Product Documentation

Configuring Third Party Software

Oct 16, 2015

In some cases, you may need to perform software configuration tasks to ensure that EdgeSight works properly in your environment. Review the following guidelines and implement the recommendations as required. In addition, review the Known Issues and Fixed Issues in EdgeSight 5.4.

Configuring Antivirus Software

You must configure antivirus software running on your EdgeSight Server and all managed devices (machines running EdgeSight Agent) to exclude specific processes and files. If these files and processes are not excluded, communications between the agents and the server may be disrupted, and performance on monitored devices can be degraded.

Note: The paths and filenames provided are based on default installation values for EdgeSight and other software components. If you have specified non-default paths and filenames, use the values applicable to your installation. You can use the About page on the EdgeSight Server Console to identify installation paths and filenames on the server.

To configure antivirus software on devices running EdgeSight Agent:

  • Ensure that the following agent service, which is a script host, is not subject to script blocking:

    %ProgramFiles%\Citrix\System Monitoring\Agent\Core\rscorsvc.exe

  • Exclude the following folder. This folder contains the EdgeSight database, which is highly transactional, along with log files and temporary files:

    %ALLUSERSPROFILE%\Citrix\System Monitoring\Data\ for Microsoft Vista and Windows Server 2008 systems

    %ALLUSERSPROFILE%\Application Data\Citrix\System Monitoring\Data\ for all other systems

If you have agents installed in a virtual desktop environment, exclude the following:

  • The data folder on the EdgeSight Agent Database Server:

    %ALLUSERSPROFILE%\Citrix\System Monitoring\Data\ for Windows Server 2008 systems

    %ALLUSERSPROFILE%\Application Data\Citrix\System Monitoring\Data\ for all other systems

  • Agent data file share. See Setting Up the Agent Data File Share for more information on the file share configuration.

To configure antivirus software on your EdgeSight Server:

  • Ensure that the following files, which are script hosts, are not subject to script blocking:

    %CommonProgramFiles%\Citrix\System Monitoring\Server\RSSH\RSshApp.exe

    %CommonProgramFiles%\Citrix\System Monitoring\Server\RSSH\RSshSvc.exe

  • Exclude the following folder, which contains the Citrix EdgeSight Web server:

    %ProgramFiles%\Citrix\System Monitoring\Server

  • Exclude the SQL DB folder:

    %ProgramFiles%\Microsoft SQL Server\MSSQL\Data\

  • Exclude the IIS Web Site Log files:

    %SystemRoot%\SYSTEM32\Logfiles

Configuring Firewalls

The listen port on the client machine (port 9035) must be open. This is the port on which the agent listens for remote connections from the browser displaying the Citrix EdgeSight console. There is an option during agent installation to automatically set a Windows Firewall exception for the listen port if the firewall is running (enabled or disabled).

If a firewall is installed on the machine hosting the EdgeSight Agent Database Server, port 9037 must be open to allow communication with EdgeSight Server. There is an option during agent database server installation to automatically set a Windows Firewall exception for the listen port if the firewall is running (enabled or disabled). The EdgeSight Agent Database Server is only installed when using the EdgeSight for Endpoints agent to monitor virtual desktops.

Certain types of ports must be opened to allow EdgeSight Server (specifically the User Troubleshooter) to communicate with XenApp. EdgeSight Server uses MFCOM to communicate with XenApp servers. MFCOM in turn uses DCOM and requires that RPC ports are opened on the XenApp server.