> Source: [sk1000300](https://support.checkpoint.com/results/sk/sk1000300)

# sk1000300 - Mobile Access Portal Fails to Launch Citrix StoreFront Sessions

| Property | Value |
|----------|-------|
| Solution ID | sk1000300 |
| Date Created | 2026-10-21 |
| Last Modified | 2026-11-12 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R82.10, R82 |
| OS | Gaia |
| Platform | Open Server |

## Symptoms

- * Users download a Citrix Independent Computing Architecture (.ica) file through the Mobile Access Portal.
* The Citrix session does not start when users open the downloaded file.  
* SmartConsole logs show an allowed action for the related Citrix requests.
* The affected Security Gateway's Mobile Access log contains authorization failure messages.
* No packet drops appear in zdebug drop output.
* The \`httpd\` logs show request parsing and input filter failures.   
  Example:  
  `configurationWrapper::Host::isIncludesExt: Server candidate is not included
  Authorization::WebAppAuthorizeCommand::isResourceSatisfied: Host is not satisfied`

## Cause

The reported failure occurs during Citrix authorization in the .ica session launch flow. Users can download the file, but the session does not start.

The `httpd` process terminates during this flow, and `Citrix_logic::Perform_authorization` function is called during the Citrix StoreFront \`.ica\` launch flow.

## Solution

This problem was fixed. The fix is included in:

* [Jumbo Hotfix Accumulator for R82.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.20/index.html) starting from Take 14
* [Jumbo Hotfix Accumulator for R82.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82.10/Default.htm) starting from Take 52
* [Jumbo Hotfix Accumulator for R82](https://sc1.checkpoint.com/documents/Jumbo_HFA/R82/Default.htm) starting from Take 132
* [Jumbo Hotfix Accumulator for R81.20](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.20/Default.htm) starting from Take 174

If you choose not to upgrade, Check Point can supply a **Hotfix** . [Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.  
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.  
For faster resolution and verification, please collect [CPinfo files](http://supportcontent.checkpoint.com/solutions?id=sk92739) from the Security Management Server and Security Gateways involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

<br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content