FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Not applicable
Article Id 194494
Description This article describes the specific service on FortiGate for some Citrix components.
Scope FortiOS.
Solution

Some Citrix components require the use of TCP port 1494 for access to applications and virtual desktops. For the same purpose but with session reliability, the TCP port 2598 is used. 

There is a pre-defined Service on the FortiGate, called 'WINFRAME', that it is possible used for this purpose, when creating the Firewall Policy:

Screenshot_1.png

 

For further details on ports used by Citrix components, see the following link:
Tech Paper: Communication Ports Used by Citrix Technologies