Citrix : ADC: Netscaler VPX vs ESXi compatibility version

Netscaler VPX on ESXi got rebooted automatically...

Netscaler VPX : NTP_Sync Failing even after ntp process restart

Netscaler VPX is configured with NTP sync to pool.ntp.org or any NTP server, but the NTP sync does not work even after disabling and enabling NTP sync and also restarting the NTP process...

[NetScaler-SDX] SVM Management UI displays "Halted" about VPX "VM State"

In a rare case, if you check the NetScaler VPX state on SVM UI, you may see "VM State" displays "Halted" with red light. Your VPX is actually healthy and you can logon VPX NSIP successfully. Business traffic is not impacted...

[NetScaler] Multicast packets may cross members within LA channel on SDX with i40e NICs

On a Fortville NIC SDX platform with i40e driver. When LA channel is configured with 10G or 25G NICs and is assigned to a NetScaler VPX. The VPX may receive unexpected multicast packets that was sent by itself through another member of the LA channel. Such as VRRP control plane messages. The...

Server side request forgery (ssrf)

Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/readurl URI by an authenticated attacker who has a webapp account. The attacker can gain access to the nsroot account, and execute remote commands with root privileges...

Error: "Backup Failure: Could not find required XVA" on NetScaler SDX

After upgrading NetScaler SDX and Netscaler VPX firmware to any newer version you will get daily notifications about backups failing: For Example the Log Message is as below: Local0.Error 10.xx.xx. svmevent: GMT : EVENT BACKUPFAILED : 127.0.0.1:BackupFailure: - Could not find required XVA for...

NetScaler VPX on 11.1 Firmware Shows as VPX (1) in GUI when Using MAS Pooled Capacity Licensing

NetScaler GUI showing "NetscalerRemoteLicensedVirtualAppliance”. However, VPX instance is showing “License type” as Enterprise on GUI but the model ID was 1 i.e, VPX1...

Heap Overflow Vulnerability in Citrix NetScaler Gateway (CVE-2017-7219)

After presenting my findings on the Swisscom router at the CybSecConference last year, I started looking for a new product to analyze. I quickly found that it’s possible to download virtual “demo” appliances of Citrix products, so I went on to download a Netscaler VPX, which at the time was at...

High Availability Failovers Due to Missed HA HeartBeats of NetScaler VPX on VMware ESX Hypervisor

NetScaler VPX on VMWare hypervisor High Availability failsover due to missed HA heartbeats. Note : This article only pertains to NetScaler VPX on VMWare hypervisor. Background Root cause of the HA failovers is missing heartbeats due to VPX scheduling issues on the VMware host. The NetScaler’s...

Bad performance over SSL protocol on NetScaler VPX 11.0 and VPX 10.5 release

Symptoms: Customer experiencing performance over SSL protocol on NetScaler VPX 11.62.10 in one arm deployment. Environment: We have NS VPX 1000 Platinum license no packet drops caused by rate limiting and it's config spec is 4vCPUs and 4GB of RAM, NIC 1000E full duplex speed. The NS appliance is...

How to Install a License on NetScaler VPX on Microsoft Azure During First Log on

This article describes how to install a license on NetScaler VPX on Microsoft Azure during first logon. Requirements Access to the NetScaler VPX on Microsoft Azure management console...

FAQ: VMAC Addresses for NetScaler VPX Appliance Hosted on VMWare EsXi

Q: Does a NetScaler VPX appliance hosted on VMWare EsXi support Virtual Media Access Control VMAC address configuration? A: Yes, a NetScaler VPX appliance hosted on a VMWare ESXi, supports VMAC configuration. To configure the VMAC addresses, enable the Promiscuous mode on the virtual switch. You...

Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting

------------------------------------------------------------------------ Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, August 2014...

Citrix NetScaler VPX Cross Site Scripting

------------------------------------------------------------------------ Citrix NetScaler VPX help pages are vulnerable to Cross-Site Scripting ------------------------------------------------------------------------ Han Sahin, August 2014...

Citrix Netscaler 10.0 Denial Of Service Vulnerability

A vulnerability was found in the nsconfigd daemon TCP port 3008/SSL and 3010. This daemon can be crashed by sending a specially crafted message. No prior authentication is necessary. A watchdog daemon pitboss automatically restarts nsconfigd after the first six crashes and then reboots the...