This message was deleted.

I thought duo was changing from the standard push interface to a newer one and it required an updated config on the auth proxy. I’ll look in a bit

Was there a change regarding the theme on the NS? Sounds like you are using the iframe integration?

It's been about a year since I've had to do it but last fall I was doing a number of NS upgrades and had to address this when we were switching to advanced policies and such

Does this help? https://duo.com/docs/citrix-netscaler-nfactor

Thank you both Benjamin and Henry, that's exactly what I need - problem is the used iframe