App Layer creation Fails with "A socket operation was attempted to an unreachable network"

App Layer creation Fails with "A socket operation was attempted to an unreachable network :65530"...

Exploring ICA Login and Logout Records in NetScaler logs

This articlestates the essential ICA login and logout records contained within the NetScaler's "/var/log/ns.log."...

Mouse cursor disappears when launching a session in full-screen mode

Mouse cursordisappears when launching a session in full-screen mode...

Extended ICA connection interruption during NetScaler HA failover on Azure

Users are encountering extended ICA connection interruptions during NetScaler High Availability HA failover events within the Azure environment. The HA node pairs have been configured on Azure, with VPX serving as the Citrix Gateway for a Citrix Virtual Apps and Desktops CVAD environment. Upon...

App Layering - Unable to publish the image - disk space is full

App Layering - Unable to publish the images with a disk space is full error message. Error: A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image...

ADM HA "Not valid password or incorrect host IP or the host is unable to respond the the request"

When adding the primary ADM on the secondary ADM, the customer encountered the following error: "Not valid password or incorrect host IP or the host is unable to respond to the request."...

How to update ADC appliance's credential to ADM Admin Profile

...

How to Configure NetScaler Command Policy only for SSL certificate operation

command policy for SSL certificate operation on WebGUI...

Addressing the "Down" Status of Secondary ADM Database

After upgrading the firmware from ADM13.0-85.19 to ADM13.0-89.7, the customer encountered a problem where the status of the secondary ADM database is marked as "down."...

Workspace Error: "Your account cannot be added using this server address"

When adding account with NetScaler Gateway FQDN in Workspace, you may have below error prompt: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...

Mastering Historical Throughput/Bandwidth data Using NetScaler Reporting feature

This article aims to provide a comprehensive guide on utilizing the reporting feature to effectively capture historical throughput data in NetScaler...

Historical ICA RTT data

How to capture Historical ICA RTT data...

Driver Disk for Microsemi smartpqi 2.1.24_046 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- smartpqi| SAS/Storage Controller| 2.1.24046 Issues resolved in thi...

Cannot launch applications nor desktops at the second try in Citrix Workspace App

After adding the store to Workspace App, users can launch applications successfully for the first time. But when users exit the Workspace app and reopen it, they fail to launch applications on the second try. Error "Your apps are not available at this time" appears...

How to insert a Cross-Origin Resource Sharing header - allowing access from external domains

Describe how toallow CORS - Access-Control-Allow-Origin Header with rewrite policy by insert the header response from Server and detail its implementation. What is it? 1. Cross-Origin Resource Sharingallows restricted resources e.g., fonts, JavaScript, etc. on a web page to be requested from...

Joining Server Group failed with error "Exception attempting to authorize, TCP error code 10060"

Joining the Server Group failed with the following errors. Studio UI: Please refer to the Windows Event Log on the Authorizer details. Windows Event Log: Citrix Cluster Join Service,1,2201,"Join failed. Exception attempting to authorize. Could not connect to...

Add New VMs to MCS catalog Failed with Error "CreateClone Failed: No Virtual Disk Image Exists"

Received an Inner Error when adding new VMs to an existing MCS catalog: CreateClone failed: no virtual disk image exists with ID 'xxxx'...

How to connect to Xenserver/dom0 and SVM on a SDX

Demonstrate how to connect to XenServer/dom0 and SVM on an SDX via CLI & GUI...

How to correct a VIP not replying after an IP conflict

IP conflict errors VIP not accessible VIP does not reply ping -In this specific scenario there is a host on the network that was statically assigned an IP that the ADC was using on a VIP...

How to add, delete or modify On-Prem ADM Agent ciphers

Provide the steps to modify ciphers used on ADM Agent on prem...

Leaving non-persistent virtual machines of the provisioning scheme at the hypervisor is not allowed.

Unable to delete orphaned VMs by using Powershell from catalog which has already been removed via Powershell. When running command: Remove-ProvScheme The below error is seen: "Leaving the non-persistent virtual machines of the provisioning scheme 'provisioning scheme name' at the hypervisor is no...

How to delete duplicate HSTS header

Explain how to eliminate the duplicate HSTS header Duplicated header HSTS Why? it could come from a backend server, and also being applied from the ADC Vserver configuration, so we need to decide which header to keep. In this case, the client wants to delete the HSTS header coming from the server...

How to auto launch published app while logon Storefront Web URL

This article describes how to enable and customize "auto launch published app" feature from Storefront server. Caution! Citrix does not support or assist with this customized configuration. Perform this modification at your own risk. If you do proceed, make sure to always take a backup before...

How to upgrade Netscaler ADM as standalone or in HA

How to upgrade Netscaler ADM as standalone or in HA...

Services and Virtual Servers show State: Unknown. / /var/crash filesystem full

State: Unknown. Services and Virtual Servers /shell $cat df-akin.out FilesystemSizeUsedAvail Capacity iused ifree %iusedMounted on /dev/md0429M415M5.6M99%13k44k23%/ devfs1.0k1.0k0B100%00100%/dev procfs4.0k4.0k0B100%10100%/proc /dev/ad0s1a1.6G160M1.3G11%286211k0%/flash...

How to migrate ns.conf from one appliance to another using Batch Configuration

Demystifying how to migrate the configuration of an existing NetScaler appliance to another NetScaler appliance...

How to Use NetScaler Appliance to Avoid DDoS Attacks.

How to Use NetScaler Appliance to Avoid DDoS Attacks...

How to add custom text or a disclaimer to a login schema

How to add a custom text / Disclaimer to the XML file of a login schema...

How to create a Rewrite policy that will change characters in URL to lowercase

How to create a Rewrite policy that will change characters in URL to lowercase...

Moving to RFwebUI from deprecated themes Default, Green Bubble, or X1

Show the information of deprecated themes Default, Green Bubble, or X1,...

How to manually update Web Application Firewall Signatures

Provide steps to updateWeb Application Firewall Signatures...

Eliminate Advanced Endpoint Analysis scans on Mobile devices/iOS.

We have a pre-epa + ldap as the authentication method. Since we have EPA as pre-authentication when we try to access via the mobile devices such as Android/iPhone or iOS and other devices we won’t be able to access. As we know that EPA scan is not supported on mobile devices or iOS, therefore we...

How to enable WebSocket on load balancing virtual server

...

Re-installation Session Recording Agent fails with Error 1920

Session Recording Agent installation failed with Error 1920, below events are logged on VDA Application Event log Event ID : 11920 with message Error 1920. Service 'Citrix Session Recording Agent' CitrixSmAudAgent failed to start. Verify that you have sufficient privileges to start system service...

SSL handshake failure when client hello contains cipher suit "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"

During SSL handshake process in packet trace: 1. After client sending "Client Hello" contains cipher suit "TLSEMPTYRENEGOTIATIONINFOSCSV " to NetScaler, NetScaler replied "server Hello "、"certificate"、"server key exchange " and "server hello done" to client. Refer pic.1 2. client replies...

Certificate trust error after updating SSL server certificate from new Intermediate or Root CA.

After updating a server SSL certificate, users are receiving certificate error "You have not chosen to trust 'DigiCert Global Root G2', the issuer of the server's security certificate.", "NET::ERRCERTAUTHORITYINVALID" or other certificate trust error...

How to verify hardware health status on NetScaler MPX

How to verify hardware health status on NetScaler MPX...

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS...

NetScaler HA interface report "No HA heartbeats"

The customer saw "No HA heartbeats" on two NetScaler HA nodes' interfaces...

Numlockが勝手に切り替わる

公開デスクトップ利用中に USB テンキーパッドのオン・オフが勝手に切り替わってしまうことがありました。 ・USB テンキーパッドの機種を変更したところ、事象が発生しなくなりました ・使用アプリケーションや操作内容には依存しません ・USB テンキーパッド部分の操作中、意図せず発生した事象であり、キーボードのその他キー操作では発生しませんでした ・なお、接続元端末における以下のレジストリ設定変更では解消しませんでした。 HKEYLOCALMACHINE\SOFTWARE\Wow6432Node\Citrix\ICA Client\Engine\Lockdown Profiles\All...

How to configure Responder policy to redirect http request to https

This article provide a Responder policy sample to achieve of redirecting http traffic to https for Content Switching Virtual Server with Responder policy in NetScaler. Policy is both applicable for http/ssl type Load balance virtual server...

Hide "Virtual Disk status" icon from System tray on the endpoints

Disable the vDisk status icon from being displayed within the system tray on the endpoints after launching ICA sessions against PVS provisioned VDAs...

StoreFront service status down after NetScaler HA failover

The customer triggered NetScaler HA failover, in the new Primary node, StorefrontSF service status show down with Monitor connection Timeout error...

How To: Force all users to access and authenticate at the NetScaler (ADC) Gateway.

To force all users to authenticate at the Gateway and not be able to log in directly to StoreFront...

License and ciphers are missing after upgrading to the latest version on 13.0 and 13.1

License and ciphers are missing after upgrade to the latest version on 13.0 and 13.1...

Microsoft Security Update Validation Report August 2023

Microsoft’s August 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues August still be found upon implementation. Follow best practices for testing and installing...

Trace HTML Requests with Application Firewall Security Violation Logs on NetScaler Appliance

The NetScaler offers the option to isolate traffic for a specific Application Firewall profile and collect nstrace for HTML requests that trigger a log, block action or have malformed requests. The nstrace collected in "–appfw" mode will have details of the entire request including the Applicatio...

Radius server test connectivity fails : Error: '1812/udp' is not a valid Radius authentication port.

Radius server test connectivity failure. Error: "Either 'ServerIP' is not a valid Radius server, '1812/udp' is not a valid Radius authentication port or Radius client is not configured properly in the Radius server."...

Unable to list or change the Master Image for a MCS catalog in Studio

Unable to list or change the Master Image for a MCS catalog in Studio. Error Cannot find path 'XDHyp:\HostingUnits\\image.folder\undefined.sharedsubscription' because it does not exist. For details, click here. If the problem persists, contact Citrix Technical Support. Transaction ID:...

How to configure VMs to be powered on automatically after XenServer boot up

This article describes how to configure VMs on XenServer to be powered on automatically after XenServer boot up. Note : This capability is deprecated and will be removed in a future release...