Vulnerability CVE-2008-5161 (SSH Server CBC Mode Ciphers Enabled) on SDX

Regarding vulnerability CVE-2008-5161 SSH Server CBC Mode Ciphers Enabled, we need to follow the below article to mitigate this vulnerability. Addressing False Positives from CBC and MAC Vulnerability Scans of NetScaler SSHD citrix.com However, we are unable to perform the steps mentioned in the...

Citrix Endpoint Management (aka XenMobile Server) 10.15.0 Rolling Patch 4

Package name: xms10.15.0.10417.bin For: XenMobile Server 10.15.0 Deployment type: On-premises only Replaces: xms10.15.0.10327.bin, xms10.15.0.10220.bin and xms10.15.0.10125.bin Date: September 2023 Languages supported: English US Important notes about this update As a best practice, Citrix...

VMs fail to boot with error: "SR_BACKEND_FAILURE_46, The VDI is not available"

VMs fail to boot with error: SRBACKENDFAILURE46 ; The VDI is not available opterr='INTERNALERROR', 'Syserror\\n "/var/run/nonpersistent/forkexecd/executecommandgeterrc83846.log: Too many open files"';...

rdx.message_box_error after firmware upgrading

After OS firmware upgrading and try to connect Netscaler GUI, the following error may display...

NetScaler AAA sessions' explanation under "Reporting>Citrix Gateway>AAA>AAA sessions"

This guide provides an explanation of the "AAA sessions" section within the ADC Application Delivery Controller reporting, specifically under "Citrix Gateway."...

Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1

Conversion Manager 8.3.0 - For Citrix Hypervisor 8.2 Cumulative Update 1 Who Should Install This Update? This Conversion Manager virtual appliance update is for customers who use the Conversion Manager feature of Citrix Hypervisor 8.2 CU1. It constitutes the following deliverable: File Name|...

Microsoft Security Update Validation Report September 2023

Microsoft’s September 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues September still be found upon implementation. Follow best practices for testing and installing...

How to track the Citrix Gateway Service Points-of-Presence(PoP) of active HDX session

Citrix Gateway Service is designed to operate across multiple Points of Presence POPs in order to enhance availability and performance. In the event that a POP goes down or experiences connectivity degradation beyond specified thresholds. Citrix Optimal Gateway Routing responds to subsequent DNS...

Unable to delete VDI: "The provisioning task already running on the Machine Catalog"

Unable to remove the VDI from the catalog with error:"The provisioning task already running on the Machine Catalog"...

Length limitation of "Associated User" username

Citrix DaaS Manage - Monitor - Trends - Sessions - Associated User only displays part of username...

Workspace error "Your account cannot be added using this mail address" or "Cannot contact store"

When attempting to add account with NetScaler Gateway FQDN on Windows Workspace, users encounter below error message: "Your account cannot be added using this email address." Or "Your apps are not available at this time. Please try again in few minutes or contact your help desk with this...

Duplicate Basedisk present in storage after MCS upgrade process completes

Virtual disk storage repositoryis filling up unexpectedly Duplicate Base Disk volumes will be present in storage repositories...

App Layering | The digital signature on wfica32.exe is invalid

When opening a Citrix application from the store, the .ica is downloaded to the computer. When that .ica file is opened, an error message appears: "The digital signature on wfica32.exe is invalid."...

NetScaler GUI shows Security Updates Alert

The security updates alert is shown after logging into the NetScaler GUI...

How to Enable/Disable SSH on XenServer Host

How to Enable/Disable SSH on XenServer Host...

Installation NOT Successful For 'Citrix Workspace Inside' due to Error: 1625

Workspace app for Windows installation failed with error code 1625...

Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices

In general we have seen two issues with the beta releases from Apple for Sonoma and iOS 17. So if the versions prior to 23.09.1 of the Citrix Secure Access and SSO apps are used with MacOS Sonoma and iOS/iPadOS 17, then the following issues would be seen: Apps will not be able to generate the log...

SNMP Manager cannot get data from NetScaler

SNMP manager cannot get data from NetScaler, getting error "No Response from " when doing snmpwalk in SNMP manager. root@Zabbix snmpwalk -v 2c -c Timeout: No Response from Note: The SNMP manager is Zabbix in this case...

Radius authentication failure

According to network trace captured on NetScaler, there is no response from radius server after NetScaler sending Access-Request packet toradius server. This issue occurred suddenly, and the related configuration of radius authentication on NetScaler has not changed...

[NetScaler-Syslog] HA Secondary node Cannot Transmit Syslog Messages in TCP

NetScaler supports report syslog messages to an external syslog server. But in HA deployment, you may observe the issue that: HA Secondary node doesn't send syslog messages while Primary is good if "Transport Type" is TCP. Configuring it to UDP has no issue...

"The network logon service was not started" when logging onto PVS Target Device via Console

When logon PVS Target Device TD via console, it throws below error: "An attempt was made to logon but the network logon service was not started." TD VDI is unregistered status in Citrix Studio...

Citrix Workspace App Shows as Blank Page for Domain Users

Domain users can launch app/desktop via web successfully 2. Cannot see the add account page of Citrix WorkSpace App...

Anonymous user sessions cannot get a valid RDS User CAL license

With RDS User CALs deployment, anonymous user sessions cannot launch successfully...

How to drop illegal hostname contained request in NetScaler Gateway with responder policy

This article will describe how to configure responder policy to drop illegal hostname contained request in a NetScaler Gateway. e.g."nsg.lab.local" is the FQDN of NetScaler Gateway, to block user from accessing the gateway with other URLs, like IP address or other FQDN with tempering DNS records...

Windows Workspace Authentication Error "incorrect user name or password" via NetScaler Gateway

When using Windows workspace, after input username, password and passcode, error prompt "incorrect username or password"two-factor basic authentication. And can't access Storefront resource list. While access same Gateway with Web Browser is working fine...

NetScaler peer node status UNKNOWN in primary node

During setup of NetScaler High AvaliabilityHA, HA node 1 show status UNKNOWN in primary node. In NetScaler primary node GUI, 1. navigate toSystem High Availability Nodes , provide the peer node’s NSIP address in theRemote Node IP Address field and peer node's login credentials, 2. Click Create...

How to get delivery group published name/assigned users detail information via Powershell command

Get delivery group published name/assigned users/Desktopsdetail information via Powershell command...

NetScaler SSL Certificates missing after upgrading Secondary Node

NetScaler SSL Certificates missing after upgrading Secondary Node...

ldap test randomly fails through SSL_TCP Load Balancing Vserver on NetScaler

The customer configured ldap authentication through NetScaler SSLTCP LB Vserver for backend ldap server. Customer found ldap test fails randomly...

Add and remove accounts buttons disappeared on Citrix Workspace app for Windows

Add and Remove Accounts buttons disappeared on Citrix Workspace app for Windows...

Error: "Your logon has expired..." When using multiple Netscaler Gateways

Error: "Your logon has expired..." When using multiple Netscaler Gateways to access a single store on StoreFront...

Users receive error "Try again after some time or contact your help desk" at login

While accessing ADC Gateway or Authentication page, in certain conditions users received one of these two errors: "Try again after some time or contact your help desk". "Malformed assertion sent to Netscaler" Users redirected to Login page. To validate this is the cause, you can check ADC syslogs...

How to block specific URL request with rewrite policy in NetScaler

This article describes how to configure rewrite policy to drop specific URL request to NetScaler Load Balancing Virtual Server traffic...

How to recognize NetScaler Gateway user login failure related logs

This article describe how toRecognize NetScaler Gateway User Login failure related logs...

How to view all user active and terminated sessions in Gateway & HDX Insight

This Article describes how to view all users active and terminated sessionsin a single-pane visualization in Gateway & HDX Insight...

Fail to launch session with Event ID6 error after changing display setting.

Launch session takes 67 seconds and then fails. Check the Event Log, there are several Event ID 6 Errors recorded. Error Message: Citrix ICA could not configure Thinwire and switch to the remote ICA display. Rebooting the workstation or logging in to the console will fix this...

Workspace App mouse click placement mismatch

When an application is started from the Citrix Workspace for a multi-monitor setup 5+ monitor setup it's impossible to click on the app. Actual mouse click location does not match clicked location...

Safari browser loading Web page failure when accessing HTTP2 LB Virtual Server

If ADM Web Insight Client Side Management CSM is enabled, only the Safari browser is unable to open Web page via HTTP2 enabled LB Virtual Server. If ADM Web Insight Client Side Management CSM is disabled, issue does not occur. While other browsers i.e. Firefox, Chrome work fine regardless of the...

How to Change Desktop Icon for One Delivery Group

Modify the display icon for published desktop to use customized icons and/or point to use any existing icons...

WAN Latency and DC Latency show as "NA" in ADM HDX Insight

customer found "WAN Latency" 、"DC Latency" and some metrics value appears as "NA" in ADM HDX Insight report. Like below:...

NetScaler NTP sync failure when NTP server Root Dispersion value greater that 1 second

NetScaler NTP sync failure when Root Dispersion value is larger than 1 second. Dispersion isthe maximum difference recorded between the NTP client and the NTP serverrecorded in seconds. Root Dispersion measures the maximum amount of variance between the NTP server and its known time source. If...

How to Load Balancing PVS server in NetScaler

This article summaries tips when configure Load balance for PVS server...

Error "User not authorized for any operation" for ADM external LDAP users

External LDAP users can't login NetScaler ADM, receive error message:"User not authorized for any operation"...

How to use rewrite policy to add text message or links under logon button in Gateway logon page

This article describes how to add text message or links to Gateway logon page with RfWebUI based portal theme. The below image is the Gateway logon page for an end user. Links and text message are under Log On button. The solution in this article applies to both basic authentication and AAA...

NetScaler native OTP (One-Time Password) device registration failure

Can't register device for native OTP authentication in NetScaler...

Application of HDX insight no data on ADM

Application name is Chinese. There is no data on ADM HDX insight. Desktop name is English. Data shown on ADM HDX insight...

How to export NetScaler files via FTP protocol

This article contains command sample in NetScaler to export some files via FTP protocol...

Citrix Audio Diagnostic Tool

Citrix Audio Diagnostics tool 1.0.3 What’s new for this release? Support new policy Loss Tolerant Mode for Audio. Optimize the display of network metrics for high round-trip times ICA RTT. Support command-line mode and a runtime option in seconds, allowing the tool to operate in the background fo...

Registered OTP Device Removal Failure on native OTP management page

The following log can be found in "/tmp/aaad.debug" nsldapregisterencryptedotp 1-52: nsldapregisterencryptedotp: secret empty, nothing to delete for user...

SSLVPN error "Websocket connection failed: Connection closed before receiving a handshake responser"

After VPN tunnel established to NetScaler gateway, user encounter access issue s to backend server with error message: "Websocket connection to 'ws:///ws/notification/site-msg/' failed: Connection closed before receiving a handshake responser"...