How to create a TLS1.3 profile on NetScaler

This is a step-by-step on how to create a profile TLS 1.3 on the NetScaler and attach those to specific LB Virtual Server...

App Layering - Unable to publish the image - disk space is full

App Layering - Unable to publish the images with a disk space is full error message. Error: A failure occurred while publishing the Layered Image: An error occurred while compositing the layer or image. Please check the available disk space on the local storage or the size of the target image...

Exploring ICA Login and Logout Records in NetScaler logs

This articlestates the essential ICA login and logout records contained within the NetScaler's "/var/log/ns.log."...

How to check the version of FreeBSD on NetScaler

...

Extended ICA connection interruption during NetScaler HA failover on Azure

Users are encountering extended ICA connection interruptions during NetScaler High Availability HA failover events within the Azure environment. The HA node pairs have been configured on Azure, with VPX serving as the Citrix Gateway for a Citrix Virtual Apps and Desktops CVAD environment. Upon...

WEM Console - A valid license server with appropriate licenses needs to be configured

When opening the WEM server this gives an error"A valid license server with appropriate licenses needs to be configured" The license server and port are correctly configured in WEM Infrastructure Service console The licenses have the correct SA DAte in Citrix Studio Servers are reachable over the...

App Layer creation Fails with "A socket operation was attempted to an unreachable network"

App Layer creation Fails with "A socket operation was attempted to an unreachable network :65530"...

WEM Agent error, "Only a single agent instance can be run within a session!"

Error showing from WEM Agent, "Only a single agent instance can be run within a session!"...

High Availability Setup on Amazon Web Service

This article describes the design perspective of High Availability HAon Amazon Web Service AWS environment. Background AWS does not support Gratuitous Address Resolution Protocol GARP, Virtual Local Area Network VLAN or any Layer-2 L2 functionalities like bridging. Two virtual machines belonging ...

Mouse cursor disappears when launching a session in full-screen mode

Mouse cursordisappears when launching a session in full-screen mode...

How to Configure NetScaler Command Policy only for SSL certificate operation

command policy for SSL certificate operation on WebGUI...

Driver Disk for Microsemi smartpqi 2.1.24_046 - For Citrix Hypervisor 8.2 LTSR

Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Microsemi's smartpqi driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- smartpqi| SAS/Storage Controller| 2.1.24046 Issues resolved in thi...

Workspace Error: "Your account cannot be added using this server address"

When adding account with NetScaler Gateway FQDN in Workspace, you may have below error prompt: "Your account cannot be added using this server address. Make sure you entered it correctly. You may need to enter your email address instead."...

How to update ADC appliance's credential to ADM Admin Profile

...

Addressing the "Down" Status of Secondary ADM Database

After upgrading the firmware from ADM13.0-85.19 to ADM13.0-89.7, the customer encountered a problem where the status of the secondary ADM database is marked as "down."...

Mastering Historical Throughput/Bandwidth data Using NetScaler Reporting feature

This article aims to provide a comprehensive guide on utilizing the reporting feature to effectively capture historical throughput data in NetScaler...

Historical ICA RTT data

How to capture Historical ICA RTT data...

How to correct a VIP not replying after an IP conflict

IP conflict errors VIP not accessible VIP does not reply ping -In this specific scenario there is a host on the network that was statically assigned an IP that the ADC was using on a VIP...

Leaving non-persistent virtual machines of the provisioning scheme at the hypervisor is not allowed.

Unable to delete orphaned VMs by using Powershell from catalog which has already been removed via Powershell. When running command: Remove-ProvScheme The below error is seen: "Leaving the non-persistent virtual machines of the provisioning scheme 'provisioning scheme name' at the hypervisor is no...

Cannot launch applications nor desktops at the second try in Citrix Workspace App

After adding the store to Workspace App, users can launch applications successfully for the first time. But when users exit the Workspace app and reopen it, they fail to launch applications on the second try. Error "Your apps are not available at this time" appears...

Add New VMs to MCS catalog Failed with Error "CreateClone Failed: No Virtual Disk Image Exists"

Received an Inner Error when adding new VMs to an existing MCS catalog: CreateClone failed: no virtual disk image exists with ID 'xxxx'...

How to insert a Cross-Origin Resource Sharing header - allowing access from external domains

Describe how toallow CORS - Access-Control-Allow-Origin Header with rewrite policy by insert the header response from Server and detail its implementation. What is it? 1. Cross-Origin Resource Sharingallows restricted resources e.g., fonts, JavaScript, etc. on a web page to be requested from...

How to delete duplicate HSTS header

Explain how to eliminate the duplicate HSTS header Duplicated header HSTS Why? it could come from a backend server, and also being applied from the ADC Vserver configuration, so we need to decide which header to keep. In this case, the client wants to delete the HSTS header coming from the server...

How to add, delete or modify On-Prem ADM Agent ciphers

Provide the steps to modify ciphers used on ADM Agent on prem...

How to connect to Xenserver/dom0 and SVM on a SDX

Demonstrate how to connect to XenServer/dom0 and SVM on an SDX via CLI & GUI...

How to auto launch published app while logon Storefront Web URL

This article describes how to enable and customize "auto launch published app" feature from Storefront server. Caution! Citrix does not support or assist with this customized configuration. Perform this modification at your own risk. If you do proceed, make sure to always take a backup before...

