Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [netscaler]

NetScaler is an application delivery controller (ADC) and load balancing solution developed, sold and supported by Citrix. NetScaler operates in a similar market as F5 and other leading load balancer/ADC solutions and comes in both physical hardware (MPX/SDX) and virtualized forms (VPX/SDX). NetScaler operates at OSI Layer 4-7 in general, though it does have some Layer 2/3 functionality.

3
votes
1answer
60 views

TLS Implementation/RFC interpretation

Does the Server Hello break the RFC? There seems to be contradiction in RFC. A customer claims our device (Citrix Netscaler) returns Extension (ec_point_formats: EC point format: uncompressed) when ...
0
votes
0answers
32 views

SSL connection error but works if you telnet port first

I'm troubleshooting a connection to an application (Citrix Netscaler), between several countries in a complex network. There are definitely firewalls along the route. Machine is pingable tracert is ...
0
votes
0answers
271 views

IIS sending RST flag on “Idle Connection Timeout”

Troubleshooting a intermittent connection issue we noticed that IIS 8.5 on "Idle connection timeout"(default 120sec) is sending a RST flag to Loadbalancer instead of FIN flag. Is this is a standard ...
0
votes
1answer
106 views

Point a subdomain to a dedicated application server using NetScaler

Background on a question: we have a domain (www.example.com) that point to multiple servers with an SSL Wildcard *.example.com aka hitting a VIP (I am not an expert on VIP would love to learn more). ...
0
votes
0answers
52 views

How can I programmatically force a NetScaler cluster to failover?

Working on a script that needs to fail over the netscaler to it's secondary and back. I'm attempting to use the Nitro REST API, but so far it's defeating me. The API docs say there's an action to ...
1
vote
1answer
2k views

Error: “Your logon has expired. Please log on again to continue” When Accessing StoreFront Through NetScaler Gateway

My Citrix test environment is the following: One Windows 2016 VM acting as Domain Controller and DNS One Windows 2016 VM with everything from Citrix in it (XenDesktop 7.15) plus the SQL Server DB Two ...
0
votes
0answers
21 views

NetScaler failover via API?

Does Nitro have a method to force a failover? I see read-only properties for checking if failover is in progress, and a web UI option, but nothing specifically providing the Nitro APIs a means of ...
0
votes
1answer
99 views

weird netstat output on netscaler

We have a VPX-1000 netscaler. When traffic suddenly increases our website goes offline and doesn't response to requests but our netscaler load is fine (cpu %40 ram %50 4 cores 4gb). After incident ...
3
votes
1answer
2k views

NetScaler Gateway for MAC is not connecting correctly: Protocoll shows “AGAS: Failed to initialise ssl vpn plugin”

I'm using the Citrix Netscaler Gateway for Mac (Version 3.1.8 which is the newest for mac) and macOS High Sierra. When I use the Gateway Plugin to connect to our gateway, it seems to work, because ...
0
votes
2answers
648 views

How can I connect to a 2FA VPN on Linux?

I need to connect to the office VPN from a linux machine. I'm able to connect to it only via Citrix NetScaler Gateway on Windows. The connection needs the secondary password (in my case is an OTP from ...
0
votes
1answer
75 views

NetScaler prioritizing faster hosts in round robin

For a NetScaler load balancer running SSL passthrough, is there any aspect to the round robin load balancing algorithm that would direct more traffic to hosts that respond more quickly? As a ...
1
vote
1answer
151 views

NetScaler retry next server if failed

I have 8 servers that are loadbalanced by NetScaler VPX (10). How to make NetScaler load balancer to resend request to next server if previous server responded with the 502 status?
0
votes
1answer
110 views

Get requested hostname in Netscaler

I have a Netscaler which is mainly acting as a SSL bridge for a bunch of sites. I would like to see every requested hostname that is going to the Netscaler but I am unable to fix it. The hostname is ...
0
votes
2answers
3k views

Log source IP of traffic destined to Cirtix Netscaler

I have tried to make Netscaler log the source IP of all traffic that's destined to the Netscaler. Is this possible? To be clear I don't want to forward the client-IP to a backend server, I want to ...
1
vote
1answer
112 views

Timeouts connecting to Citrix NetScaler

We have a C# ASP.NET MVC website that is hosted on Azure (app service) that connects to a 3rd party REST API. This always ran without problems, but some time ago the 3rd party replaced their old ...
0
votes
1answer
51 views

Netscaler Load Balancing Persistance to specific member?

