Citrix NetScaler PUSH Authentication Configuration

Products

• VIP Service

Issue/Introduction

After enabling the PUSH policy in VIP Manager, the users are still not receiving Symantec VIP PUSH notifications when authenticating through Citrix NetScaler

Environment

Citrix NetScaler 12.1, 13.0, and 13.1

Symantec VIP Enterprise Gateway 9.10.x or higher

Cause

Symantec VIP PUSH must also be enabled on the local Radius service. Additionally, PUSH initiation requires user input for this specific integration. The user user must input the word "push" or "send" instead of the OTP code.

Resolution

Steps to enable and use Symantec VIP PUSH with Citrix Netscaler

1. Enable PUSH in VIP Manager (VIP Manager > Policies > Mobile Push Authentication Policy > Enable Mobile Push = Yes)
2. Enable PUSH on local Radius services (EGConsole > Validation > {NetScaler Radius} > VIP Push Authentication)
3. Enter the word "push" or "send" instead of the OTP Code on the Citrix NetScaler logon page:
   

Additional Information

Refer to Symantec VIP Integration Guide for Citrix NetScaler (version) here: https://techdocs.broadcom.com/content/dam/broadcom/techdocs/us/en/dita/symantec-security-software/identity-security-authentication/vip/generated-pdfs/Integration_Citrix_NetScaler_13.pdf