How is it configured exactly? Is it a pure VPN connection and not an ICA proxy? I.e. does the client have a tunnel to the WI box directly? If so, have you opened the ports need for the smart card software?? ( I have no idea what they would be) Steve Greenberg Thin Client Computing 34522 N. Scottsdale Rd D8453 Scottsdale, AZ 85266 (602) 432-8649 www.thinclient.net steveg@xxxxxxxxxxxxxx _____ From: thin-bounce@xxxxxxxxxxxxx [mailto:thin-bounce@xxxxxxxxxxxxx] On Behalf Of Steve Snyder Sent: Wednesday, January 07, 2009 5:40 PM To: thin@xxxxxxxxxxxxx Subject: [THIN] netscalers and smartcards (CAC) - who's using them? and what did you have to do to get the WI to come up properly? We're trialing a NS 8.1 in our DMZ - the VPN tunnel connects and it starts to load the WI site but the smartcard (CAC) authentication just doesn't fly. Citrix is scratching their heads.