In the Netscaler load balancing persistence rules it is straightforward to sticky a client IP to the same member each time. What I would like to do is sticky a client IP to a specific member server, ...
0
votes
1answer
399 views

Bind SSL cert to a VIP in Netscaler without doing offloading

I have a question regarding SSL certificates in Netscaler. Is it possible to bind/include a SSL certificate in a VIP in the Netscaler without doing any HTTPS offloading? I'm doing the HTTPS offloading ...
0
votes
1answer
1k views

Netscaler URL rewrite

Context: I have little/no experience with Netscaler and I'm just starting to use them. One of the first jobs I've been given to work with it is what I thought would be a simple one. I have to have the ...
0
votes
1answer
225 views

COOKIEINSERT Persistence with AJAX

We are using COOKIEINSERT set to use session cookies with 4 servers behind the NetScaler. If i open the webpage, it loads OK. If i remove the NetScaler added cookie and refresh the page I am asked to ...
0
votes
0answers
104 views

Migrating a Citrix Netscaler Insight Server to AWS

Is there any proper documentation for Migrating a Citrix Netscaler Insight Server to AWS? Or any way we can do that ? Any help would be a great help. VM import is not an option as well, and it is just ...
0
votes
1answer
389 views

Counters in Citrix Netscaler and their meanings (Diff) or (Actual)

I try to configure some Citrix Netscaler Command Center Reports. When I configure a Custom Report I can choose between different available counters. Per example: Vserver Hits Vserver Hits(Actual) ...
0
votes
1answer
190 views

Netscaler persistence fails, drop packets

I have a vserver configured with this -persistenceType CUSTOMSERVERID -lbMethod ROUNDROBIN -rule "URLQUERY CONTAINS sid=" It seems that if the "sid" parameter is set to go to "server 1" and at the ...
3
votes
1answer
1k views

NTLM on a Load Balanced Environment

We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
1
vote
0answers
754 views

Citrix NetScaler sending FIN, ACK for SSL VPN Clients

I realise that it's unlikely anyone here has a definite "Check this box to resolve this" answer, but I'm struggling with this issue and I'm hoping that someone with more knowledge than me can give me ...
0
votes
1answer
1k views

Kerberos constrained delegation using Citrix NetScaler

I'm currently evaluating Citrix NetScaler VPX (NS10.5 56.12.nc) as a potential replacement for Microsoft TMG server. Kerberos Constrained Delegation is at the top of my list of mandatory features. ...
0
votes
1answer
86 views

MS Certificate authority issued to wrong entity

Hi I have created a CA signing request on my netscaler where the common name is *.mydomain.com When I sign the CRS in my MS CA its ends up being issued to "Fredrik" instead of *.mydomain.com This ...
0
votes
1answer
4k views

How to enable SNMP on a Citrix NetScaler 10.1

I am trying to set up MRTG against a Citrix NetScaler 10.1 appliance, but I am not getting a response to SNMP requests. I have added the MRTG machine as a SNMP manager and added a community. It does ...
1
vote
1answer
2k views

Can a Citrix NetScaler loadbalance based on the path portion of a URL?

So I have a domain hosting two lovely applications thus... http://intranet.lan:80/firstapp http://intranet.lan:80/secondapp And two physical boxes serving them up http://box1.lan:80/firstapp http://...
-1
votes
1answer
4k views

How to get email alerts when a monitor goes down on NetScaler?

How to get email alerts when a monitor goes down on NetScaler? I am looking for a way to get email notifications when different things go wild with backend services served by a NS instance. NS ...
0
votes
1answer
2k views

Citrix Netscaler 10.1 AAA Application Traffic Single Sign On

I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
0
votes
1answer
12k views

How do I configure netscaler to act as a simple HTTP proxy?

