Which port does a Citrix Administrator need to open for Cloud Connector to communicate with the internet?

The Citrix Cloud Connector requires outbound connectivity to the internet to establish a secure communication channel with Citrix Cloud services. This connection is initiated from the Cloud Connector to the cloud and uses Transport Layer Security (TLS) for encryption. The standard port for this secure HTTPS traffic is TCP port 443. The administrator must ensure that the firewall allows the Cloud Connector to make outbound connections on this port to the required Citrix Cloud FQDNs.

A. 80: This port is for unencrypted HTTP traffic and is not used for the secure control communication between the Cloud Connector and Citrix Cloud.
B. 3389: This is the default port for Microsoft Remote Desktop Protocol (RDP) and is unrelated to the Cloud Connector's communication with Citrix Cloud services.
C. 8080: This is a common alternate port for web or proxy traffic but is not the standard port required for Cloud Connector to Citrix Cloud communication.

1. Citrix Product Documentation. (2023). System and Connectivity Requirements.

Section: Internet Connectivity Requirements > Cloud Connector outbound traffic

Content: "The Citrix Cloud Connector requires outbound connectivity on port 443 to the internet. All connections are established from the Cloud Connector to the cloud using the standard HTTPS port (443) and the TCP protocol."

2. Citrix Product Documentation. (2023). Citrix Cloud Connector Technical Details.

Section: Cloud Connector Communication

Content: "The Cloud Connector only requires outbound TCP 443 connectivity to the Internet. It does not accept any incoming connections from the Internet." This section further details that all communication is encrypted and initiated from the connector.

3. Citrix Tech Zone. (2022). Reference Architecture: Citrix DaaS.

Section: Citrix Cloud Connector

Content: "The Cloud Connector establishes a secure link with Citrix Cloud through outbound port 443. The Cloud Connector does not require any inbound ports to be opened on the firewall." This architectural document reinforces the outbound-only nature of the communication over port 443.