This message was deleted.

I think the difference between the platforms is as follows: There are 2 stores. One with Domain Passtrough (Internal) and one with "Fully Delegated" (External). Windows PCs in the domain get the internal store via GPO. If these PCs are then external, the gateway tries to refer them to the external store and it does not work. On the gateway, the internal store is hidden via a rewrite trick. But why this works on the other three gateways that are already live is beyond me. I'm one step further, through trial and error. For whatever reason, which I still don't understand, the gateway always talks to the internal instead of the external store. I can prove this with a mini test. This means that the external store, with Fully Delegated, is not addressed. Which fits quite well with the error.

Hi, how did you configure the workspace client, with a ?storename or just the url? My best guess would be that it choose the wrong store (maybe the internal one was advertiesed and the external one was hidden??)

Hi! The Workspace Client is configured internally, through GPO first. In the GPO is the full URL discovery string.

SalesStore;<https://sales.mycompany.com/Citrix/Store/discovery;On;Store> for Sales staff

As far as I can tell, Gateway always points to the internal store, although I configured the external store in the Gateway Session Profiles. Bot stores were advertised via Store and the internal Store was hidden on the Gateway via: https://support.citrix.com/article/CTX227266/how-to-hide-storefront-store-from-netscaler-gateway

but the session profile configured store never wins over the configured one ... at least as far as I know

If that's true, that would be something I'm unaware of, aka I didn't know, yet.

at least it would explain your error with the wrong store ...