Slow Response to the Client Requests when USIP Mode is Enabled on ADC

When using ADC inUse Source IP USIP mode, a slow response to the client requests is experienced. Servers had requests in surge queues that were not processed. Background The USIP mode enables the NetScaler appliance to communicate with the backend servers by using the original Client IP address a...

Time Display on NetScaler Does Not Sync Using NTP

Time display on NetScaler does not sync using NTP...

General Information on NetScaler SDX LOM

This article provides general information on Lights Out Management LOM on the NetScaler SDX appliance and also about how to configure the NetScaler SDX appliance, initial settings and commands to troubleshoot. Background All NetScaler SDX devices are shipped with a LOM. The LOM has a separate CPU...

Radius Challenge Response Timeout Between NetScaler Gateway and Radius Server

When using two-factor challenge/response authentication through RADIUS, the NetScaler Gateway imposes a session timeout for the RADIUS challenge/response dialogue. In case of SMS token code delivery, there might be long delays between the challenge displayed to the user and the actual submission ...

FAQ: Citrix Secure Hub for Mobile Devices and MicroVPN Technology

Citrix Endpoint Management, using technology formerly called XenMobile This article contains frequently asked questions about MicroVPN with XenMobile App or Enterprise editions and NetScaler Gateway deployments. Q: What are the recommended versions of components for MicroVPN? Q: What is MicroVPN?...

How to Create Custom Theme for Logon Page of NetScaler Gateway 10.1 and 10.5

This article describes how to create custom theme for logon page of NetScaler Gateway virtual server...

Traffic Management Logout Functionality on NetScaler

This article covers the Traffic Management TM logout functionality on NetScaler which is added in 10.0 and 9.3.e releases. The TM logout functionality triggers AAA session logout on traffic action hit. NetScaler can be configured for "Initiate Logout" option in the TM traffic profile. The followi...

How to create message action to log to syslog in Citrix NetScaler

This article describes how to create a message action that can be bound to a responder or rewrite policy that logs to syslog in NetScaler...

StoreFront Logon Error: "Incorrect user name or password"

Domain users are unable to logon to StoreFront and receive an error message: “Incorrect user name or password” with Event ID: 4625 and Failure Reason: “The user has not been granted the requested logon type at this machine”. The error can be seen on Citrix Receiver and on the StoreFront StoreWeb...

NetScaler Appliance System Limits

This article contains information about various system limits for a NetScaler appliance with NetScaler software release 13.1 installed on the appliance. LSN Entities and Bindings Base System Limits Base Networking Limits Load Balancing and Monitoring Limits Advanced Policy/Expression Limits Rewri...

Citrix Gateway Plug-in for Windows Security Update

Description of Problem Vulnerabilities have been identified in Citrix Gateway Plug-in for Windows that, if exploited, could result in a local user escalating their privilege level to SYSTEM. The vulnerabilities have the following identifiers: CVE-2020-8257 CVE-2020-8258 These vulnerabilities affe...

Customize Logon Page for Each NetScaler Gateway Virtual Server and Redirect Users Based on Each FQDN

This article helps you customize a different logon page for each VPN virtual server hosted on NetScaler Gateway, and configure the NetScaler appliance to redirect users to the customized page based on the FQDN. Prerequisites The NetScaler Gateway must be licensed for the Responder feature to...

How to collect data for ADC Gateway VPN issues

To provide a comprehensive guide on how to properly collect data for issues with ADC when these issues are related to Full VPN...

Error: "Socket Operation on Non-Socket" and "Error 1030" When Launching Apps and Desktop Through NetScaler Gateway

1030 error when launching apps and desktop through NetScaler Gateway. Error "Unable to launch your application. Contact your help desk with the following information: Cannot connect to the Citrix XenApp server. Socket operation on non-socket" when launching apps through NetScaler Gateway...

App Layering - User layer is not getting attached on logon. Error "We were unable to determine the status of your layers..."

...

Error: "Login exceeds maximum allowed users" on NetScaler Gateway

Users get the following error message when they try to log on through NetScaler Gateway: "Login exceeds maximum allowed users". Usually this issue appears after a firmware upgrade from NetScaler Gateway 9.x to NetScaler Gateway 10.5 and Universal Gateway License is allocated...