Joining Server Group failed with error "Exception attempting to authorize, TCP error code 10060"

Joining the Server Group failed with the following errors. Studio UI: Please refer to the Windows Event Log on the Authorizer details. Windows Event Log: Citrix Cluster Join Service,1,2201,"Join failed. Exception attempting to authorize. Could not connect to...

How to manually update Web Application Firewall Signatures

Provide steps to updateWeb Application Firewall Signatures...

How to add custom text or a disclaimer to a login schema

How to add a custom text / Disclaimer to the XML file of a login schema...

How to create a Rewrite policy that will change characters in URL to lowercase

How to create a Rewrite policy that will change characters in URL to lowercase...

Moving to RFwebUI from deprecated themes Default, Green Bubble, or X1

Show the information of deprecated themes Default, Green Bubble, or X1,...

How to upgrade Netscaler ADM as standalone or in HA

How to upgrade Netscaler ADM as standalone or in HA...

Services and Virtual Servers show State: Unknown. / /var/crash filesystem full

State: Unknown. Services and Virtual Servers /shell $cat df-akin.out FilesystemSizeUsedAvail Capacity iused ifree %iusedMounted on /dev/md0429M415M5.6M99%13k44k23%/ devfs1.0k1.0k0B100%00100%/dev procfs4.0k4.0k0B100%10100%/proc /dev/ad0s1a1.6G160M1.3G11%286211k0%/flash...

How to migrate ns.conf from one appliance to another using Batch Configuration

Demystifying how to migrate the configuration of an existing NetScaler appliance to another NetScaler appliance...

How to Use NetScaler Appliance to Avoid DDoS Attacks.

How to Use NetScaler Appliance to Avoid DDoS Attacks...

Eliminate Advanced Endpoint Analysis scans on Mobile devices/iOS.

We have a pre-epa + ldap as the authentication method. Since we have EPA as pre-authentication when we try to access via the mobile devices such as Android/iPhone or iOS and other devices we won’t be able to access. As we know that EPA scan is not supported on mobile devices or iOS, therefore we...

Certificate trust error after updating SSL server certificate from new Intermediate or Root CA.

After updating a server SSL certificate, users are receiving certificate error "You have not chosen to trust 'DigiCert Global Root G2', the issuer of the server's security certificate.", "NET::ERRCERTAUTHORITYINVALID" or other certificate trust error...

NetScaler HA interface report "No HA heartbeats"

The customer saw "No HA heartbeats" on two NetScaler HA nodes' interfaces...

StoreFront service status down after NetScaler HA failover

The customer triggered NetScaler HA failover, in the new Primary node, StorefrontSF service status show down with Monitor connection Timeout error...

Hide "Virtual Disk status" icon from System tray on the endpoints

Disable the vDisk status icon from being displayed within the system tray on the endpoints after launching ICA sessions against PVS provisioned VDAs...

How to configure Responder policy to redirect http request to https

This article provide a Responder policy sample to achieve of redirecting http traffic to https for Content Switching Virtual Server with Responder policy in NetScaler. Policy is both applicable for http/ssl type Load balance virtual server...

Re-installation Session Recording Agent fails with Error 1920

Session Recording Agent installation failed with Error 1920, below events are logged on VDA Application Event log Event ID : 11920 with message Error 1920. Service 'Citrix Session Recording Agent' CitrixSmAudAgent failed to start. Verify that you have sufficient privileges to start system service...

How To: Force all users to access and authenticate at the NetScaler (ADC) Gateway.

To force all users to authenticate at the Gateway and not be able to log in directly to StoreFront...

SSL handshake failure when client hello contains cipher suit "TLS_EMPTY_RENEGOTIATION_INFO_SCSV"

During SSL handshake process in packet trace: 1. After client sending "Client Hello" contains cipher suit "TLSEMPTYRENEGOTIATIONINFOSCSV " to NetScaler, NetScaler replied "server Hello "、"certificate"、"server key exchange " and "server hello done" to client. Refer pic.1 2. client replies...

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS

How to disable the automatic launch Citrix Workspace App for Windows when logging into the OS...

Numlockが勝手に切り替わる

公開デスクトップ利用中に USB テンキーパッドのオン・オフが勝手に切り替わってしまうことがありました。 ・USB テンキーパッドの機種を変更したところ、事象が発生しなくなりました ・使用アプリケーションや操作内容には依存しません ・USB テンキーパッド部分の操作中、意図せず発生した事象であり、キーボードのその他キー操作では発生しませんでした ・なお、接続元端末における以下のレジストリ設定変更では解消しませんでした。 HKEYLOCALMACHINE\SOFTWARE\Wow6432Node\Citrix\ICA Client\Engine\Lockdown Profiles\All...

How to verify hardware health status on NetScaler MPX

How to verify hardware health status on NetScaler MPX...

How to enable WebSocket on load balancing virtual server

...

Microsoft Security Update Validation Report August 2023

Microsoft’s August 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues August still be found upon implementation. Follow best practices for testing and installing...

Unable to list or change the Master Image for a MCS catalog in Studio

Unable to list or change the Master Image for a MCS catalog in Studio. Error Cannot find path 'XDHyp:\HostingUnits\\image.folder\undefined.sharedsubscription' because it does not exist. For details, click here. If the problem persists, contact Citrix Technical Support. Transaction ID:...