To allow only specific ip addresses to Citrix gateway we’ve created data set, responder policy and assigned that responder policy to gateway vip. It works on ldap policy Citrix Gateway vip but we also have saml policy gateway vip. When i assign the same responder policy to saml gateway vip, it is not working as expected. All users are able to get the gateway page. Can someone help me with the responder policy expression to allow only few ips that we allow in the data set? This is what we tried so far on ldap gateway vip which is working. https://www.knowcitrix.com/posts/allow-netscaler-gateway-to-few-ips/

think i ran into this recently, you check this out at all? https://community.citrix.com/forums/topic/249771-saml-redirect-responder-policy-not-working/ using the type aaa_request

So instead of adding the policy as request type i should select aaa_request. Isn’t it

pretty sure thats what i ran into

I ll give it a try .. thank you

Hmmm...How did I miss this....Just had the same thing and asked a question about it today...