Unable to launch Citrix session through Netscaler

With Netscaler Build 13 Citrix introduced. a new SSO policy.  Have you enabled that?

https://docs.citrix.com/en-us/citrix-adc/13/aaa-tm/enable-sso-for-auth-pol.html

https://twitter.com/cstalhood/status/1302927154452344832

Yes. We have the traffic policy in place and it works. A Windows or Mac client can connect without issue.

The 3040 CAN enumerate applications/desktops. But, when you click on any, it immediately fails.

The error in the 3040 Event log is:

Vdimgr: connecting to "ica: VDI" failed. error => Error: read ECONNRESET

It is the firmware on the Netscaler that is the issue; or the Citrix Package on the terminal. Either way, the combination of the most recent Netscaler firmware, with the most recent firmware/Citrix Package for the 3040, does not work.

There is a new Citrix Workspace App for Linux, 2009 that was just released. Perhaps as soon as Dell incorporates that and releases a new Citirx Package, that might resolve the issue.

Same issue here, we have the same versions as you and it all works with Web/Workspace app just not with Wyse machines, older gateway version works.

Did you manage to get this working?

the fix is not to use the nshttp_default_strict_validation as it is too strict for WYSE currently, you can duplicate nshttp_default_strict_validation and create a wyse variant of the policy without the white space:

System->Profiles

Under the HTTP Profiles Tab hit the 3 dots on the left side of nshttp_default_strict_validation and click add to make a duplicate, name it something like nshttp_default_strict_validation_wysefix and make sure to UNCHECK "Mark HTTP Header with Extra White Space as Invalid".  then click Create and go back to your Citrix Gateway->Virtual Servers then scroll down to Profiles and hit Edit and change the HTTP Profile to the new one you created above.

This is awesome article and resolved the P1 case today. thank you Andrew.