I set up a VPX Express Netscaler Gateway (version 10.1: build 131.7.nc) with two virtual nics for users to access Citrix StoreFront from outside. The gateway works if I have it on my inside network 10.1.1.0/24, gateway's virtual IP also on the inside subnet with a public IP statically mapped. It stopped working once I moved it out to my dmz with gateway's virtual IP also changed to the DMZ subnet, same public IP was mapped. I can't even telnet to the gateway's port 80 or 443 from outside even with all traffic allow to/from the outside. I am able to access the gateway using a test workstation on the DMZ and logon to StoreFront. I am also able to telnet to my other public facing web server on DMZ to port 80 and 443, so firewall rules should not be the issue. I think it might have do with routing on the gateway. Is there a way to force a default route on the gateway? Can I change the binding of IPs on gateway's virtual NIC? Any idea on how may make it work are deeply appreciated.