This message was deleted.

How looks the Session Policies Priorities? Could you assign the VPN Session Policy only to your user with high prio? Please check the nsconmgr command line tool whether the policy will work. ICA-Only = YES?

Right now I have it configured back to just a single session policy assigned to the VS, and verfified that ICA-Only is set to false

Please share the CLI line or some screenshots of your session policy. ;-)

Sorry guys, I actually got that sorted. But now, it looks like it is trying to download the agee_setup from /vpns/scripts/vista/agee_setup.exe... and on my ADC, that directory doesnt even exist

I think that‘s a known issue / bug. Please check the directory if the agee_setup exists: /var/netscaler/gui/vpns/scripts/vista/ If not you have import this agee_setup.exe. 😉

yea, i tried to just dl it, but we are a fw version behind bc of a FIPS issue... so I am seeing if i can find the 52.15 build version on our other appliance

there would be at least one, they may have issues connecting to to some internal/external resources because of Windows 10 DNS implementation, it’s covered in Calr’s article DNS = remote. Otherwise you would get DNS resolved randomly be VPN or local client. It may also go crazy with conditional access as you most probably would get to Azure via local interface and would be treated as external connection and not as corporate LAN.