Troubleshooting Authentication Issue Through Netscaler when Using LDAP and RSA

Authentication fails when using Dual auth LDAP+RSA on NetScaler...

NetScaler StoreFront Monitor Probe Fails on StoreFront 3.5

When we bind the StoreFront monitor to our StoreFront 3.5 servers, every hour there is an entry on the dashboard and system log that there is a failure - probe failed...

NetScaler: Error - "your apps are not available at this time" when login from Receiver

NetScaler: Error - "your apps are not available at this time" when login from Receiver. This occurs when going via the NetScaler gateway . Direct access to SF works fine, as well as browser access to gateway works fine...

Receiver for Android Connects to Default StoreFront WebUI

When adding account using Receiver for Android 3.9.1 and accessing StoreFront using NetScaler Gateway, setting defaults to StoreFront Web UI instead of showing list of apps in the Receiver app. It opens a webpage to sign into Receiver for Web. When changing type to XenApp Services or NetScaler...

How to Create a Custom SSH banner for Netscaler

NetScaler : How to create a custom SSH banner...

The vulnerability of the delivery method for Citrix NetScaler web applications, which allows attackers to enhance their privileges.

The vulnerability of the Citrix NetScaler web application delivery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges using NS commands, Web interfaces, or graphical user interfaces...

How to Manage RAID Disk Allocation on NetScaler SDX 14000/15000/16000/25000/26000 Series Platforms

NetScaler SDX 14000, 15000,16000, 25000 and 26000 series of platforms support RAID managed by the software. Multiple disks provide not only performance gains, but also enhanced reliability. Reliability is especially important for a NetScaler SDX appliance, because the appliance hosts a large numb...

How content-length of a HTTP response is handled when rewrite is in use on NetScaler

When using rewrite policy with priority 120 on NetScaler it can be noticed that Content-Length header is misspelled in the response. To alter this behavior we can use another rewrite policywith priority 100 that has an action that can never be true. Note: Priority 120 and 100 is taken as examples...

Supported Architectures Between NetScaler and XenMobile Server

This article has information on supported architectures between NetScaler and XenMobile Server. Note : You should choose between HTTPS or HTTP no mix and match supported. HTTPS Deployment Type| NetScaler Load Balancing Method| SSL Re-encryption| XenMobile Server Port ---|---|---|--- MDM| SSL...

"not a PRIVILEGE users" while accessing internal web link through XenMobile

On XenMobile 10 internal websites are published as web link . Proxy is configured in the environment and traffic policies are added on the NetScaler Gateway . Customer wants to send external traffic to go through proxy and skip the internal websites from going through the same. When users are...

NTLM Authentication on NetScaler

With the release of NetScaler 11 build 64.34, the requirements and configuration for NTLM authentication have changed. It is a common use case to authenticate using Kerberos when users are internal on the network but for external users who cannot reach Active Directory, we fallback to NTLM. The...

Citrix NetScaler Service Delivery Appliance Multiple Security Updates (CTX206006)

A number of vulnerabilities have been identified in the Citrix NetScaler Service Delivery Appliance SDX that could allow a malicious administrative user to crash the host or other VMs and execute arbitrary code on the SDX host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions migh...

Error:"Unable to launch your app....Cannot connect to the Citrix XenApp server. SSL Error 4... The server rejected the connection."

Error: "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. SSL Error 4: Attempted to connect using the TLS V1.0 | SSL V3.0 protocols. The server rejected the connection" whentrying to launch apps when SSL v3 and TL...

Configuring XenMobile for Certificate and Security Token Authentication

In highly secure environments where usage of LDAP credentials outside of an organization in public or insecure networks is considered a prime security threat for the organization, two-factor authentication using a client certificate and a security token is an option. You can configure NetScaler s...

Unable to Access StoreFront Portal When TLS 1.0 is Disabled on NetScaler Gateway

Unable to access StoreFront portal when TLS 1.0 is disabled on NetScaler Gateway virtual server...

How to Install a License on NetScaler VPX on Microsoft Azure During First Log on

This article describes how to install a license on NetScaler VPX on Microsoft Azure during first logon. Requirements Access to the NetScaler VPX on Microsoft Azure management console...

How to Configure NetScaler Gateway with Citrix Receiver for Mobile Devices and Web Interface Backend

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway for use with Citrix Receiver for Mobile...

Netscaler Instances on SDX show less memory than allocated from within the SVM Console

Question: When I allocate RAM to a Netscaler instance on SDX, the Netscaler reports considerably less memory than is allocated. For instance, if I allocate 16gb, the Netscaler instance shows only 12gb allocated. Answer: This is an expected behavior. When NetScaler is started and is initializing t...

Troubleshooting Checklist: Cannot get required apps on an iOS device

If the APNSpush is not working, ask the following questions: Are port 2195 and outbound port 2196 open from the company network to reach the APNs? Is the APNs certificate valid? Are the APNs and App Store IP addresses are not present hardcoded in the host entry of the XenMobile? If there is a pro...

Troubleshooting Checklist: Users Cannot Browse Internal Websites in Secure Web

Do the following: Collect Secure Web client logs. If you see the following message in the logs, add valid DNS SUFFIXES for the corresponding internal domains on NetScaler: AG policy: Not Intercepting Check if Split tunnel is On or Off on the Netscaler Gateway under session policies: If On - Make...