After upgrading NetScaler Gateway, the device hangs after the logon page at /cgi/setclient?wica.

Complete the following steps to troubleshoot this issue:

1. Run the following command from NetScaler CLI (CTX205578):
   set ssl parameter -svctls1112disable enable -montls1112disable enable
   This should disable TLS v1.1 and TLS v1.2 on the NetScaler globally.

2. Change the Base URL on StoreFront from HTTPS to HTTP.
   Note: Propagate the changes if you have more than one StoreFront server.

3. From the NetScaler Gateway, change the Session Policy to HTTP and point to only "one" StoreFront server if you are load balancing.
   Note: Using the IP address is fine.

4. Run a test by connecting to the NetScaler Gateway and you should be able to enumerate applications\desktops.

5. Change the Base URL on StoreFront back to HTTPS.
   Note: Propagate the changes if you have more than one StoreFront server.

6. Change the Session Policy on the NetScaler Gateway back to HTTPS.
   Run another connection test which should work fine.

7. If you are load balancing StoreFront then keep the Session Policy pointing to a “single” StoreFront server IP for now.

8. Change the Session Policy on the NetScaler Gateway, pointing to your Load Balanced VIP (which should already be HTTPS).

9. If a custom theme is applied to the NetScaler Gateway logon page, then ensure that the custom theme is removed before the upgrade process.
   Refer to the following article for more information to troubleshoot NetScaler Gateway logon page issues: CTX220371 - Must Read Articles Before and After Upgrading NetScaler.
   
   Refer to Citrix Documentation for detailed information:https://docs.citrix.com/en-us/citrix-adc/12-1/upgrade-downgrade-citrix-adc-appliance/troubleshooting.html