When accessing StoreFront site through NetScaler Gateway, StoreFront site gets stuck at "/cgi/setclient?wica" page after authentication.
Use Source IP (USIP) being enabled can cause this issue. Check to see if it is enabled as a global mode. USIP causes the Netscaler to use the client IP (as seen from the internet) as the source when communicating to Storefront instead of using the Netscaler SNIP.
When used, it often causes return traffic issues on the internal network as there is no routing to gateway the traffic from the server to the Netscaler when using USIP. Since the client IP is used instead of SNIP, when the server replies, the route tends to fall under the default gateway route and traffic from server back to the USIP address often goes via the wrong gateway (instead of the Netscaler).
If the USIP is enabled intentionally for this purpose, ensure that the server uses the Netscaler SNIP as it’s default gateway so that traffic may be returned properly to the Netscaler in order to proxy to the client.
Note:
This issue can also occur if there is no connectivity between NetScaler and StoreFront server. Refer to this Citrix Discussions topic for information to troubleshoot this issue.
USIP is enabled and traffic cannot return from Storefront back to the Netscaler for proxy to client.
Notice when tracing, and filtering for either the client IP or server IP, you will find that Netscaler is sending SYN from the client IP to the server IP, and no SYN/ACK is returned.
Citrix Discussions - NetScaler hangs on ../cgi/setclient?wica