Citrix VPN slows opening EA in restrictive environment

[Mauricio Moya (Arquesoft)]

A client with a very restrictive environment has implemented Citrix VPN in order workers can connect and work from home in the corporative network. Everything works well except EA (tested in version 10 and 13). In the simplest scenary I tested, we have a fresh EA instalation (never have had EA installed previously), and a site license (not dealing with database repositories nor eap files).

When connected via cable in the network (as they  normally do everyday), EA opens instantly, as all of us are used to. BUT, when you unplug the cable, use a data cell phone connection (in order to simulate you are out of the corporative network), and connect to the Citrix VPN, if you try to open EA, it delays the opening about 2 to 5 minutes (you can see the app listed in the Windows task manager, but the splash screen just opens 2 to 5 minutes after double clicking the shortcut).

We tested and noted that within the 2 to 5 minutes of "doing nothing", the PC actually tries to connect to the LDAP/Active directory server and this servers seems to be slow to answer in such circumstances. Some of this calls are delayed, other rejected and finally, when the answer is returned, the delay time ends, and EA finally opens.

The question is: why does EA invoke the LDAP server? We supposed it is related to resolve "the user opening EA" through the permissions in the VPN, but, why other apps does not work like that? I mean: Window calc, Paint, Word.... all of them are apps running in the same conditions but only EA delays opening.

Any idea? Anyone with the same or similar issue?

[Glassboy]

In the network trace for the VPN are you seeing the Sparx EA client access the licence server?

[Mauricio Moya (Arquesoft)]

In the network trace for the VPN are you seeing the Sparx EA client access the licence server?

With license sever do you mean the LDAP server? if so, no. We just can see the attemps of the PC over the net (not the individual apps).
If you mean the EA server license, no, we are using site license for the test.

[Glassboy]

In the network trace for the VPN are you seeing the Sparx EA client access the licence server?

With license sever do you mean the LDAP server? if so, no. We just can see the attemps of the PC over the net (not the individual apps).
If you mean the EA server license, no, we are using site license for the test.

I'm really unsure what you mean.  EA has either fixed or floating licences.  Generally VPN problems are the client not being able to see the licence server because the appropriate ports or IP address are not open through the VPN server.  PCs talk to domain controllers all the time, and unless you've used something like Microsoft Process Monitor to verify that EA is making a call to the DC it's probably a red herring.

[Mauricio Moya (Arquesoft)]

@Glassboy: we have a fixed license in this test.

So, the fact is: EA opens slow when connected to the VPN, and the PC makes calls to the  LDAP server. The LDAP server delays the answer, and when it answers, EA opens. But why?

[Glassboy]

@Glassboy: we have a fixed license in this test.

So, the fact is: EA opens slow when connected to the VPN, and the PC makes calls to the  LDAP server. The LDAP server delays the answer, and when it answers, EA opens. But why?

Use Microsoft Process Monitor and capture a trace on VPN.  Then filter on the EA executable and associated tree.  You'll see what EA is trying to do at the network level.