Compatibility of NetScaler with TLS 1.1 - 1.2 and Client Authentication with Citrix Receiver

NetScaler GatewayNG 11.0 version enabled for Client CertificateCC authentication with TLS 1.1,TLS1.2 enabled. 2. Citrix Receiver 4.3 or 4.4 installed on Client Machine. 3. During logon to Gateway, browser pop up to select client Certificate and then successfully login to enumerate the...

Netscaler Gateway license not getting applied and ICA user count shows as 0

Netscaler Gateway license not getting applied and ICA user count shows as 0 in GUI and CLI both. show ns license output shows as below: Http DoS Protection: YES Dynamic Routing: YES Content Filtering: YES Integrated Caching: NO SSL VPN: YES Maximum users = 5 Maximum ICA users = 0...

Does domain passthrough authentication work with NetScaler Gateway?

Question: Does domain pass through authentication work with NetScaler Gateway, like forwarding the windows machine credentials so that user do not have to login and does single sign onlatest update for 12.0.58.x? Answer: No, Domain pass through does not work with Netscaler Gateway. Authentication...

How to Capture SSL Master Keys When Running an nstrace on NetScaler

This article describes how to capture SSL master keys when running an nstrace on NetScaler Background From NetScaler 11.0-66+ and 11.1/12.0 all builds, the "start nstrace" command has a new parameter, -capsslkeys, with which you can capture the SSL master keys for all SSL sessions. If the...

Recommended Settings and Best Practices for Generic Implementation of a NetScaler Appliance

Recommended Settings for a Generic Implementation of a NetScaler Appliance The following sections contain the recommended settings for a generic implementation of some features of a NetScaler appliance: Modes Features Global System Settings HTTP Parameters SNMP Alarms Network Interfaces General...

How to reset root password of NetScaler SDX

This article describes how to reset the root password of NetScaler SDX running on XenServer. Note: If you are a XenServer user, do not refer to this article. Instead, see the XenServer documentation. Background For the XenServer component of a NetScaler SDX, a lost root password can be overwritte...

Storefront 3.7 console displays Store as Internal Only

Question: After upgrade to Storefront 3.7 the store is displayed as Internal Only. In the details it shows Remote Access as Enabled and it also works with Netscaler Gateway. Answer: This is a known issue in Storefront 3.7 and is also mentioned in the edocs...

Troubleshooting Authentication Issue Through Netscaler when Using LDAP and RSA

Authentication fails when using Dual auth LDAP+RSA on NetScaler...

NetScaler StoreFront Monitor Probe Fails on StoreFront 3.5

When we bind the StoreFront monitor to our StoreFront 3.5 servers, every hour there is an entry on the dashboard and system log that there is a failure - probe failed...

NetScaler: Error - "your apps are not available at this time" when login from Receiver

NetScaler: Error - "your apps are not available at this time" when login from Receiver. This occurs when going via the NetScaler gateway . Direct access to SF works fine, as well as browser access to gateway works fine...

Receiver for Android Connects to Default StoreFront WebUI

When adding account using Receiver for Android 3.9.1 and accessing StoreFront using NetScaler Gateway, setting defaults to StoreFront Web UI instead of showing list of apps in the Receiver app. It opens a webpage to sign into Receiver for Web. When changing type to XenApp Services or NetScaler...

How to Create a Custom SSH banner for Netscaler

NetScaler : How to create a custom SSH banner...

The vulnerability of the delivery method for Citrix NetScaler web applications, which allows attackers to enhance their privileges.

The vulnerability of the Citrix NetScaler web application delivery mechanism is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges using NS commands, Web interfaces, or graphical user interfaces...

How to Manage RAID Disk Allocation on NetScaler SDX 14000/15000/16000/25000/26000 Series Platforms

NetScaler SDX 14000, 15000,16000, 25000 and 26000 series of platforms support RAID managed by the software. Multiple disks provide not only performance gains, but also enhanced reliability. Reliability is especially important for a NetScaler SDX appliance, because the appliance hosts a large numb...

How content-length of a HTTP response is handled when rewrite is in use on NetScaler

When using rewrite policy with priority 120 on NetScaler it can be noticed that Content-Length header is misspelled in the response. To alter this behavior we can use another rewrite policywith priority 100 that has an action that can never be true. Note: Priority 120 and 100 is taken as examples...

Supported Architectures Between NetScaler and XenMobile Server

This article has information on supported architectures between NetScaler and XenMobile Server. Note : You should choose between HTTPS or HTTP no mix and match supported. HTTPS Deployment Type| NetScaler Load Balancing Method| SSL Re-encryption| XenMobile Server Port ---|---|---|--- MDM| SSL...

"not a PRIVILEGE users" while accessing internal web link through XenMobile

On XenMobile 10 internal websites are published as web link . Proxy is configured in the environment and traffic policies are added on the NetScaler Gateway . Customer wants to send external traffic to go through proxy and skip the internal websites from going through the same. When users are...

NTLM Authentication on NetScaler

With the release of NetScaler 11 build 64.34, the requirements and configuration for NTLM authentication have changed. It is a common use case to authenticate using Kerberos when users are internal on the network but for external users who cannot reach Active Directory, we fallback to NTLM. The...

Citrix NetScaler Service Delivery Appliance Multiple Security Updates (CTX206006)

A number of vulnerabilities have been identified in the Citrix NetScaler Service Delivery Appliance SDX that could allow a malicious administrative user to crash the host or other VMs and execute arbitrary code on the SDX host. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions migh...

Error:"Unable to launch your app....Cannot connect to the Citrix XenApp server. SSL Error 4... The server rejected the connection."

Error: "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. SSL Error 4: Attempted to connect using the TLS V1.0 | SSL V3.0 protocols. The server rejected the connection" whentrying to launch apps when SSL v3 and TL...