System requirements
Before you begin using NetScaler ADM, you must review the software requirements, browser requirements, port information, license information, and limitations.
Supported browsers
To access NetScaler ADM, your workstation must have a supported web browser.
The following browsers are supported.
| Web browser | Version |
|---|---|
| Microsoft Edge | 79 and later |
| Google Chrome | 51 and later |
| Safari | 10 and later |
| Mozilla Firefox | 52 and later |
Agent installation requirements
Install and configure an agent in your network environment to enable communication between the NetScaler ADM and the managed instances in your data center. In your data center on-premises, you can install an agent on Citrix XenServer, VMware ESXi, Microsoft Hyper-V, and Linux KVM server.
The agent requirements are the virtual computing resources that the hypervisor must provide for each NetScaler ADM agent. The following table lists the agent requirements to avail all NetScaler ADM features:
| Component | Requirement |
|---|---|
| RAM | 32 GB |
| Virtual CPU | 8 |
| Storage Space | 30 GB |
| Virtual Network interfaces | 1 |
| Throughput | 1 Gbps |
The agent requirements to avail only the pooled licensing feature, see Lightweight agent for pooled licensing.
You can also install an agent on Microsoft Azure or AWS or Google Cloud. Citrix recommends you use the following virtual machine types from the respective cloud marketplaces to avail all NetScaler ADM features:
| Cloud | Agent requirements | Preferred virtual machine type |
|---|---|---|
| AWS | 8 virtual CPU, 32 GB RAM, and 30 GB storage space | m4.2xlarge |
| Microsoft Azure | 8 virtual CPU, 32 GB RAM, and 30 GB storage space | Standard_D8s_v3 |
| Google Cloud | 8 virtual CPU, 32 GB RAM, and 30 GB storage space | e2-standard-8 |
For instructions about installing an agent, see the following links:
- Installing NetScaler ADM Agent on Microsoft Azure Cloud.
- Installing NetScaler ADM Agent on AWS.
- Installing NetScaler ADM Agent on Google Cloud.
Lightweight agent for pooled licensing
If you plan to use the NetScaler ADM only for pooled licensing, you can use an agent with lower specifications, as listed in the following table:
| Component | Requirement |
|---|---|
| RAM | 8 GB |
| Virtual CPU | 4 |
| Storage Space | 30 GB |
Such agents with lower specifications (lightweight) are supported only on NetScaler ADM.
Citrix recommends you use the following virtual machine types from the respective cloud marketplaces to avail only the pooled licensing feature:
| Cloud | Agent requirements | Preferred virtual machine type |
|---|---|---|
| AWS | 4 virtual CPU, 8 GB RAM, and 30 GB storage space |
m4.xlarge. This instance type provides 4 virtual CPU, 16 GB RAM, and 30 GB storage space. Citrix recommends this instance type since it matches most of the agent requirements among existing instance types. |
| Microsoft Azure | 4 virtual CPU, 8 GB RAM, and 30 GB storage space | Standard_F4s_v2 |
| Google Cloud | 4 virtual CPU, 8 GB RAM, and 30 GB storage space | e2-standard-4 |
Note
You must disable the default scheduling jobs by navigating to Settings > Global Settings > Configurable Features.
Supported ports
For communications between NetScaler instances and NetScaler ADM agent and NetScaler ADM agent, open the required ports.
Ports for the NetScaler ADM agent
This table explains the required ports that must be open on the ADM agent.
| Port | Type | Details | Direction of communication |
|---|---|---|---|
| 80/443 | TCP | For NITRO communication from the NetScaler ADM service to NetScaler. | NetScaler ADM agent to NetScaler and NetScaler to NetScaler ADM agent |
| 4739 | UDP | For AppFlow communication from NetScaler to the NetScaler ADM service. | NetScaler to NetScaler ADM agent |
| 162 | UDP | To receive SNMP events from NetScaler instance to the NetScaler ADM service. | NetScaler to NetScaler ADM agent |
| 514 | UDP | To receive syslog messages from NetScaler instance to the NetScaler ADM service. | NetScaler to NetScaler ADM agent |
| 5563 | TCP | This port is required for NetScaler ADM Collector service to run. To receive ADC metrics (counters) from NetScaler instance to NetScaler ADM. | NetScaler to NetScaler ADM |
| 5557/5558 | TCP | For logstream communication (for WAF Security Violations, Web Insight, and HDX Insight) from NetScaler to the NetScaler ADM service. | NetScaler to the NetScaler ADM agent |
| 27000 and 7279 | TCP | License ports for communication between NetScaler ADM agent and ADC instance. These ports are also used for ADC pooled licenses. | NetScaler to NetScaler ADM agent |
| 443 | TCP | Ports for communication between NetScaler ADM agent and NetScaler ADM service | NetScaler ADM agent to NetScaler ADM service |
Ports for ADC instances
This table explains the required ports that must be open on NetScaler instances.
