NetScaler incorrectly classifies the SSLVPN messages generated by user activity as an error rather than informational. For example observe the following logs in messages file:

messages.16:Jan 15 18:13:01 <local0.err> 10.39.0.137 01/15/2015:23:13:01 GMT Netscaler2 0-PPE-0 : SSLVPN REMOVE_SESSION 107928 0 : Sessionid 1464 - User shauna.funston - Client_ip 99.249.55.121 - Nat_ip "Mapped Ip" - Vserver_ip 10.39.0.138 - Errmsg "user initiated vpn ica session remove"

messages.16:Jan 15 18:13:01 <local0.err> 10.39.0.137 01/15/2015:23:13:01 GMT Netscaler2 0-PPE-0 : SSLVPN REMOVE_SESSION 107928 0 : Sessionid 1464 - Us er shauna.funston - Client_ip 99.249.55.121 - Nat_ip "Mapped Ip" - Vserver_ip 10.39.0.138 - Errmsg "user initiated vpn ica session remove"

Both the preceding messages are generated when the user terminates the connection manually, however they are categorized as error messages.

This can be an issue for users who only want to monitor the actual error messages through syslog or in reporting tool. Because of this issue syslog or reporting tool might get filled up with these messages which actually should be tagged as informational only.

This issue has been fixed in later builds. Refer to Citrix Documentation - Fixed Issues in Previous 10.5 Builds

Syslog messages generated by user action are logged as error messages instead of informational messages.

[From Build 61.11] [#538212]