This message was deleted.

May or may not be related but I've been reading many reports of patch KB5032196 (November Update) breaking NPS Radius Servers, in particular when using PEAR. Issue seems to be writing to the log file location, and when logs cant write then it denies all requests.

From this error message it seems that the credentials are not passed through with the ICA File. Radius seems to be fine, otherwise Netscaler should not forward to storefront. Is storefront itself also authenticating the users? Or is the "delegate Authentication to Netscaler" checkbox enabled.

Customer updated their Watchguard version on the VDA and resolved it.