1. The customer configured Nfactor authentication in AAA virtual server. The authentication profile under AG is targeted to this AAA virtual server.
2. When using workspace for windows to login AG, the login page will randomly get back to the login page after the login is complete.

Input password:


Get back to the login page after inputting credentials.


3. There is no issue when using web browser to login

Workaround:
set the session timeout in the session action which is bound to the vpn vserver instead of leaving it to default.

set vpn sessionAction AC_OS_xxxxx -sessTimeout 30

Permanent fix
This is fixed as part of NSHELP-31478.
Below NetScaler versions include the fix:

• 13.0 89+
• 13.1 33.54+

Note:If you encounter a similar issue with the fixed version, please verify whether the following command exists in the running config and ns.conf . If it's not present, kindly execute it manually.
 

bind vpn global -policyName SETVPNPARAMS_ADV_POL -priority 65534 -builtin m,p -gotoPriorityExpression NEXT

---

Problem Cause

• The global VPN parameters do not take effect if the VPN parameters are not set at the session action level.
• For the fix to work in case of HA setup, we need to manually disable HA sync on the secondary appliance before upgrading. Otherwise once secondary is upgraded, the new fixed config gets overwritten from the config in the older primary appliance.

Workspace windows - Users get back to the login page after putting in the login credentials with nFactor in 13.0 84.x +