Came across a very peculiar issue at a customer in regards to the values:
- Max Login Attempts
- Failed Login Timeout
As soon as a value has been put in you could not reset it to the default value of 0, not from the GUI or CLI it would just not accept it as a value
After a support case and some days further the solution is maybe simple but I didn’t had it in mind, the simple unset command on the vpn vserver in regards to the maxloginattempts resolves it.
Hope it helps you out as well.
UPDATE: https://support.citrix.com/article/CTX234177 got published for this