Hi all, is there someone who can point me in the right direction. We're running ADFS with MFA from EntraID. On the NS Gateway i get an error message "*Http/1.1 Internal Server Error 43531*" after entering the MFA token. On the ns.log i see the following:

Nov  2 13:31:53 <local0.err> 10.66.185.50  11/02/2024:12:31:53 GMT NETS01 0-PPE-0 : default SSLVPN Message 43953 0 :  "[Remote ip = 62.45.103.71:55029] wi_server is either down or is not vip/csw type {user: <mailto:test.user@customer.nl|test.user@customer.nl>, wihome URL: <https://gateway.customer.local/Citrix/ExternWeb>, port: 443 wi_server_state: 1, wi_server si_cur_flags: 0x24008000}"

Nov  2 13:31:53 <local0.warn> 10.66.185.50  11/02/2024:12:31:53 GMT NETS01 0-PPE-0 : default SSLVPN Message 43954 0 :  "Ica mode status is not okay"

Nov  2 13:31:53 <<http://local0.info|local0.info>> 10.66.185.50  11/02/2024:12:31:53 GMT NETS01 0-PPE-0 : default SSLVPN Message 43955 0 :  "Cannot complete login for user: <<mailto:test.user@customer.nl|test.user@customer.nl>>sessionid <14c>, session state <15>, reason: <unknown>"

Those policies were applied already. In the end it was the FW who was blocking some traffic.

Any chance that you still have classic session policies in place?