How Does TS Agent for Citrix Terminal Server Identify User Login Events?
11858
Created On 03/30/19 02:40 AM - Last Modified 03/05/25 10:04 AM
Question
How does the Terminal Server (TS) agent for Citrix Terminal Server identify user login events?
Environment
- NGFW
- Terminal Server Agent
Answer
When a user logs into Citrix Terminal Server, the TS agent gets notified through the windows API.
The TS agent puts this new login event into a queue and processes allocating port ranges.
Then it pushes the logged in User-ID down to the TS agent kernel driver where sessions are intercepted and the source port is altered.