This message was deleted.

I don't believe the Gateway VPX platform includes any Universal licenses. Using EPA requires additional licensing on the NetScaler side, specifically one Citrix Gateway Universal License per concurrent session.

Thanks for replying. My customer purchased Universal license separately few years ago (2010 🥴). So I have platform license and universal license.

Make sure you disable ICA only on the vServer

ICA only is disabled. EPA scan works on pre-longon. Is just post-logon that does not worked.

Long time since I was working with EPA. What are you trying to achieve with the post logon epa check? Is the same expression working with the pre-logon?

Yes the same expression works with pre-logon. I try to put user in a quarantine group if the computer does not have a specific registry key. The quarantine group have a limited access compared with the full VPN access

Can you see hits on the policy with nsconmsg?

Yes the policy is hit but client security settings in advanced setting of the security tab not worked. I think it's a bug. I use AAA Group, ill will try with a direct binding on the server. Thanks for your help

Good to know. Thanks for sharing 🙈