Role of Spoofed IP address in FQDN Based Tunneling

What is the role of Spoofed IP address in FQDN Based Tunneling...

Citrix Endpoint Management (aka XenMobile Server) 10.14.0 Rolling Patch 10

Package name: xms10.14.0.11013.bin For: XenMobile Server 10.14.0 Deployment type: On-premises only Replaces: xms10.14.0.10942.bin, xms10.14.0.10813.bin, xms10.14.0.10742.bin, xms10.14.0.10628.bin, xms10.14.0.10521.bin, xms10.14.0.10424.bin, xms10.14.0.10303.bin, xms10.14.0.10206.bin, and...

Connection Interrupted. Citrix Workspace will try to reconnect in over an hour

Connection Interrupted. Citrix Workspace will try to reconnect in over an hour...

Workspace App for Mac - Known Issue - March 23rd 2023

When using Citrix Workspace App for Mac, users may receive the following errors: - Unable to communicate with Authentication Manager service - The Store doesn't exist. Please retry or contact support. - Citrix Workspace cannot connect to the server. Check your network connection. -Could not...

Anonymous LOGOUT logs explanation

ns.log： Dec 31 16:13:57 172.31.248.107 12/31/2022:08:13:57 GMT PHQCXADC01 0-PPE-0 : default SSLVPN Message 263167 0 : "Created nFactor session for user Anonymous" Dec 31 16:13:57 172.31.248.107 12/31/2022:08:13:57 GMT PHQCXADC01 0-PPE-0 : default SSLVPN Message 263174 0 : "AAAD API:...

No authentication is required when accessing another different Gateway VServer

Two Gateway Vservers with the same FQDN and VIP are created onthe same ADC but listed on the different ports8443 and 9443. If logging into Citrix Gateway1 with port 8443 first, and then open a new browser tab page to access Citrix Gateway2 with port 9443, users can see the published resources...

[NetScaler] LDAP password can be changed with an incorrect Radius Passcode

Below is an example of common 2Factor authentication flow: Root factor: Start Login Schema XML = /nsconfig/loginschema/LoginSchema/DualAuth.xml Adv Authn Policy = LDAPPol Rule = true Action = LDAPAct Next Factor if Success = RadiusFactor Login Schema Profile = LSCHEMAINT Adv Authn Policy =...

How to disable StoreFront's http communication

How to disable StoreFront's http communication...

How to disable/enable a service (LB, GSLB, etc.) using the NetScaler's CLI

How to disable/enable a service LB, GSLB, etc. using CLI...

The certificate authority is invalid or incorrect

EPA scan error. "Access Denied: your device does not meet requirements for logging on" "The certificate authority is invalid or incorrect." from nspex.txt...

How to increase space on Citrix ADC VPX instance

How to increase space on Citrix ADC VPX instance?...

ADM Service: How to identify which VIPs belong to which NetScaler

To quickly identify within ADM / ADM Service in which NetScalers a specific VIP LB/CS/GW,etc. may be configured...

Active TLS1.1 and Weak Ciphers Causing environment Vulnerabilities

This Tech Paper aims to convey what someone skilled in ADC would configure as a generic implementation to receive an A+ grade atQualys SSL Labs...

One client failed on installing CWA due to it failed detecting the Edge Webview2 installation

One client failed on installing CWA in an intranet environment due to it failed detecting the Edge Webview2 installation.Manually install Webview2 with full-blown installer again still can't fix this issue...

How to specify command line parameters when distributing a WEM application

To deploy applications via Workspace Environment management with additional command line parameters...

Virtual Application Launch Failure with error "The published resource is not available currently"

Launch virtual app failure via Gateway with error :"The published resource is not available currently"...

"pb_op_longer_hb for critical process NSPPE-00 (1285) 150 secs" related log explanation

ns.log: Mar 9 22:29:11 gash-vpx-uat2 nssync: NSSYNC: SYNC started.... Mar 9 22:29:11 10.168.253.225 03/09/2023:14:29:11 GMT gash-vpx-uat2 0-PPE-0 : default EVENT STATECHANGE 4713434 0 : Device "self node 10.168.253.225" - State "SYNC start " Mar 9 22:29:12 gash-vpx-uat2 nssync: Send HA File sync ...

Citrix Secure Access setup failed in Windows11 (ARM64 based)

CitrixSecure Accesssetup failed in Windows11 ARM64 based with the below error "Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network ConfigurationOperators group......"...

Microsoft Security Update Validation Report March 2023

Microsoft’s March 2023 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English-only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

Workspace App 2203 LTSR CU2 displays a blank white box after login

Citrix Workspace App displays a blank white box after login. Issue does not happen when testing older versions of Citrix Workspace App such as 1912CU3...

Syslog not being sent to external syslog server from Citrix Cloud Gateway Service (Adaptive Auth)

Configure external syslog server when using Cloud Gateway as a Service for Adaptive Authentication...

CWA displaying apps differently depending on which Storefront server you connect to

When connecting to a new Storefront server, customer is seeing icons that are displayed differently then they do when connecting to another Storefront server running the same version. Connected to the 1st server, the apps looked like this: Connected to the 2nd server, the apps looked like this:...

How to configure ARM templates using the new Azure App Layering Azure connector

How to configure ARM templates using the new Azure App Layering Azure connector...

How to Hide HTML5 Workspace App Toolbar Download Option?

Hide 'Download' option in HTML5 Workspace App toolbar...

Cannot complete request when accessing HTTPS Storefront URL

When users access the storefront webpage they get an error saying "cannot complete request" on the detect workspace app / receiver web page...

Updating Expired DigiCertSHA2SecureServerCA Certificate in Citrix Workspace app for Linux

Users may face issues while connecting to an HDX session...

PVS - Imaging Wizard fails when creating Vdisk. Error after restart 'Imaging wizard did not restart'

When attempting to create a vDisk, the Imaging Wizard gets as far as requiring a reboot, but after the restart returns the error 'Imaging wizard did not restart'...

PVS server lost the connection to vDisk after storage failover.

vDisks are located in NAS storage which is created as failover group. After storage failover occurs, PVS server loses the connection to the vDisks and does not automatically recover it. Target devices freeze during that time since the vDisk I/O to NAS storage stops...

Several PVS target devices can not be registered

One or several PVS targets can not be registered even after rebooting while other targets are registered with DDC successfully...

Requirement to update Virtual Hosting Pool ID after moving machines to new host connection

After moving virtual machines from an old host connection to a new host connection, you may experience issues with power managing machines from the PVS console or if VMs have been created with BDM Boot Partition, you may not be able to update the BDM Boot partition when you add an additional PVS...

Citrix Workspace App Fails to Upgrade with an Error 0x800951C2

Citrix Workspace App fail to upgrade with an error 0x800951C2 when upgrading Server VDA from 1912 CU4 to 2203 CU2...

Citrix PVS target device BSODs upon installing Zscaler client.

Installing the Zscaler client on Citrix PVS target device causes a blue screen of death. Target device crashes with exception code 7e caused by access violation of Citrix Virtual Hard Disk driver,CVhdMp.sys...

Service 'Citrix Workspace Updater Service' (CWAUpdaterService) Failed to Start When Installing CWA

Failed to install CWA. Error message shows:Service 'Citrix Workspace Updater Service' CWAUpdaterService failed to start, Verify that you have sufficient privileges to start system services...

Unable to use port 8080 for Citrix Cloud WEM Services connectivity

When setting up Cloud WEM Services in your environment, you may have a requirement to use a different port than port 8080 for communication as it may be blocked due to internal policies. An alternative port is required to be used both for the local agent and for listening on the Cloud Connector...

