Requirements
The ICA Citrix client must be 6.0 or later.
When using NMAS with Client32 or LDAPAuth, NMAS must be 2.3 or later on the client. Otherwise, NMAS won't call SecureLogin.
If you use Client32 and NMAS on a Citrix server, the NMAS on the eDirectory server must also be 2.3 or later.
If you use LDAPAuth on the server, the NMAS version doesn't matter.