NetScaler Responder Policy not working as expected when LB is configured to use AAA

Having defined a Responder Policy for use and binding it to a Load Balancing virtual server, you find that Policy Hits are seen and Responder Action used only when no Authentication Host is configured on the Load Balancer. When using the Load Balancer with an Authentication Host configured for us...

Application firewall Logs are not logged locally in NetScaler

NetScaler appfw logs are being forwarded to the syslog server as expected. However, the logs are not being logged or displayed in the local /var/log/ns.log. Config: add audit syslogPolicy sysadv1 true sys1bind audit syslogGlobal -policyName sysadv1 -priority 100 -globalBindType APPFWGLOBA Before...

Citrix Netscaler 14.1.x < 14.1-25.53 Information Disclosure

Citrix Netscaler version 14.1.x prior to 14.1-25.53 is affected by an information disclosure vulnerability. An unauthenticated remote attacker can exploit this vulnerability to gain access to sensitive information, including the Citrix Netscaler management console and SDX SVM. No source data...

ADC-13.1-Error "Custom header name is too long" with rewrite action DELETE_HTTP_HEADER in Netscaler

When you want to delete HTTP header "X-Permitted-Cross-Domain-Policies" with rewrite action DELETEHTTPHEADER, Netscaler prompts this error "Custom header name is too long"...

NetScaler-13.1- Missing Web App Firewall Logs in NetScaler

Missing Web App Firewall Logs in NetScaler...

NetScaler 13.1 53.24: iOS "Network Timed Out" with Outlook/Teams Authentication

Users encounter a "Network Timed Out" error on their iOS devices when attempting to authenticate specifically with the following applications: Microsoft Outlook iOS Microsoft Teams iOS This authentication failure is isolated to iOS devices; users on Android, Windows, or macOS versions of the same...

NetScaler: Troubleshooting SSO Failures Over VPN Mode

SSO failures over VPN mode on NetScaler can often be traced to limitations in HTTPS inspection, misconfigured session or traffic policies, or incomplete authentication setups. By carefully reviewing these areas—especially the VPN mode, session policies, and authentication flow—you can...

Netscaler-14.1- How NetScaler handles expect:100 continue header

When NetScaler gets an HTTP request that includes the Expect: 100-Continue header, it sends a 100 Continue response back to the client. This step is important because NetScaler’s Application Firewall needs to review the full request—including the body—before passing it on to the backend server...

ADC: HSTS not working on NetScaler Gateway when using a Standard License.

After enabling HSTS at the Gateway Virtual Server using SSL Profile or SSL Parameters, some responses still do not contain the HSTS header...

NetScaler 14.1 43.x - Citrix ADM Telemetry Download Fails with Error "400 Bad Request"

Citrix ADM users might encounter an immediate "400 Bad Request" error when attempting to download the 'Telemetry file'. As per mpsservice.log - ./mpsservice.log:1 x.x.x.x Debug TCPServerConnection default4473 HTTP Request from URI:/nitro/v1/download/consoletelemetry.tgz, method:GET...

NetScaler Agent 13.1/14.1: How to Change the nsroot Password for NetScaler Agent via CLI

Requirement to change nsroot password for NetScaler Agent...

PT-2025-14619 · Citrix · Citrix Netscaler

Name of the Vulnerable Software and Affected Versions: Citrix NetScaler affected versions not specified Description: The issue is related to a denial of service. For more details, such as affected products and timeline, refer to the provided link. Recommendations: At the moment, there is no...

Citrix : ADC: Netscaler VPX vs ESXi compatibility version

Netscaler VPX on ESXi got rebooted automatically...

Netscaler sends Syslog messages for SSL Handshake with ””

Syslog messages sent from the NetScaler to the external Syslog Server includes unexpected occurrence of "\n" Interestingly, a pattern is seen where ”\n” is seen periodically after every 6 messagesor similar Need to know if this a normal behavior or it's an issue...

NetScaler: How to update AppFirewall signature from CLI

NetScaler: How to update AppFirewall signature from CLI...

NetScaler -13.1 56.18 - Non-recoverable : potential damage: system hardware in jeopardy or damaged

The Citrix NetScaler SDX 16000 appliance may exhibit the following symptoms: The appliance reports critical voltage errors in the ns.log and system message logs, indicating potential hardware damage. Specific Log Entries: The following log entries, or similar variations, are observed: Mar 9...

NetScaler Enters Grace Period After Reboot for 5 to 10 minutes

NetScaler Enters Grace Period After Reboot "Running in Grace. System will lose capacity after" for sometime...

NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-5491 and CVE-2024-5492

Description of Problem Two vulnerabilities have been discovered in NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway. Refer to below for further details: Affected Versions The following supported versions of NetScaler ADC and NetScaler Gateway are affected by the...

Linux Distros Unpatched Vulnerability : CVE-2017-7700

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Wireshark 2.2.0 to 2.2.5 and 2.0.0 to 2.0.11, the NetScaler file parser could go into an infinite loop, triggered by a malformed capture file. This was...

The vulnerability of the NetScaler Console application delivery management service and the NetScaler Agent, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the NetScaler Console delivery management service and the NetScaler Agent agent is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...