CarlStalhood

Maybe this new feature - https://docs.citrix.com/en-us/citrix-daas/hdx-transport/hdx-direct.html

I don't see that policy setting in Studio, but I see it in a GPO that has the Citrix Policies plug-in.

It means that MCS created the VM. I'm guessing you are trying to use a MCS-created machine as a master image. In that case, remove the attribute.

What is your question? Here's another guide - https://www.carlstalhood.com/citrix-gateway-rdp-proxy/

See https://support.citrix.com/article/CTX573346/sessions-not-logging-out-after-enabling-shellbridge

Have you tried binding authorization policies directly to the Gateway Virtual Server?

I think bypassSafetyCheck was removed from recent firmware versions.

Add parentheses around related expressions to make sure they are evaluated before combining with other expressions. For example: (HTTP.REQ.HOSTNAME.CONTAINS(\"s4-preprod.bock.aurora.ab-inbev.com\") && HTTP.REQ.HEADER(\"X-ORIGINAL-HOST\").CONTAINS(\"one.ofc.loc\")) || (HTTP.REQ.HOSTNAME.CONTAINS(\"s4-preprod.bock.aurora.ab-inbev.com\") && HTTP.REQ.HEADER(\"X-ORIGINAL-HOST\").CONTAINS(\"ab-inbev.com\")) || (HTTP.REQ.HOSTNAME.CONTAINS(\"s4-preprod.bock.aurora.ab-inbev.com\") && HTTP.REQ.HEADER(\"X-ORIGINAL-HOST\").CONTAINS(\"azure-api.net\")) || ((HTTP.REQ.HOSTNAME.CONTAINS(\"s4-preprod.bock.aurora.ab-inbev.com\") || HTTP.REQ.HOSTNAME.CONTAINS(\"s4-preprod.bock.aurora.ab-inbev.com\")) && HTTP.REQ.FULL_HEADER.CONTAINS(\"BLACKLINE\"))

That usually means that NetScaler can't connect to the StoreFront server.

Are you testing from a browser? Where exactly is the error occurring? Do you see an authentication page from Citrix Gateway? Is Mac Based Forwarding enabled?

I think the SDX config is stored in a database. You can use the Nitro API to query and configure it. https://developer-docs.netscaler.com/en-us/adc-sdx-nitro-api-reference/current-release/configuration/configuration

If you run Get-BrokerDesktopGroup <DesktopGroupName>, what do you see for AutomaticPowerOnForAssigned and AutomaticPowerOnForAssignedDuringPeak? You can set them to $true.

Check HKEY_LOCAL_MACHINE\SOFTWARE\Citrix\Ica\Session\5\Connection. The number will vary depending on the session ID.

Configure Delivery Group Power Management (or Autoscale) to power on all machines.

Snapshot or backup the VM before upgrading.