This message was deleted.

Doublecheck the CVAD policies. According to docs "Citrix Receiver will not try to establish a DTLS connection unless both HDX Adaptive Transport  and Allow Session Reliability is configured on XenApp / XenDesktop and there is a NetScaler Gateway." If you're still seeing users connecting through gateway with UDP then based on docs you're seeing incorrect behavior.

I'm not seeing connections using UDP, we were seeing failures to connect when DTLS was enabled, and that was the only piece of the UDP puzzle enabled. We have Adaptive transport off (confirmed by the ICA file), and we have session reliability unchecked in storefront netscaler STA config.

OK, then it shouldn't be trying UDP at all from my understanding. You should be able to see if you're getting UDP connection attempts by running "nstcpdump.sh udp port 443" from shell. I'd suggest opening a case with support though as there might be a counter they can look at instead of having to catch someone in the act.

We're in the process of doing that. Unfortunately the logs are cumulative to the appliance, not specific per vserver so we can't tell definitively if the vserver we DONT want DTLS used on was getting those connections. We should have done it during the outage, but the priority was getting the users back working. Didn't help that the working users disconnected when DTLS was disabled 😕 That is also another weird thing - Citrix said disabling DTLS should not affect non-DTLS connections, but ours dropped all 5500 connected. Makes you wonder if the receiver is ignoring the ICA file and still trying to connect via DTLS/UDP.

Yikes, that definitely doesn't sound right. If you get a case opened and don't mind, shoot me the SR number. I'd be interested to see what they come back with.

Sure thing. We have a case opened on the ADC side and the CVAD side.

I have a case opened as well on the "whole EDT/DTLS" as well. My issue is it works, but make the sessions experience very painful. I switched back to TCP and things are smooth again. Stinks for me. It appears they are stuck and isnt sure what to do. The communication is low, I am just letting the ticket set and to see how long it will take.