Reply to post:

Citrix lost us as a customer effectively over a series of events:

A simple big-fix update for their netscaler product (delivered as a VM) required us to completely re-implement one of the remote access features that it used, even though all the settings were the same, the process didn't change, or anything. This happened a few times. In addition, there were updates at such a rapid cadence that environmental stability became a concern with upper management. (We spent more time applying critical bugfixes and updates to the appliance than the appliance had actual run time!)

It also didn't have anything in the way of automatic log pruning or having a way to add space to it (since it was a VM!) so when it ran out of space every month and a half, we'd have to hop on the VM's console and manually prune out all the old logs, because the partition where the logs were held also held the management UI and whatever magic the system used to function.

Their support group also lied to us when they told us that we could set up a reverse proxy for wireless authentication, and was so absolutely glued to their script and troubleshooting for it when we proved without a shadow of a doubt that the configuration we set up failed to work (and refusing to escalate it to a higher level of support) that our vendor spent nearly a day arguing with them over the phone and finally left to blow off steam as the same configuration on an F5 would have taken 15 minutes tops.

Ultimately, we ended up offloading the remote access portions of the Netscaler to a Pulse Secure appliance (I've stated previously- we tried the rest and went back to the best for our use case) and the load balancing functionality to an F5, and haven't looked back.