How to Configure RDP Profile on NetScaler Gateway

...

How to Configure an NTP Server on a NetScaler Appliance

This article contains information about configuring a Network Time Protocol NTP server on a NetScaler appliance. Background In the earlier releases of the NetScaler software, you need to manually edit multiple files from the shell prompt of the NetScaler appliance to configure an NTP server. The...

How DNS(Domain Name System) works with GSLB feature on NetScaler

The Domain Name SystemDNS system is considered as a distributed database which uses the Client/Server architecture. Name Servers are the servers in the architecture, and the resolvers are the clients that are typically library routines installed on an operating system that create and send queries...

Error: "Failed with status 1110" When Launching Desktops or Apps Through NetScaler Gateway

Citrix Gateway, formerly Citrix NetScaler Unified Gateway The following errors are displayed when launching desktops or apps through NetScaler Gateway: Failed with status 1110 "The connection to Desktopfailed with status Unknown client error 1110"...

The SNI Feature of NetScaler Appliance

This article contains information about Server Name Identification SNI feature of the NetScaler appliance. Background The SNI feature is included starting with the NetScaler software release 9.2. Note : The SNI feature is not supported on the back end connections. For information on how to...

How to make a Storefront Store as the default page

This article describes how to make a StoreFront Web Site the default page within the IIS site...

Desktop Viewer toolbar does not show up in session using Web Interface

The black Desktop Viewer toolbar does not show up in the XenApp or XenDesktop ICA session of the user...

Joining Storefront to Server Group Error "Cannot Join Server Group"

Error when trying to add second SF server to existing group: "Cannot join server group There was a problem connecting to the authorizing server. Verify the server name and try again." Joining Storefront Server will show the following Event under "Citrix Delivery Services Logs " Log Name: Citrix...

Error: "Cannot complete your request" when login to the Storefront with SAML.

While login to the Storefront with SAML authentication getting "Cannot complete your request" Storefront error : Event ID 6 CitrixAGBasic single sign-on failed because the supplied domain: domain.com is invalid. This has two main causes, either; The single sign-on domain specified in the session...

Configure "-denySSLReneg" Parameter to Disable Client Side and Server Side SSL Renegotiation on ADC

This article describes the configuration and use of -denySSLReneg parameter that is recently added to Citrix ADC appliance firmware and Citrix Gateway application software...

Unable to add published apps icons in the endpoint’s Desktop

The customer is installing CWA1912 in multiple endpoint machines running Windows 7 for one of his clients He is using a 3rd party tool to install CWA via CLI massively. He is pushing the StoreFront Store via GPO and not through the installation command. He already installed CWA in some machines a...

Citrix Hypervisor Security Update

Description of Problem Several security issues have been identified in Citrix Hypervisor formerly Citrix XenServer that may allow privileged code in a guest VM to cause the host to crash or become unresponsive. In addition, unprivileged code in a PV guest VM may be able to cause that guest VM to...

Microphone device at Linux endpoint is not redirected to HDX Session

When using Linux endpoint to connect HDX session, user might find that client-side microphone device is not redirected to HDX Session and media applications running in the HDX Session also cannot detect any microphone device, e.g. in Windows Control Panel Sound "Recording" tab, there is no any...

Selection of Accounts with more than one Store in Workspace App is not getting retained

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. If you select All accounts from the UI of the CWA for Windows for version 1909 or higher, the...

Citrix WEM Agents not Synchronizing Error “No Connection Could be Made Because The Target Machine Actively Refused it”

Citrix Virtual Delivery Agents running Workspace Environment Management WEM Agents are not synchronizing with two or more WEM Broker servers load balanced via Citrix Gateway. Policies delivered through WEM are not applying to agents Event Viewer shows the following error:“No connection could be...

Single-sign On fails when Workspace App for Windows is configured with Citrix Gateway.

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. ​​​​​​​ When you configure Citrix Gateway to support single sign-on SSO through the Citrix Workspace...

Application shortcuts still remain on the Start Menu when the application is already unassigned for the user

Workspace App has been configured with the option "Show Applications in Start Menu" and published apps appear on the start menu. When an application is removed from being assigned to a user, its shortcut still shows up on the users start menu...