| Port | Type | Details | Direction of communication |
|---|---|---|---|
| 80/443 | TCP | For NITRO communication from NetScaler ADM to NetScaler instance. | NetScaler ADM agent to NetScaler and NetScaler to NetScaler ADM agent |
| 22 | TCP | For SSH communication from NetScaler ADM to NetScaler instance. And, this port is required for the SSH communication between the ADM agent and NetScaler. | NetScaler ADM agent to NetScaler |
| No reserved port | ICMP | To detect network reachability between NetScaler ADM agent and NetScaler instances. | NetScaler ADM agent to NetScaler |
| 161 | UDP | To poll events from ADC instances. | NetScaler ADM agent to NetScaler |
Ports for NetScaler Built-in agent
This table explains the required ports that must be for NetScaler built-in agent.
| Port | Type | Details | Direction of communication |
|---|---|---|---|
| 443 | TCP | For NITRO communication from NetScaler ADM to NetScaler instance. | NetScaler ADM to NetScaler built-in agent and NetScaler built-in agent to NetScaler ADM |
Note
The endpoint of the NetScaler ADM service is the same as the “Service URL” generated while trying to register the agent. The agent uses the Service URL to locate the NetScaler ADM.
Ensure that the following endpoint urls are allowed access:
-
Download Service:
https://download.citrixnetworkapi.net <!--NeedCopy--> -
Trust Service:
*.citrixnetworkapi.net <!--NeedCopy--> -
Service URLs:
*.agent.adm.cloud.com *.adm.cloud.com adm.cloud.com <!--NeedCopy--> -
ADC backup service:
adm-prod-backup-.*\.s3\..*amazonaws\.com <!--NeedCopy--> -
Citrix Cloud connectivity:
citrix.cloud.com accounts.cloud.com <!--NeedCopy-->
Deprecated FQDNs
Some FQDNs are deprecated for the following use of the NetScaler ADM. To help you switch to the new FQDNs without any interruption, the deprecated FQDNs continue to work for some time and will be phased out slowly.
| NetScaler ADM Endpoints | Old FQDN | New FQDN |
|---|---|---|
| NetScaler ADM UI Access | netscalermas.cloud.com |
adm.cloud.com |
| Service URL | agent.netscalermgmt.net |
*.agent.adm.cloud.com Note: The value of * would depend on which PoP (point of presence) your data is available. |
| API interactions | netscalermas.cloud.com |
api.adm.cloud.com |
Minimum NetScaler versions required
Note
NetScaler versions 10.5, 11.0, and 12.0 have already reached End Of Life (EOL). For more information, see the Product Matrix. The recommended ADC version is 12.1.
| NetScaler ADM Feature | NetScaler Software Version |
|---|---|
| StyleBooks | 10.5 and later |
| Monitoring/Reporting and Configuring using Jobs | 10.5 and later |
| Analytics | |
| HDX Insight | 10.1 and later |
| Gateway Insight | 11.0.65.31 and later |
| Security Insight | 11.0.65.31 and later |
Requirements for NetScaler ADM Analytics solution
Minimum Citrix Virtual Apps and Desktops versions required
| NetScaler ADM Feature | Citrix Virtual Apps and Desktops Version |
|---|---|
| HDX Insight | Citrix Virtual Apps and Desktops 7.0 and later |
Note
The NetScaler Gateway feature (branded as Access Gateway Enterprise for versions 9.3 and 10.x) must be available on the NetScaler instance. NetScaler ADM does not support standalone Access Gateway Standard appliances.
NetScaler ADM can generate reports for applications that are published on a Citrix Virtual App or Desktop and accessed through Citrix Workspace. However, this capability depends on the operating system on which the Citrix Workspace is installed. Currently, a NetScaler does not parse ICA traffic for applications or desktops that are accessed through Citrix Workspace running on iOS or Android operating systems.
Thin clients supported for HDX Insight
NetScaler ADM supports the following thin clients for monitoring NetScaler instances running on software version 11.0 Build 65.31 and later:
- Dell Wyse Windows based Thin Clients
- Dell Wyse Linux based Thin Clients
- Dell Wyse ThinOS based Thin Clients
- 10ZiG Ubuntu based Thin Clients
NetScaler instance license required for HDX Insight
The data collected by NetScaler ADM for HDX Insight depends on the version and the installed licenses of the NetScaler instances that are monitored. HDX Insight reports are displayed only for NetScaler Premium and Enterprise appliances running on software version 10.5 and later.
| NetScaler License/Duration | 5 minutes | 1 Hour | 1 Day | 1 Week | 1 Month |
| Standard | No | No | No | No | No |
| Advanced | Yes | Yes | No | No | No |
| Premium | Yes | Yes | Yes | Yes | Yes |
Supported operating systems and Citrix Workspace versions
The following table lists the operating systems supported by NetScaler ADM, and the Citrix Workspace versions currently supported with each system:
| Operating System | Citrix Workspace Version |
|---|---|
| Windows | 4.0 Standard Edition |
| Linux | 13.0.265571 and later |
| Mac | 11.8, build 238301 and later |
| HTML5 | 1.5 |
| Chrome App | 1.5 |