Application Enumeration Fails When Connecting Through Windows App Receiver and NetScaler Gateway

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Application enumeration fails when connecting through Windows App Receiver and NetScaler Gateway...

Error: "Intermediate CA or Root CA Certificate Signature Verification Failed" on NetScaler Gateway

Enrollment and authentication works with LDAP policy however unable to enroll devices using CBA client certification authentication. Authentication is denied at NetScaler Gateway.While disabling authentication on NetScaler Gateway, client certificate can be pushed to the device using a device...

How to Use sAMAccountName and userPrincipalName at Same Time for User Logon with Active Directory

This article describes how use sAMAccountName and userPrincipalName at same time for user logon with Active Directory. Background While authenticating with LDAP for NetScaler Gateway or any other resource behind the NetScaler, we can only access resources using either 'domain\username' or...

CVE-2015-8277 - Citrix Licensing Security Updates

Description of Problem A vulnerability has been identified in Citrix Licensing that could allow a remote, unauthenticated attacker to crash the License Server and potentially execute arbitrary code on the server. This vulnerability affects the following products: Citrix License Server for Windows...

How to Change Management IP and Default Gateway Using NetScaler CLI

This article describes how to change management IP address and add new default gateway address using NetScaler CLI. Changing the Default Gateway of the NetScaler appliance can only be done via the CLI. The NetScaler appliance can only have 1 Default Gateway defined at a time...

How to Configure Single Fully Qualified Domain Name for StoreFront and NetScaler Gateway

This article describes how to configure Single Fully Qualified Domain Name on StoreFront and NetScaler Gateway...

[FAQ] Netscaler LDAP uses which IP address as source

Netscaler LDAP uses which IP address as source, NSIP or SNIP Answer:- - nsldap.pl is a perl script and will use NSIP as source IP by default. - If the Netscaler has SNIP in the same subnet of the authentication server, Netscaler will communicatethrough SNIP. - And, if Netscaler and the...

DNS queries not getting resolved from Primary node but gets resolved from Secondary node in HA pair

Nameservers are added on Netscaler using the "add dns nameserver" command or with GUI. From CLI in some cases, the DNS Lookup gets failed on the Primary Node but resolves well on the Secondary Non-working Primary We see that the DNS query Request is going to Netscaler DNS cache loop-back IP not t...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

How to Set Up Windows ADFS Server to Test SAML Authentication with NetScaler Gateway

This article describes how to set up Active Directory Federation Services ADFS to integrate with NetScaler, test issues with SAML authentication using ADFS and exposes you to SAML authentication with NetScaler Gateway. Requirements Install Windows 2008 SP1 R2 configured in a domain 2008 R2 with S...

Commands Generated by XenMobile Wizard on Netscaler - SSL Bridge

This was created for customers that need to run the wizard more than once for multiple XenMobile environments...

Commands Generated by XenMobile Wizard on NetScaler - SSL Offload

This article will help you when you need to run the wizard more than once for multiple XenMobile environments. This article assumes that you have the following items already installed and configured on the NetScaler: 1. NetScaler IP address NSIP 2. Subnet IP address SNIP 3. DNS Settings 4...

Citrix Systems NetScaler Application Delivery Controller and NetScaler Gateway Privilege Gain Vulnerability

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions; NetScaler Gateway is a secure remote access solution. A security vulnerability exists in Citrix Systems NetScaler ADC and NetScaler Gateway that allows a remote attacker to gain privileges using NS Web GUI...

Citrix Systems NetScaler Application Delivery Controller and NetScaler Gateway Clickjacking Vulnerability

Citrix Systems NetScaler ADC is a suite of service and application delivery solutions; NetScaler Gateway is a secure remote access solution. A clickjacking vulnerability exists in Citrix Systems NetScaler ADC and NetScaler Gateway, which allows an attacker to construct malicious URIs, trick users...

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...

Converting iRules to NetScaler Policies - HTTP Request Cloning

The iRules to NetScaler conversion guides take you through the process of converting your F5 iRules into policies on NetScaler. If you have been using iRules and would like to create the same functionality on NetScaler these guides simplify the process and gets you up and running faster. Use Case...

Error: "403 - Forbidden: Access is Denied" After Log on to NetScaler Gateway

The following error is displayed after logging on to NetScaler Gateway: "403 - Forbidden: Access is denied."...

Error: "There are no apps available at this time. Please check the server and try again"

Consider the following scenario. There are two sites IN GSLB- production and disaster recovery. Production is already working with the StoreFront integration behind it. Customer wanted to test the disaster recovery site using the same URL that resolves to the NetScaler Gateway VIP, creating the...

Converting iRules to NetScaler Policies - X-Forwarded For Header Based Persistence

Use Case X-Forwarded-For HTTP header indicates the path where the request came in through and it can have multiple IP addresses as well. You can define persistence based on the value of X-Forwarded-For header received while processing the request on load balancing vserver. F5iRules Name:...

CVE-2016-2072

The Administrative Web Interface in Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 11.x before 11.0 Build 64.34, 10.5 before 10.5 Build 59.13, 10.5.e before Build 59.1305.e, and 10.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors...