Unable to use port 8080 for Citrix Cloud WEM Services connectivity

When setting up Cloud WEM Services in your environment, you may have a requirement to use a different port than port 8080 for communication as it may be blocked due to internal policies. An alternative port is required to be used both for the local agent and for listening on the Cloud Connector...

Fail to install xenserver patch: The uploaded update file is invalid

Fail to install xenserver patch with error "The uploaded update file is invalid" xensource.log shows below trace. Oct 12 15:22:10 xxxxx xapi: warn||5521 HTTPS 192.168.23.251-:::80|poolupdate.introduce R:fc93dd2259e5|pervasiveext finally: Error while running cleanup after failure of main function:...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 1

Package name: xms10.15.0.10125.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: None Date: February 2023 Languages supported: English US Important notes about this update As a best practice, Citrix recommends that you install this and other updates to ensure that you...

Microsoft Security Update Validation Report February 2023

Microsoft’s February 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Target device cannot access VDisk and boot, Event ID 11 seen on Provisioning server

Some or all target devices cannot access the VDisk at boot - the device will get a boot file but be unable to go further. On the PVS servers: Event id 11 from StreamProcess.exe is seen with the error detail:Detected one or more hung threads...

ADC no console after upgrading to 13.1-37.38 error getty: unknown gettytab entry '3wire'

Netscaler lost console access after HA pair was upgraded to 13.1 build 37.38 and received the following error on console: Jan 10 21:39:49 ... getty24784: tcsetattr /dev/ttyu0: Operation not supported Jan 10 21:39:49 ... getty24785: getty: unknown gettytab entry '3wire' Jan 10 21:39:49 ... syslogd...

CWA for Mac - Second window created by published application doesn't work

Custom-built applications that act as a launcher for other applications Sporadically, both the seamless application window and the launched application window disappear on Mac clients In Citrix Viewer, the windows show as transparent and are not clickable, Mac menu barwould not work as well...

How to identify if SSL session is being reused

To identify if SSL Session reuse is being used or not...

IPS Job failed at step WaitForExportImage with the error: A request made by the job has timed out.

An Image Portability Service IPS prepare and publish job fails without any obvious error failure The PoSH output has this message in it "Job failed at step WaitForPrepareImage with the error: A request made by the job has timed out."...

Client certificate authentication

Websites that contain sensitive content, such as online banking websites or websites with employee personal information, sometimes require client certificates for authentication...

ADC :13.0 :HTML respond policy

ADC :13.0 :HTML respond policy...

ADC /13.0 / renew certificates

Assist in cases of clients who need to renew a certificate that is about to expire...

Low PVS boot throughput

A customer observed that PVS target device boot statistics, viewed in status tray tool, showed low throughput and a long boot time on existing target devices. Testing a new vdisk, minimal install with just PVS target device software and not domain joined, showed much quicker boot time and higher...

ADM License warning - "Licenses will be reduced to 2"

ADM warning message showing Licenses will be reduced on VIPs from 30 down to 2. Error message appears post upgrade to13.1-12.x or later...

Windows Auto Logon Issue with latest Windows 10,11 Updates

TheAlways-On VPN before Windows Logonformally Always On service feature enables users to establish a machine level VPN tunnel even before a user logs on to a Windows system. The tunnel remains active until the machine shuts down. After the user logs on, the machine-level VPN tunnel is taken over ...

Unable to Launch the Webex and Teams Meeting from Citrix Secure Web on Android

Unable to Launch the Webex or Teams Meeting from Citrix Secure Web on Android Error message "Blocked. Access to this site is restricted by admin policy" or blank page...

Microsoft Security Update Validation Report November 2022

Microsoft’s November 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...

Citrix ADC - HTTP Request Smuggling Reference Guide

HTTP request smuggling is a type of attack that takes advantage of differences between the way sequences of HTTP requests are processed by a web server and one or more intermediate devices, like a Citrix ADC load balancer or other Traffic Management features. HTTP Request smuggling attacks are...

How to configure Email OTP without email ID registration

This article covers two kind of Email OTP authentication methods, which deployed in Citrix ADC Nfactor AAA virtual server. How to configure standard withemail ID registration email OTP How to configure simple without email ID registrationemail OTP...

PVS : The Stream service restarts periodically

Stream service restarts periodically...

How to Generate a support file for ADC

This article shows users how to generate a support bundle from there ADC device...

Why Secure Hub being an MDM Agent needs all these permissions.

Why Secure Hub being an MDM Agent needs all these permissions...

"Cannot complete your request" when using SAML: FailedPasswordComplexity

CitrixAGBasic SSO failed when using SAML: FailedPasswordComplexity...

Gateway logon page show blank page with 480 VPN LICENSE error

Unable to access Gateway logon page, browser will show blank page, in the developer tools or fiddler, you we see "480 VPN LICENSE error"...

Addition of new httpprofile parameter “allowOnlyWordCharactersAndHyphen”

The Citrix ADC appliance can now allow only word characters A-Za-z0-9 and hyphen - in the http request/response header names and if the request/response has any other characters in the header names the connection will be reset...

Notice Of Change Announcement For Citrix - Citrix SD-WAN

Citrix Systems, Inc. announces a Notice of Status Change for the Citrix SD-WAN product line SD-WAN 110-SE, SD-WAN 210-SE, SD-WAN 210-PE, SD-WAN 1100-SE, SD-WAN 1100-PE, SD-WAN 2100-SE, SD-WAN 2100-PE, SD-WAN 4100-SE, SD-WAN 4100PE, SD-WAN 6100-SE, SD-WAN 6100-PE, Advanced edition Add-On SKU, Clou...

BIOS Based Provisioning Services Target Devices Boot Slow Within VMware ESX

BIOS based Provisioned Target Devices boot slow through single IO. Background This symptom appears random. It may occur on a single vm boot or many, for example: five out of ten vm's may boot as expected and the remaining five may boot anywhere from 5 to 60 minutes later. After boot when the Targ...

How to disable the static object cache for specific page of VPN Vserver

...

ICA RTT data is missing - displayed as n/a in Director

ICA RTT data displayed as n/a in Director...

[Citrix Gateway] Client plugin of Window upgrade fails due to upgrade package issue

The client plugin fails to upgrade to the new one after upgrade ADC, following logs sample could be found in client plugin logs 15:36:32.432 | DEBUG | nsStartSSL called 15:36:32.432 | DEBUG | mNotifier0 15:36:32.447 | EVENT | Version mismatch 15:36:32.447 | DEBUG | RedrawActiveXWnd: 6:0...

More data flow occupies by PVS server after NAS server failover

To improve NAS server high availability,NAS storage controllers are created as failover group to provide fault tolerance for hardware issues and maintenance tasks. Sometimes, if one NAS storage controller needs to shutdown for maintenance or corrupted due tohardwarefailure, it will failover to...

Microsoft Security Update Validation Report September 2022

Microsoft’s September 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing...

Microsoft Teams does not display video and shared screen

Microsoft Teams does not display video and shared screenwhen Endpoint OS is Windows 10 1607 Build 14393, Desktop Viewer is disabled showDesktopViewer=false, Teams optimization is enabled, and Viewing session in full screen mode...

Cookies generated by VPN Vserver lack Secure/SameSite/HttpOnly flags

Cookies generated by VPN Vserver lack Secure/SameSite/HttpOnly flags...

More data flow occupies by PVS server after copy/paste vdisk in use on NAS storage

Since customer need to execute scheduled backup tasks and vdisk update tasks,administrator may copy vdisk, which is in-using for data streaming from PVS server. Sometimes, data flow to NAS storage will increase even vDisk copy operation is finished. As the result, end user will experience pool...

Android Enterprise - How to remove Managed configuration policy from Android device

How to removeManaged configuration policy pushed to Android devices...

ADC is hanging on “Loading your applications“ screen when accessing the gateway page

After gateway authentication passed, gateway page stucked on “Loading your applications“...

Secure Mail: not getting ios push notifications with Microsoft Intune

You have deployed Citrix Secure Mail via Microsoft Endpoint Manager for employees to access their on prem actyvesync mailboxes in iOS Users notice they are getting Calendar events but NOT email notifications Despite having properly configured Securemail settings in Microsoft Intune as per our...

Unable to use managed-app-utility.jar from MAM-SDK with Java 11

Building a custom app using Java 11 or later, the gradle build chain fails when invoking the final stage "task generateMdx" as the jar file for this stage requiresJava 1.7/1.8 Java/JDK 8...

Unable to receive email and calendar notifications from Secure Mail on Android 13

customers are unable to receive email and/or calendar notifications on Android 13...

How to export logs using App Layering 2204 or higher

Walk-through the new export logs steps...

[APPFW]"File too large" raises when upgrading appfw default signature "*Default Signatures"

Error "File too large" raises when to upgrade default signatures to version 89V89 On GUI Log sample could be seen in ns.log Jul 25 09:09:18 12 httpd: 49801 Netscalerip 127.0.0.1 - User nsroot - Remoteip 127.0.0.1 - Method POST - Command "params": "warning": "YES" "systemfile": "filename":...

How to block users from logging in VPN during non-working hours

This article address a configuration sample to block users from logging in VPN during non-working hours...

Storefront monitor is down

The customer refer to https://docs.citrix.com/en-us/citrix-adc/current-release/load-balancing/load-balancing-builtin-monitors/monitor-citrix-sf-services.html to configure a user monitor for storefront service probe, but storefront service shown down; If binding TCP monitor to storefront service, ...

Server communication timeout error while accessing the vdisk pool after upgrade to 1912 CU5

'Server communication timeout' error while accessing the vdisk pool node in the Citrix Provisioning PVS console after upgrade to 1912 CU5' There were no issues with the other nodes in the PVS Console...

CWA for Android: Users cannot upload file in Websites delivered through Secure Private Access

File upload options in websites published via Secure Private Access are disabled when accessed via CWA for Android...

Cannot create CS vServer via GUI - Error "Invalid argument [disallowserviceaccess]"

Cannot create CS vServer via GUI - Error "Invalid argument disallowserviceaccess"...

What is Citrix ADC TCP retransmit timeout (RTO) value

You may need to know Citrix ADC's TCP retransmit timeout RTO for troubleshooting retransmission issues...

The license server found at this address is not compatible with this version of Citrix provisioning

Issue when connecting license server on Citrix Provisioning Configuration Wizard. The license server found at this address is not compatible with this version of Citrix provisioning...

ICA session freezes 8-10 minutes after session launch

ICA session freezes 8-10 minutes after session launch. The session remains active, only the display is frozen, for example keyboard typing will continue through to session. Users can successfully reconnect to the session and work again for similar time before the session again appears frozen...