So here are my thoughts about Citrix LAS... Just kidding, I cannot read any further LAS-Post here - let's talk about the important things - Security! In 2024, NetScaler introduced the new Expression AAA.USER.SOURCEIP for helping to protect Cookie Hijacking. Now, this feature got an important update for environments, where NetScaler isn't able to receive the User's Client Source-IP (Enterprise Proxy / NAT / Other ADC's in front of) I'm talking about two new Expressions which are using X-Forwarded-For (XFFIP) as a help to get Source-IP informations. Read more here and why it isn't working out of the box with ICA-Proxy. https://www.julianjakob.com/netscaler-session-hijack-protection-x-forwarded-for/