MDM Enrollment Fails Consistently On iOS 14 Devices On Citrix Endpoint Management (On-Prem)

MDM Enrollment Fails Consistently On iOS 14 Devices On Citrix Endpoint Management Server On-Prem...

After Upgrading to iOS 14 And Opening MDX Wrapped Apps Prompt Displays - "Compliance Error - Your device is out of compliance...MDX Encryption is not supported"

After Upgrading to iOS14 and opening MDX Wrapped Apps or Citrix Secure Mail/Hub/Web Displays - "Compliance Error - Your device is out of compliance. Please contact your administrator. MDX Encryption is not supported beyond iOS 13. Please reinstall the app."...

Error: Citrix Licensing Manager could not complete the operation. If you are trying to allocate a license, go to My Account.

The error "Citrix Licensing Manager could not complete the operation. If you are trying to allocate a license, go toMy Account. For assistance, contact Citrix Customer Care" is returned after allocating a license using Citrix Licensing Manger...

CVE-2020-11901: Impact of Ripple20 vulnerabilities on Citrix ADC/ADM/SVM

Citrix ADC/ADM/SVM will be detected with TCP ripple 20 vulnerability while performing security scans...

Bidirectional URL redirection (client to server) does not work since Workspace app for Windows 1904

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Bidirectional URL redirection feature is not able to redirect URL from client to server since...

Storefront: Error adding user account in the administrative local group

An error displays during Storefront installation "There was an error adding user account in the administrative local group to the citrixstorefrontadministrator local group."...

Citrix StoreFront Security Update - Security Bulletin

Description A high severity issue has been discovered in Citrix StoreFront that, if exploited, would allow an attacker who is authenticated on thesame Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server. This issue has the following identifier:...

Citrix ADC/Nestcaler upgrade seems to be stuck when upgrading from GUI

Citrix ADC/Nestcaler upgrade seems to be stuck when upgrading from GUI...

Citrix Gateway SSO Authentication Breaks or "Cannot Complete Your Request" Error After Upgrading to 13.0 64.35

After upgrading to 13.0-64.35 Gateway SSO authentication breaks or you encounter “Cannot Complete Your Request” error...

Changes to ADC MPX and SDX platforms On Specific New Appliances Shipped Out To Customers

Beginning in October 2020, Citrix will shipspecific new MPX/SDX appliances withnew Manufacturing builds, Citrix ADC MPX firmware version11.1 Build 64.14 and SDX firmware versions 11.1 Build 61.117 and Build 61.115. The impactedappliance models with the new build will ship once existing stock is...

Extended Keys Not Appearing When Selecting "Keyboard" Button in Desktop Viewer - Citrix Workspace App for iOS

When using a Smart Keyboard, unable to display extended keys when selecting the "Keyboard" option on Citrix Workspace App for iOS on iOS 12.x devices...

Unable to see ICA Latency and ICA RTT in CQI or Director

ICA Latency is incorrectly showing as 64,000 ms when using EDT via Citrix Gateway...

Published apps not launching for some users when connecting through VPN, no errors

• Users connect to the company’s network using Citrix Gateway VPN • When launching a published app, the progress popup shows up and disappears seconds later, nothing else shows app, no errors • Receiver Connection center shows a connection with the VDA but no app launched • VDA shows the user...

How to collect data for ADC Gateway, Storefront, and VDA issues

To provide a comprehensive guide on how to properly collect data for issues with ADC when these issues are related to Gateway, Storefront, or VDA connectivity issues...

End of Life Announcement for the Citrix Receiver for Universal Windows Platform (UWP)

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. Citrix Systems, Inc. announces the End of Life of the Citrix Receiver for Universal Windows Platform...

Elastic layers are disconnected and not accessible in session host

Environment before 20.52005 observed theElastic layers were disconnected on the VDA abruptly and were not available for exiting user connections or for new users.. The below errors are seen though the layers had been attached by a prior domain user. --ulayersvc.log-- 2020-03-23 13:23:02,140 WARN...

Error 2320 - Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword

When trying to launch the applications through the Native Workspace App you get an error stating 'Cannot start apps. Please run Reset Citrix Workspace to resolve a lockdown conflict for LegacyLocalUserNameAndPassword'. Resetting Workspace App does not resolve the issue...