CVE-2016-9028 - Unauthorized Redirect flaw in Citrix NetScaler ADC could result in session hijack

Description of Problem An unauthorized redirect vulnerability has been identified in Citrix NetScaler ADC in the AAA-TM flow that could allow a remote attacker to obtain session cookies of a redirected AAA user. This vulnerability does not impact NetScaler Gateway. The following vulnerability has...

How Do I Perform Complete SSL Certificate Monitoring and Management Using NetScaler MAS

NetScaler Management and Analytics System allows you to perform complete SSL Certificate monitoring and management operations from one single console. When a NetScaler appliance is discovered in MAS, all the certificates that reside on the NetScaler appliance also get copied to MAS. This gives MA...

XenMobile 10 MDM SSL Offload Configuration

A Citrix XenMobile environment is typically configured with a NetScaler appliance that front ends and load balances the MDM traffic which it passes on to the XenMobile Servers in the backend. This NetScaler can be configured to handle this traffic in either SSL Bridge or SSL Offload mode. Though...

How do I fetch bindings for all NetScaler entities of a single entity type using a single NITRO AP

...

How To Configure Single Sign-on for Receiver for ChromeOS

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Receiver for Chrome now supports single sign-on SSON on Chromebook devices and Citrix Virtual...

How to Use NetScaler SNIP for Authentication (AAA) Server Communication

This article describes how to use NetScaler SNIP for authentication server communication. Background Authentication server communication on NetScaler is by default done using the NetScaler IPNSIP. So, apart from it being used for management purposes, it is also used as a source IPfor LDAP, RADIUS...

How to connect to ADFS 3.0 from NetScaler ADC load balancer?

Use Case Use case 1 : Microsoft Active Directory Federation Services ADFS 3.0 which provides single sign-onaccess to enterprise applications, requires server name in client hello extension to identify theapplication to connect to. Use case 2 : Connect to a server with multiple applications runnin...

How Do I Monitor NetScaler MAS Resource Consumption?

This article describes how to monitor NetScaler MAS resource consumption. Background NetScaler Management and Analytics System is a single unified solution that helps administrators perform various tasks such as infrastructure management, application management, orchestration, and gives complete...

How to Limit One Session Per User on NetScaler Gateway?

This article describes how to limit one session per user on NetScaler Gateway. Use case An administrator wants to ensure that at any point in time a given user can only have one active session with NetScaler Gateway. Administrators can use a session policy or the global NetScaler Gateway settings...

High Availability Failovers Due to Missed HA HeartBeats of NetScaler VPX on VMware ESX Hypervisor

NetScaler VPX on VMWare hypervisor High Availability failsover due to missed HA heartbeats. Note : This article only pertains to NetScaler VPX on VMWare hypervisor. Background Root cause of the HA failovers is missing heartbeats due to VPX scheduling issues on the VMware host. The NetScaler’s...

StoreFront Site Connecting Through NetScaler Gateway Gets Stuck at "/cgi/setclient?wica" Page After Authentication

When accessing StoreFront site through NetScaler Gateway, StoreFront site gets stuck at "/cgi/setclient?wica" page after authentication...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Antivirus and Firewall Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for antivirus and firewall check...

Bad performance over SSL protocol on NetScaler VPX 11.0 and VPX 10.5 release

Symptoms: Customer experiencing performance over SSL protocol on NetScaler VPX 11.62.10 in one arm deployment. Environment: We have NS VPX 1000 Platinum license no packet drops caused by rate limiting and it's config spec is 4vCPUs and 4GB of RAM, NIC 1000E full duplex speed. The NS appliance is...

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

Compatibility of NetScaler with TLS 1.1 - 1.2 and Client Authentication with Citrix Receiver

NetScaler GatewayNG 11.0 version enabled for Client CertificateCC authentication with TLS 1.1,TLS1.2 enabled. 2. Citrix Receiver 4.3 or 4.4 installed on Client Machine. 3. During logon to Gateway, browser pop up to select client Certificate and then successfully login to enumerate the...

Does domain passthrough authentication work with NetScaler Gateway?

Question: Does domain pass through authentication work with NetScaler Gateway, like forwarding the windows machine credentials so that user do not have to login and does single sign onlatest update for 12.0.58.x? Answer: No, Domain pass through does not work with Netscaler Gateway. Authentication...

How to Capture SSL Master Keys When Running an nstrace on NetScaler

This article describes how to capture SSL master keys when running an nstrace on NetScaler Background From NetScaler 11.0-66+ and 11.1/12.0 all builds, the "start nstrace" command has a new parameter, -capsslkeys, with which you can capture the SSL master keys for all SSL sessions. If the...

Recommended Settings and Best Practices for Generic Implementation of a NetScaler Appliance

Recommended Settings for a Generic Implementation of a NetScaler Appliance The following sections contain the recommended settings for a generic implementation of some features of a NetScaler appliance: Modes Features Global System Settings HTTP Parameters SNMP Alarms Network Interfaces General...

Storefront 3.7 console displays Store as Internal Only

Question: After upgrade to Storefront 3.7 the store is displayed as Internal Only. In the details it shows Remote Access as Enabled and it also works with Netscaler Gateway. Answer: This is a known issue in Storefront 3.7 and is also mentioned in the edocs...

How to reset root password of NetScaler SDX

This article describes how to reset the root password of NetScaler SDX running on XenServer. Note: If you are a XenServer user, do not refer to this article. Instead, see the XenServer documentation. Background For the XenServer component of a NetScaler SDX, a lost root password can be overwritte...