Virtual Servers and Service Groups DOWN after secondary ADC upgrade

Virtual Servers and Service Groups DOWN after secondary NetScaler upgrade...

Web log client "login unsuccessful" using nsroot

C:\NSWL\binnswl -start -f c:\nswl\etc\log.conf Debug log file is ./nswl.log-130620221156 & Log level is 1 NetScaler weblogging configuration file c:\nswl\etc\log.conf is correct Login unsuccessful nspe=redacted IP:user=nsroot!!!...

How to disable "This Site is trying to open citrix workspace launcher" prompt when launch resource

"This Site is trying to open citrix workspace launcher" when launch resourcevia Edge or Google Chrome...

LAPS : Randomizing Local Admin Passwords in Non-persistent Environments

Use LAPS inLocal Admin Passwords for Non-persistent Environments...

workspace cannot find a valid smart card certificate

Workspace App gives error " cannot find a valid smart card certificate". This works via Browser but not via Workspace App...

Provide a report that can display all applications installed on a device

Customer looking for a way to get a list or inventory of all apps from a device. The app inventory policy is not sufficient or detailed enough. Or is there a way to get the list of all apps installed on all devices, so the customer can filter out the apps. Reporting Devices and apps section only...

How to migrate an existing ADM instance to a newly deployed ADM server.

To demonstrate how to migrate an existing ADM instance to a newly deployed ADM server...

Fail to install xenserver patch: The uploaded update file is invalid

Fail to install xenserver patch with error "The uploaded update file is invalid" xensource.log shows below trace. Oct 12 15:22:10 xxxxx xapi: warn||5521 HTTPS 192.168.23.251-:::80|poolupdate.introduce R:fc93dd2259e5|pervasiveext finally: Error while running cleanup after failure of main function:...

How to Query License Usage Through PowerShell command in DDC​

Admin needs to leverage PowerShell to get the usage of Citrix license in DDC...

Failed to obtain XenServer host list when run powershell Remove-Provscheme

XenServer hosts have retired, but the configuration was not deleted from DDC. When trying to delete the host connection from Studio, error was thrown. When using Powershell Remove-Provscheme to delete the associated provisioning information, error "Failed to obtain XenServer host list" isthrown...

Upgraded Citrix ADC from 12.1 to 13.0. MFA now giving extra field.

We just upgraded our secondary Netscaler to version 13.0-89.7 firmware. The issue we are having is an extra field appeared on the Imprivata ID 2-Factor page that was not there before. We hadn't upgraded the Primary, yet since this was an issue. Not having this issue on 12.1. Do we need to set up...

[Citrix NetScaler] Monitor DOWN with error: "No MIP/SNIP available to send the monitor probe"

You may see services DOWN with error "No MIP/SNIP available to send the monitor probe". 216814 PPE-0 MonServiceBindingXXXXXXXXXX: DOWN; Last response: Failure - No MIP/SNIP available to send the monitor probe. Thu Dec 17 08:45:07 2020...

App Layering - Windows and Office activation lost after upgrading to 2211

Provisioned machines with user layers lose their Windows activation status or Office will report not being activated, after upgrading to App Layering 2211...

How to hide Storefront store from NetScaler Gateway

This article address a workaround to hide multiple stores' choice when adding account via NetScaler Gateway in Workspace at the fist time...

FAS: Information about Microsoft KB KB5014754/CVE-2022-34691, CVE-2022-26931 and CVE-2022-26923

• SSO will fail while trying to launch published resources and users will get the error that "The username or password is incorrect". They will be able to manually authenticate after clicking OK on VDIs/published desktops but there might be issues with published applications. • FAS will be able t...

[ADC] ICA sessions are NOT sent to ADM with "Skip Code [169]"

You may observe some ICA sessions are displayed in GUI Configuration Citrix Gateway ICA Connections, but not in ADM HDX Insight. NetScaler ADC ns.log displays the following error: ICARECORD: Skipping ICA flow: ...... Skip Code 169...