUDEAU1709163664]

Documentation is one thing, I try to understand, if it doesn't mater ! 

As I have other client that this port tcp 443 is not  opened from the VDA toward the Cloud and it works fine.

And according to the logs, all goes through the cloud connector...

[James Kindon]

Not possible I’m afraid. WEM Service has never proxied through a cloud connector ever.
 

It uses the CC to register and then talks direct to the cloud service - has been that way since the day it was introduced 

[Mikael GENAUDEAU1709163664]

ok, thanks!