This message was deleted.

SSL VPN only when needed. I would always prefer ICA-Proxy. Have done an „Always-On“ deployment for 1k endpoints but it was kind of bumpy. Lot of disconnects with the Gateway plugin. After weeks we found a stable version. I wouldn’t do it again 🙈🙂

I have to agree with Julian. Its such a shame because when it does work its great and very configurable but I've always had small niggly issues.

Thanks guys, that's mirroring my experience. Some users are rock solid, others have continual issues, NetScaler end seems to be fine but the client is very flaky. Becoming very obvious now customer is trying to roll out VPN to a much wider user base, but they are set on using the NetScaler and not their Palo or some other alternative 😬

Agree with you all. On the ADC site I think config is easy and stable for full SSL VPN and it works good. Problem is mainly on the client side. All plugins (Windows, mac, Linux) are full of bugs and we also searched and tried many clients to find the most stable and working using for rollout to all clients. Citrix has to investigate in the plugin, definitively.

We only give the SSL VPN out to limited users in our IT department for those same reasons. The client piece becomes disconencted from the web page interface unless you do things EXACTLY correct, and sometimes even then. You have to have mid-level computer skills at a minimum to resolve it short of a reboot, and telling customers to reboot multiple times a day is a non-starter