Microsoft Intune NAC (Network Access Compliance) Check for Citrix SSO iOS - “Citrix SSO App on iOS uses Apple’s Network Extension framework to establish VPN. The Network Extension framework imposes certain limitations on Citrix SSO due to which the existing NAC implementation had to be modified.

To enable NAC on Intune for Citrix SSO please follow the below steps:

1. Admins will now need to enable NAC check on Intune while creating a VPN profile for Citrix SSO on Microsoft Intune.
2. If NAC was previously configured on NetScaler, no additional changes are required. If not enabled already, please follow this guide.

Software Requirements for NAC:

1. Microsoft Intune (latest Cloud update)
2. Citrix Gateway build – Currently it is not available and customer has to wait for the 12.0.59.x refresh build and expected to be available by Nov 2nd. This article will be updated with details once it is available
3. Citrix SSO App build 1.1.6 and later.