Update to my previous blog post NetScaler 11.0 Swivel integration here’s anupdate of how to do exactly the same thing only using NetScaler rewrites rather then editing any code on the NetScaler itself. The reason this is useful is that any updates we make to javascript that comes within the NetScaler firmware may (will probably) need to be redone every time you upgrade your firmware as...
I’ve seen a lot of excellent guides around on optimising SSL parameters on NetScaler which is awesome. A lot of them are geared towards obtaining the coveted A+ rating from Qualsys’ excellent SSLLabs test which I think is important as it gives people an easy way to ensure they are compliant to certain level in a world where the goalposts are frequently rapidly moving even if only...
This method is not compatible with NetScaler version 11.0 after build 64.34 since Citrix deprecated the -userdomains vpn vserver parameter. Please see for alternate instructions. Thanks to Scott Osborne (@VirtualOzzy) for pointing this out to the CUG Networking SIG When NetScaler 11.0 was released I noticed a couple of interesting things 1. There was a new ‘userdomains’ parameter for...
This post has been updated HERE to achieve the same goal only using NetScaler Rewrite and Responder so we no longer need to modify any files on the NetScaler. Use the below method if you do not have NetScaler Standard, Enterprise or Platinum edition licensing For those who may have read my guide to customizing NetScaler Gateway 10.1 UI for Swivel integration (), here’s an update for...
Quick one from a recent deployment. This customer had chosen Swivel () as their secondary authentication. Swivel requires a Turing image to be displayed on the VPN logon page to provide the user with one time password they need to provide for RADIUS authentication. Swivel have helpfully provided very detailed guides on how to do this by replacing the index.html and login.js various NetScaler...
I’ve been asked about this a few times recently so thought it worth a post. As of version 10.69.4.nc NetScaler Gateway and AAA features support OWA 2010 In order to provide SSO when authentication on OWA is form based additional configuration is required. Create a formSSOAction, this provide the NetScaler with the following information: The page in which to complete the Form based SSO...
During a recent project Citrix Receiver for Windows RT version 1.2 was released to the public and by lucky coincidence a majoy stakeholder in the project happened to be the proud owner of a Windows Surface RT which seemed like an ideal opportunity to try out the new Web Interface support for Windows RT. Now being honest I have not got this working when users are logging in via the Metro Citrix...
As alot of you will have seen in the article CTX123121 the NetScaler Rewrite feature can be used to modify the look and feel of the Access Gateway logon page, commonly this involves changing the default password prompts created in the login.js file. As the article states these rules may vary from version to version – and they do so I thought I’d add the correct policy for NetScaler...
A quick post – nothing ground breaking really but I encountered a customer at the start of this year who encountered this problem but couldn’t seem to find any information online to help so I thought I’d put some info up here. There are a number of other articles on the net that cover the same subject, I’ve included a few within this post. Provisioning server is a great product for reducing...
As expected this blog has gone a significant amount of time without update. This is mostly because I’ve not had anything particularly interesting to say. So yesterday an Access Gateway Enterprise question was posed to me so I thought I would run through it in case anyone else encounters the same problem. It may not be that interesting Issue A user reported that the secondary authentication...
Citrix CTA & Director of Enterprise Technologies @ Coffee Cup Solutions