Citrix virtual channel allowlist configuration

The Citrix platform requires specific DLLs and executables to be allowlisted to enable proper communication. The required virtual channel allowlist configuration depends on the version of Citrix Virtual Apps and Desktops in use.

The following sections detail which components must be explicitly allowed for each supported version.

Checking your Citrix version

To determine which section applies to your environment, check the installed Citrix Virtual Apps and Desktops version from your system's installed programs list.

[IMAGE: Installed programs list showing the Citrix Virtual Apps and Desktops version number]

Versions lower than 2507

• Policy name: Virtual channel allow list
• Status: Disabled

The policy must be created and assigned, but its value set to "Disabled". When the policy is not active, the DVC won’t work.

For detailed configuration information, see the Citrix documentation.

Example

Version 2507 LTSR CU1

• Policy name: Virtual channel allow list for DVC
• Status: Enabled
• Value: C:\Program Files\Nexthink\Collector\Collector\nxtsvc.exe,NxtDvcPlugin,NxtClientMetrics

If the policy is disabled, Citrix allows all virtual channel connections. If enabled, only the connections listed in Value are allowed.

For detailed configuration information, see the Citrix documentation.

Example

Verifying the policy

After applying the policy, confirm it reached the virtual machine by inspecting the corresponding registry entry. The policy name in the registry omits the "DVC" suffix.

Example — Policy enabled

Example — Policy disabled