By Cisco Duo
Publication Date: 2026-04-30 18:52:00
Duo integrates with your on-premises NetScaler (formerly Citrix Gateway) to add RADIUS authentication to remote access logins supporting Duo Push, phone call, or passcode two-factor authentication.
Action Required: April 15, 2026 Duo CA Bundle Expiration
Duo products that use certificate pinning, such as the Duo Authentication Proxy, require a software update for uninterrupted use. Legacy clients could stop working at any time after April 15, 2026.
Check your Duo Authentication Proxy installations used for NetScaler RADIUS authentication and upgrade them if they are not running version 6.5.1 or later.
Please visit Duo Knowledge Base article 9451 for more information and guidance.
Overview
To add Duo two-factor authentication to your NetScaler you’ll configure the Duo Authentication Proxy as a secondary…