A couple possibilities come to mind. Most of thet network settings on a clustered pair are not synched. It's possible that one of your SAs may not be able to resolve or route to the back end Citrix server. I'd first check the logs for any clues and then I'd use the SA's Ping, traceroute, and Nslookup commands to validate that the Citrix server is reachable. ( Maintenance > Troubleshooting > Tools > Commands ). Make sure that you don't have any bad static host entries, routes or ARP entries hanging around too. Similarly if your clustered SA's are not connected to the same switch / router / firewall, it's possible that they are trying to take a different path to get to the Citrix server and one of those paths may be broken. If this is the case the troubleshooting would be the same, but the fix would be external to the SA.
... View more