How to Modify the Subnet IP (SNIP) and NetScaler IP (NSIP) on a NetScaler High Availability Pair

This article describes how to change the Subnet IP SNIP address and NetScaler IP NSIP address for a secondary or primary appliance of a high availability setup. Background You might want to change the SNIP and NSIP on an appliance because of the changes in the network setup or a redundant pair of...

Citrix NetScaler Gateway TLS Padding Oracle Vulnerability (CTX240139)

The remote Citrix NetScaler device is affected by a TLS padding oracle vulnerability. An attacker may be able to leverage this vulnerability to decrypt TLS traffic. Please refer to advisory CTX240139 for more information. Note appliances with all CBC-based ciphers disabled are not affected by thi...

NetScaler ADC Firmware Release Cycle

NetScaler has announced the following updates to the ADC firmware release cycle. NetScaler ADC Firmware Release Cycle 7 yearwill fall on all versions starting with 14.1 and all subsequent releases. Year 1, Year 2, and Year 3 will have feature releases approximately every 8 weeks. Year 4, Year 5,...

CVE-2019-6485 - TLS Padding Oracle Vulnerability in Citrix Application Delivery Controller (ADC) and NetScaler Gateway

Description of Problem A vulnerability has been identified in the Citrix Application Delivery Controller ADC formally known as NetScaler ADC and NetScaler Gateway platforms using hardware acceleration that could allow an attacker to exploit the appliance to decrypt TLS traffic. This vulnerability...

"Cannot complete request" when logging on via NetScaler using dual factor authentication and SSON to StoreFront Server 3.14

After configuring a remote portal with StoreFront servers load balanced with NetScaler, a user authenticates and they get the error "Cannot complete your request". From the event Viewer logs of the StoreFront SF server: "An error occurred while using SSL configuration for endpoint 0.0.0.443. The...

iOS devices failing to enrol via NetScaler after upgrade to 11.1 60.13

After upgrading NetScaler to 11.1 60.13, iOS devices are no longer able to enroll However, Android devices are not affected. iPhone X can enroll but can't access the Store iPhone 7 can't enroll at all Checking the logs, we would be able to see the below, when iOS attempts to enroll: "AAA Client...

Receiver for Chrome - Applications do not launch in seamless mode. They launch in Windowed mode.

Receiver for Chrome - Applications do not launch in seamless mode. They launch in Windowed mode. Using Receiver chrome 2.3, NetScaler 10.1, StoreFront 3.5 and XenApp 6.5. Receiver for Chrome is unable to open applications in seamless window. Seamless window integration is working when using WI 5....

Attempting to setup UPN authentication instead of SAM. When we hit the Store Front, we get "cannot complete your request".

Attempting to setup UPN authentication instead of SAM. When we hit the StoreFront, we get "cannot complete your request". From inside the network, when accessing the storefront portal directly, able to log in with UPN. Issue appears to be the way the NetScaler is handing the authentication token ...

Citrix Netscaler Login Detection

Binary data 700378.prm...

Workspace App for iOS - Error 'EAP is activated and not supported on iOS' when connecting through Netscaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Users are unable to connect using Workspace App for iOS through Netscaler Gateway. The connection wi...

Getting an Error: (NMAS)Citrix Application Delivery Management Database requires Maintenance

Error: NetScaler MAS database requires maintenance...

ADM fails to upgrade ADC in HA -- DEVICE_NOT_REACHABLE

ADM logs:- Error Config8 https://x.x.x.x/nitro/v1/config/nshostname?format=json, Reason: Exception: DEVICENOTREACHABLE Debug Config8 NetScaler x.x..x.xStill rebooting.. Error Config8 DeviceRebootStatus: Reboot Failed for NS x.x.x.x This is how it would appea on ADM When you login to ADC we can...

Citrix NetScaler Gateway Cross-Site Scripting Vulnerability (CTX232199)

The remote Citrix NetScaler device is affected by a cross-site scripting vulnerability. An attacker could leverage this vulnerability to execute malicious client-side code within the security context of the web server. Please refer to advisory CTX239002 for more information. C Tenable Network...

Citrix NetScaler Gateway Cross-Site Scripting Vulnerability (CNVD-2019-01898)

Citrix NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition is a secure remote access solution from Citrix Systems. The solution provides administrators with application-level and data-level controls to enable users to remotely access applications and data from any location. A...

CVE-2018-18517

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS...

CVE-2018-18517

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS...

Cross site scripting

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS...

CVE-2018-18517

Citrix NetScaler Gateway (and ADC) were found vulnerable to a Cross-Site Scripting (XSS) condition. Exploitation could allow remote, authenticated users to execute client-side scripts in the web context, potentially compromising the user session or sensitive information. The issue affects NetScal...

CVE-2018-18517

Citrix NetScaler Gateway 10.5.x before 10.5.69.003, 11.1.x before 11.1.59.004, 12.0.x before 12.0.58.7, and 12.1.x before 12.1.49.1 has XSS...

Citrix SD-WAN and NetScaler SD-WAN Information Disclosure Vulnerabilities

Citrix SD-WAN and NetScaler SD-WAN are both software-defined WAN solutions from Citrix Systems USA. The products support real-time path selection, edge routing, stateful firewalls, end-to-end Qos and WANs. An information disclosure vulnerability exists in Citrix SD-WAN and NetScaler SD-WAN, which...