Citrix Virtual Apps and Desktops

Virtual channel allow list policy settings

August 22, 2024

Contributed by:

C C

The Virtual channel allow list policy setting enables the use of an allow list that specifies which virtual channels are allowed to be opened in an ICA session.

When disabled, all virtual channels are allowed.

When enabled, only Citrix virtual channels are allowed.

To use custom or third-party virtual channels, add the virtual channels to the list. To add a virtual channel to the list:

Enter the virtual channel name followed by a comma.
Enter the path to the process that accesses the virtual channel.

More executable paths can be listed, and the paths are separated by commas.

For example,

CTXCVC1,C:\VC1\vchost.exe

CTXCVC2,C:\VC2\vchost.exe,C:\Program Files\Third Party\vcaccess.exe

Starting with Citrix Virtual Apps and Desktops 7 2109, virtual channel allow lists are enabled by default. For more information on adding virtual channels to the allow list, see Adding virtual channels to the allow list

If you’re using the HDX RealTime Optimization Pack for Skype for Business, add the virtual channel to the allow list. For more information, see the HDX RealTime Optimization Pack documentation.

Important:

The VDA machines must be rebooted for the setting to take effect.

For more information about virtual channels, see ICA virtual channels.

Virtual channel allow list logging

You can use this policy setting to configure the level for Virtual Channel Allow List logging.

The following options are available:

Options	Description
Disabled	Disables all log events.
Log warnings only	Events are logged only for custom Virtual Channels that try to open and that are not part of the allow list.
Log all events	All events are logged

Virtual channel allow list log throttling

You can use this policy setting to configure the frequency for logging events for an active session.

All events for each virtual channel will be logged on their first occurrence. Repeated events will be suppressed for the duration of the throttling period while the session is active. If a session is disconnected, the throttling period is reset.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Virtual channel allow list policy settings

August 22, 2024

Contributed by:

C C

August 22, 2024

Contributed by:

C C

Virtual channel allow list policy settings

Virtual channel allow list logging

Virtual channel allow list log throttling

In this article