I want to start use a netscaler instance as a HTTP proxy (like squid), so all the requests from my browser will go directly to netscaler. How can I obtain this behaviour? Note: Netscaler is already ...
1
vote
1answer
1k views

Issues Load balancing .Net web app using State Server

We have multiple web servers behind a Netscaler load balancer. The (Win2008) servers each host an ASP.Net application (using iis 6.1) that are configured to use a central server running the .Net ...
1
vote
0answers
263 views

Device aware multifactor authentication with Citrix environment?

There are many services that advertise themselves as providing multifactor authentication for Citrix. But, most seem to require the additional generated passcode every time. Are there any that can ...
0
votes
1answer
550 views

NetScaler and Domino iNotes

We are putting a NetScaler device in front of our Domino iNotes servers, which will act as a reverse proxy. However, we get "Error 400" errors in the iNotes webinterface, and the behaviour is ...
2
votes
2answers
1k views

Can I give a friendly error message for connections less than TLS 1.1?

For security reasons, I want to block all TLS connections older than TLS1.1. I also want to give a friendly error message for users who use less than TLS 1.1 on my site. Is there any way to ...
2
votes
0answers
512 views

Putting a NetScaler infront of Redis master failover

I have a redis-sentinel solution for master failover, I just need to setup a vserver with all the master services in the pool. Only one master can act as the master at a time, the rest are slaves ...
9
votes
1answer
280 views

Where can I embed proprietary information in a layer 2 or layer 3 packet?

The Citrix Netscaler has an interesting property that embeds information in the TCP packet that gets sent to the host. This property is echoed back to the Netscaler in such a way that the Netscaler ...
0
votes
1answer
12k views

When configuring a Citrix Netscaler for use with Exchange 2010, what should the persistence timeout be?

I have a Netscaler that I'm using to front end 4 Exchange 2010 CAS servers. The clients that use this virtual server include Outlook Web Access (OWA) Exchange Web Services (Outlook for Mac 2011) ...
0
votes
2answers
1k views

SSL Offloading with Citrix Netscaler is not working when requesting PDF files

we are working in one of our projects with Citrix Netscaler in front of our web site. we configured the Citrix Netscaler to use SSL offloading but when we request a PDF file the SSL offloading does ...
0
votes
1answer
993 views

Can I restrict an AD account to login only on Xenapp servers and not locally?

I have some users who want to test a Xenapp application using some generic accounts (I don't like to use generic accounts but for reasons I won't go into, they are necessary). I want to setup the ...
1
vote
1answer
964 views

Does PHP get executed when a page gets a HEAD request?

We set up a Netscaler in front of our PHP application server, the netscaler now preforms a large amount of HEAD requests as evidenced by our apache logs. I wonder if each time apache gets a one of ...
3
votes
1answer
945 views

Multiple DNS names and IP address to make load balancing more efficient in an Exchange CAS Array

The tl;dr problem The CAS server occasionally gets one or two NAT'ed IP addresses that have several hundred users behind it. That is bad for scalability. The tl;dr solution Have the NAT'ed ...
4
votes
1answer
6k views

Load balancing SMTP in a way that doesn't hide the source IP address

I need to load balance SMTP to handle some applications that don't know how to use MX records. I set up a Netscaler using the TCP option on port 25 and now Exchange sees the source IP as that of the ...
0
votes
1answer
4k views

Figuring out the reason for a “Connection timed out” error

For the last 24 hours two independent servers are having a hard time connecting to our web server. They are trying to open a port 80 connection. They are both receiving "connection timed out" errors. ...
5
votes
3answers
3k views

Do Citrix Netscalers have a feature equivalent to iRules?

I'm looking to move from F5 to Netscaler and having a hard time figuring out if Netscalers have a feature similar to iRules.
5
votes
3answers
7k views

Alternatives to Citrix NetScaler?

I'm interested in Citrix product NetScaler. It's an applicance that you put in front of the web-servers. Features I like is: SSL offload an acceleration (good because of performance and that Verisign ...