4 votes
Accepted

TLS Implementation/RFC interpretation

I think your client is right. RFC 4492 and its follow-up RFC 8422 say it quite clear that this extension is a response to a client sending ec_point_formats, which means that it should not be there is ...
user avatar
3 votes
Accepted

Citrix Netscaler Gateway does not work in macOS Catalina 10.15.4

I had the same issue and contacted Citrix support, and they advised to use the Citrix SSO app for MacOS instead. It must be downloaded from the MacOS app store. So far it seems to be working OK for me....
user avatar
  • 46
3 votes
Accepted

Log source IP of traffic destined to Cirtix Netscaler

Depending on the type of traffic you want to be logged, and the components that you are using, you have some different options. All starts with the following: Create a Message Action (under System --...
user avatar
  • 96
3 votes
Accepted

Can a Citrix NetScaler loadbalance based on the path portion of a URL?

Yes. NetScaler can do that. CSVS You will have to create a "Content Switching Virtual Server" (CSVS). This will be the traffic cop directing traffic either to the left or the right. LBVS Next stop ...
user avatar
2 votes

When configuring a Citrix Netscaler for use with Exchange 2010, what should the persistence timeout be?

Don't claim to have all of the answers (haven't support Exchange in many years), but... Not sure what guidance you used, but the Citrix NetScaler Deployment Guide for Microsoft Exchange 2010 suggests ...
user avatar
  • 21
2 votes
Accepted

NetScaler Gateway for MAC is not connecting correctly: Protocoll shows "AGAS: Failed to initialise ssl vpn plugin"

Found the solution: In the mac OS high Sierra there is an extra security setting that blocks some applications for some reasons and that had blocked citrix. You can find it in the Systems Settings -> ...
user avatar
  • 151
2 votes

Do Citrix Netscalers have a feature equivalent to iRules?

I have been trying to find how to migrate my iRules to a Netscaler and I can't seem to find an easy way. I found this conversation that says: There is no denying it, F5 irules are MUCH easier and ...
user avatar
1 vote

Where to securely deploy Citrix Netscaler?

You simply cannot deploy a citrix netscaler without access to the LAN behind it... remember, that you want to securely give access to Virtual Desktops to your users, so the netscaler must be able to ...
user avatar
  • 1,849
1 vote
Accepted

Point a subdomain to a dedicated application server using NetScaler

You want to set up a new context switch for newsite.example.com on the NetScaler, as described here: https://support.citrix.com/article/CTX124471 From a high level point of view, you must add a ...
user avatar
  • 2,601
1 vote

How can I connect to a 2FA VPN on Linux?

There is indeed a Linux client. Even if maybe not as up to date as Linux or Mac client. If you unpack the NetScaler firmware you have files like nsgclient32.deb nsgclient64.deb nsginstaller[32|64].[...
user avatar
1 vote
Accepted

NetScaler retry next server if failed

It all depends on your configuration. However, in all cases, it is not the NetScaler appliance itself which will retry to the next server. You'd have to create a construction in your configuration so ...
user avatar
  • 96
1 vote

Timeouts connecting to Citrix NetScaler

To narrow down your issue I suggest to compare two different Network Packet trace from your Netscaler (working scenario VS none working scenario) + investigate the ns.log located : \var\log\ns.log ...
user avatar
1 vote

COOKIEINSERT Persistence with AJAX

First of all, the need to login again when the persistency cookie is removed, is all dependent on your application. If your application has a shared backend for user sessions, it shouldn't really ...
user avatar
  • 96
1 vote

NTLM on a Load Balanced Environment

The "AuthPersistSingleRequest" setting default value is False, which means if set to the default you should not see persistent authentication challenges on subsequent requests to the same server. If ...
user avatar
  • 34.2k
1 vote

How to get email alerts when a monitor goes down on NetScaler?

AFAIK NetScaler can not do this by itself. (Or only on the obcenely large SDX boxes.) So your best bet is to install the free "Citrix Command Center" software. It works as a Syslog/SNMP server and is ...
user avatar
1 vote

Can I give a friendly error message for connections less than TLS 1.1?

Edit 2015-09-22: No longer "hardware only" Citrix has updated their virtual NetScalers. Citrix Systems, Inc., 2015-06-03, Release Notes for Build 57.7 of NetScaler 10.5 Release The NetScaler VPX ...
user avatar
1 vote

SSL Offloading with Citrix Netscaler is not working when requesting PDF files

I had the same problem. We configured SSL offloading for a web application and every html page loaded without problem, but "application/acrobat" content that should be sent to the client and rendered ...
user avatar
1 vote

Do Citrix Netscalers have a feature equivalent to iRules?

Have you considered looking at the Citrix website? https://www.citrix.com/go/citrix-developer/netscaler-developer-community/irules-conversion-guides.html
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible