Citrix Secure Access™

Integrated packet capture tool for Citrix Secure Access for connectivity troubleshooting

The Citrix Secure Access VPN client for Windows includes an integrated network packet capture tool to help troubleshoot connectivity issues. Captured files are automatically saved to the logs\captures\ directory under the Citrix Secure Access installation folder. Automatic file rotation helps limit disk usage. The packet capture files are also automatically included in the diagnostic log bundle when logs are collected for Citrix Support.

Note:

  • The network packet capture tool is available only in the new WebModule UI.

  • The Citrix Secure Access installer includes the packet capture utility and the required WinDivert kernel driver dependencies. No separate installation is required.

Start a packet capture

  1. Open the Citrix Secure Access application.
  2. Click the Settings tab.
  3. In the left panel, select Troubleshooting.
  4. In the right pane, go to the Network capture section.
  5. Click Start network monitor to begin capturing network traffic.

Start a packet capture

When capture starts, the status changes to Capture in progress… and the Stop button becomes available.

Stop a packet capture

  1. In the Citrix Secure Access application, navigate to Settings > Troubleshooting.
  2. When capture is active, the Network capture panel shows Capture in progress… with a red indicator.
  3. Click the Stop button to end the capture.

Stop a packet capture

After capture stops: download or restart

Once the capture stops, the status changes to Capture complete (green indicator).

You can then choose one of the following options:

  • Download: Saves the capture file to your local machine.
  • Restart: Starts a new packet capture session immediately.

An information banner displays the full path where the capture file is saved. For example:

C:\Program Files\Citrix\Secure Access Client\logs\captures\csatrace_20260407_092046.pcap

The .pcap file can be opened in a packet analysis tool such as Wireshark for further investigation or shared with Citrix Support.

Integrated packet capture tool for Citrix Secure Access for connectivity troubleshooting