Disabling Citrix encryption

[punchme]

I am looking to disable Citrix encryption in my environment (running Presentation Server 3.0 for Windows, with the Win32 client). I've found I can cover the client side by editing MODULE.INI, going to the section for "TCP/IP Transport Driver (win16,win32)" and setting "Encrypt=Off". However, now when I try to start my published application from the client, I get the error message "You do not have the proper encryption level to access this Session". On the Presentation Server side, examining the Client Options of the published applicaiton, the only available encryption options are "Basic", "128-bit Login Only", "40-Bit", "56-Bit", and "128-Bit"... "Off" or "None" are suspiciously absent, and the docs don't seem to provide any explanation for this. Is there a hidden option or another way to get what I want?

Thanks.

--
Phil

 

[Ogi]

Hi,

Use Citrix Management Console, open Applications and then amend the published application of your choice and alter the encryption level from within there.

Cheers,
Carl.

 

[punchme]

Do you mean something special when you say "amend"? As I mentioned in my original post, I found encryption settings within the 3.0 Management Console by opening Applications, right-clicking on my application, selecting "Properties", and then clicking on "Client Options". However, the available encryption options are only:

Basic
128-Bit Login Only (RC5)
40-Bit (RC5)
56-Bit (RC5)
128-Bit (RC5)

There is no option for "none", "off", or "disabled", which is what I am seeking. Is there an option in yours that's not in mine?

 

[Ogi]

Hi,

No, I believe that Basic is the lowest that you can use and it's the default.

I'll check further but am pretty sure that's it.

Cheers,
Carl.

 

[patrickrouse]

May I ask why you want or need to do this?

Patrick Rouse
Microsoft MVP - Terminal Server

http://www.workthin.com

 

[punchme]

I would like to use a hardware WAN compression system. Word on the street is that encryption will foil such systems. I'm really not concerned about data security because I have other solutions for doing encryption across my WANs (doesn't everybody?) and Basic Encryption is apparently crackable anyway.