4
votes
Accepted
TLS Implementation/RFC interpretation
I think your client is right.
RFC 4492 and its follow-up RFC 8422 say it quite clear that this extension is a response to a client sending ec_point_formats, which means that it should not be there is ...
- 12.2k
3
votes
Accepted
Citrix Netscaler Gateway does not work in macOS Catalina 10.15.4
I had the same issue and contacted Citrix support, and they advised to use the Citrix SSO app for MacOS instead.
It must be downloaded from the MacOS app store.
So far it seems to be working OK for me....
- 46
3
votes
Accepted
Log source IP of traffic destined to Cirtix Netscaler
Depending on the type of traffic you want to be logged, and the components that you are using, you have some different options.
All starts with the following:
Create a Message Action (under System --...
- 96
3
votes
Accepted
Can a Citrix NetScaler loadbalance based on the path portion of a URL?
Yes. NetScaler can do that.
CSVS
You will have to create a "Content Switching Virtual Server" (CSVS). This will be the traffic cop directing traffic either to the left or the right.
LBVS
Next stop ...
- 1,728
2
votes
When configuring a Citrix Netscaler for use with Exchange 2010, what should the persistence timeout be?
Don't claim to have all of the answers (haven't support Exchange in many years), but...
Not sure what guidance you used, but the Citrix NetScaler Deployment Guide for Microsoft Exchange 2010 suggests ...
- 21
2
votes
Accepted
NetScaler Gateway for MAC is not connecting correctly: Protocoll shows "AGAS: Failed to initialise ssl vpn plugin"
Found the solution: In the mac OS high Sierra there is an extra security setting that blocks some applications for some reasons and that had blocked citrix.
You can find it in the Systems Settings -> ...
- 151
2
votes
Do Citrix Netscalers have a feature equivalent to iRules?
I have been trying to find how to migrate my iRules to a Netscaler and I can't seem to find an easy way.
I found this conversation that says:
There is no denying it, F5 irules are MUCH easier and ...
- 296
1
vote
Where to securely deploy Citrix Netscaler?
You simply cannot deploy a citrix netscaler without access to the LAN behind it... remember, that you want to securely give access to Virtual Desktops to your users, so the netscaler must be able to ...
- 1,849
1
vote
Accepted
Point a subdomain to a dedicated application server using NetScaler
You want to set up a new context switch for newsite.example.com on the NetScaler, as described here:
https://support.citrix.com/article/CTX124471
From a high level point of view, you must add a ...
- 2,601
1
vote
How can I connect to a 2FA VPN on Linux?
There is indeed a Linux client. Even if maybe not as up to date as Linux or Mac client.
If you unpack the NetScaler firmware you have files like
nsgclient32.deb
nsgclient64.deb
nsginstaller[32|64].[...
1
vote
Accepted
NetScaler retry next server if failed
It all depends on your configuration. However, in all cases, it is not the NetScaler appliance itself which will retry to the next server.
You'd have to create a construction in your configuration so ...
- 96
1
vote
Timeouts connecting to Citrix NetScaler
To narrow down your issue I suggest to compare two different Network Packet trace from your Netscaler (working scenario VS none working scenario) + investigate the ns.log located :
\var\log\ns.log
...
- 460
1
vote
COOKIEINSERT Persistence with AJAX
First of all, the need to login again when the persistency cookie is removed, is all dependent on your application.
If your application has a shared backend for user sessions, it shouldn't really ...
- 96
1
vote
NTLM on a Load Balanced Environment
The "AuthPersistSingleRequest" setting default value is False, which means if set to the default you should not see persistent authentication challenges on subsequent requests to the same server. If ...
- 34.2k
1
vote
How to get email alerts when a monitor goes down on NetScaler?
AFAIK NetScaler can not do this by itself. (Or only on the obcenely large SDX boxes.)
So your best bet is to install the free "Citrix Command Center" software. It works as a Syslog/SNMP server and is ...
- 1,728
1
vote
Can I give a friendly error message for connections less than TLS 1.1?
Edit 2015-09-22: No longer "hardware only"
Citrix has updated their virtual NetScalers.
Citrix Systems, Inc., 2015-06-03, Release Notes for Build 57.7 of NetScaler 10.5 Release
The NetScaler VPX ...
- 1,728
1
vote
SSL Offloading with Citrix Netscaler is not working when requesting PDF files
I had the same problem. We configured SSL offloading for a web application and every html page loaded without problem, but "application/acrobat" content that should be sent to the client and rendered ...
- 11
1
vote
Do Citrix Netscalers have a feature equivalent to iRules?
Have you considered looking at the Citrix website?
https://www.citrix.com/go/citrix-developer/netscaler-developer-community/irules-conversion-guides.html
- 21
Only top scored, non community-wiki answers of a minimum length are eligible