How often in your enviroments do you see cloud connectors (in on prem resource location) lose connection to citrix cloud control plane urls ? Event id 3001 pops up on cloud connectors and it starts to transition to LHC mode. VDA's de register and re register against high availability service (secondary broker service) same with XML service on onprem storefront to the cloud connector's. This lasts for a few mins to 20 mins and then it transitions out of LHC mode and event id 3003 pops up this can happen every couple weeks in this enviroment. During this transition you get kicked off your on prem NS GW session (session interrupted/session reliability) which i presume is because the VDA is unregistering/re registering or the DIA for internet has issues or the FW ? (All internal connections bypassing the gateway are fine and dont drop) . I got all the Citrix cloud URLS for cloud connectors from the json file whitelisted on firewall and no proxy or pac file is set so no SSL inspection. I check status.cloud.com and no issues reported at the time of the issue and the builtin Cloud services connectivity test passes and also the other cloud connectivity test tool . We are meant to have redundant DIA lines for internet so it is baffling. Previously when performing a nslookup to our customerid\xendesktop.net the public IP kept constantly changing every few mins so we beleived the Firewall when performing DNS queries had the wrong IP but that was a while ago and i am not sure it is the issue