Licensing
NetScaler Console requires a verified NetScaler license to manage and monitor the NetScaler instances, when the instances are discovered through the https protocol.
NetScaler Console supports the following license editions. Contact your NetScaler sales representative or partner to purchase a NetScaler Console license.
Express edition – You can manage and monitor any number of instances with the Express edition license. By default, the Express edition license is applied.
Advanced edition - It allows to manage the discovered applications and view analytics for the purchased virtual servers along with the free virtual servers.
Points to note:
-
For build 13.1-9.x or earlier, you can manage up to 30 discovered applications or virtual servers and view analytics. Beyond the 30 discovered applications or the 30 virtual servers, you must buy and apply an Advanced license. For example, if you buy 100 virtual server licenses, then you are entitled to you use up to 130 virtual server licenses.
-
For build 13.1-12.x or later, you can manage up to two discovered applications or virtual servers and view analytics. Beyond the two discovered applications or the two virtual servers, you must buy and apply an Advanced license. For example, if you buy 100 virtual server licenses, then you are entitled to you use up to 102 virtual server licenses.
Post upgrade to builds from 13.1-12.x until 14.1-17.x:
-
All the Express default free virtual servers remain functional for 30 days. You can select the two virtual servers and apply the two default licenses within the 30 days period. If no user action is taken 30 days post upgrade, NetScaler Console randomly applies the license to two virtual servers and unlicenses the remaining virtual servers. You must buy and apply new Advanced licenses to enable these virtual servers.
-
Post upgrade, the following are the changes in the NetScaler Console behavior:
-
NetScaler Console gives an additional 30 days to take the required action.
-
Within the 30-day period, the allocation of new virtual servers for the 30 express free virtual servers is blocked.
- For example, if the number of available virtual server licenses before you upgraded to 12.x was 30 and only 20 licensed virtual servers were used, you are only allowed to use the 20 virtual servers and not allowed to license the remaining 10 virtual servers in the 30-day period.
-
However, within the 30-day period, as an administrator, you can still apply Advanced NetScaler Console licenses and allocate new virtual servers.
-
The following table provides the licensing details:
| Features | Options | Express edition | Advance edition | NetScaler License |
|---|---|---|---|---|
| Applications | Application Dashboard | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | NetScaler Web App Firewall related information on App Dashboard needs Premium (or) Advanced with App Firewall license. |
| Web Insight | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | NA | |
| Service Graph | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | NA | |
| Configuration > StyleBooks | Unlimited | Unlimited | NA | |
| Security | Security Dashboard | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | NetScaler Web App Firewall related information on Security Dashboard needs Premium (or) Advanced with App Firewall license. |
| Security Violations | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | Premium (or) Advanced with App Firewall license | |
| Users and endpoints | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | NA | |
| Gateway | HDX Insight | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | Advanced (reporting < 1 hour) Premium (reporting = Unlimited) |
| Gateway Insight | Up to two virtual servers. | Entitled for all purchased virtual server licenses and extra two virtual servers. | Advanced (reporting < 1 hour) Premium (reporting = Unlimited) | |
| Infrastructure | Infrastructure Analytics | Unlimited | Unlimited | NA |
| Instances | Unlimited | Unlimited | NA | |
| SSL Dashboard | Unlimited | Unlimited | NA | |
| Events | Unlimited | Unlimited | NA | |
| Network Functions | Unlimited | Unlimited | NA | |
| Network Reporting | Unlimited | Unlimited | NA | |
| Pooled licenses | Unlimited | Unlimited | NA | |
| Configuration > Configuration Jobs, Configuration Templates, and Configuration Advice | Unlimited | Unlimited | NA | |
| Upgrade Jobs | Unlimited | Unlimited | NA | |
| Orchestration | Unlimited | Unlimited | NA | |
| WAN Insight | Unlimited | Unlimited | NA | |
| Settings | RBAC and External Authentication (instance level) | Unlimited | Unlimited | NA |
| RBAC and External Authentication | Unlimited | Unlimited | NA |
*For Citrix Director integration with NetScaler Console support – Citrix Director must have a Premium license.
Licenses for more virtual servers are available in virtual server packs of 10. You can obtain a valid license and add the license on the NetScaler Console servers through the NetScaler Console GUI.
High Availability
The NetScaler Console server can contain VIP, CICO, and pooled capacity licenses. When the licenses are issued to a NetScaler Console server, the licenses are bound to the host ID of the server. Assigning licenses to a different NetScaler Console server is restricted.
If you configure a NetScaler Console high-availability pair as a license server, the primary and secondary servers must have the same license files. Therefore, in the NetScaler Console high-availability deployment, NetScaler Console supports assigning the same license files to both the servers.
Note
If you have installed NetScaler Console release 12.1-49.x or earlier, you get 30 days to maintain the licensing on the secondary node. After 30 days, you must contact Citrix to rehost the original license.
In release 12.1-50.x and later, the NetScaler Console license is automatically synchronized to the secondary node.
Pooled licenses are automatically synchronized to the secondary node in release 12.1-50.x and later.
How licenses are synchronized between NetScaler Console high-availability nodes?
Whenever a failover occurs, the secondary server assumes the role of the primary server. The real host ID of the primary server is configured as the virtual host ID of the new primary server. The license files recognize the new primary server using the virtual host ID.
-
Real Host ID - This ID is generated from a MAC address of the NetScaler Console server. Each NetScaler Console standalone deployment has a unique host ID.
-
Virtual Host ID - This ID is auto generated during HA deployment. The real host ID of a NetScaler Console primary server is used as the virtual Host ID of the secondary server. This ID is stored in the NetScaler Console database in an encrypted format and any modification to this ID is restricted. The virtual Host ID is preferred over the real Host ID.
Assume Node-1 is the primary server and Node-2 is the secondary server. The virtual host ID of Node-1 is synchronized with Node-2.
-
License files available in Node-1 are synchronized to Node-2.
-
Any new license files on Node-1 are synchronized to Node-2 periodically.
-
NetScaler Console ensures that the License Server is running only on Node-1 to avoid doubling of license capacity.
-
NetScaler instances check out licenses from Node-1 using the floating IP address.
Licenses are locked to NetScaler instances. To check out licenses from NetScaler Console HA, instances require the specific NetScalerNetScaler IP address. When you apply licenses on a primary server that will be in charge of licensing, it applies to all future licenses on that instance. You can delete licenses only from the server on which you have installed the licenses.
Orchestration
The Orchestration module is independent of licensing and is always available.
Upgrade the virtual server licenses
You can upgrade the licensing on NetScaler Console to monitor and manage more virtual servers hosted on NetScaler.
To upgrade your NetScaler licenses:
-
Log on to NetScaler Console using the administrator credentials.
-
Navigate to Infrastructure > Pooled Licensing.
-
Go to License Files, and select one of the following options:
-
Upload license files from a local computer. If a license is already present on your local computer, click Browse and select the license file (.lic) that you want to use to allocate your licenses. Click Finish.
-
Use License Activation Code. Citrix emails the license access code for the license that you purchased. Enter the license access code in the text box and then click Get Licenses.
Note
If you select this option, NetScaler Console must be connected to the Internet, or a proxy server must be available.
-
-
You can add more licenses from the License Settings page at any time.
Verification
You can verify the licenses installed on NetScaler Console by navigating to Settings > Licensing & Analytics Configuration.
Manage virtual servers
You can select the virtual servers or third-party virtual servers you want to manage and monitor through NetScaler Console.
Points to note
By default, NetScaler Console automatically licenses the virtual servers randomly after each virtual server poll cycle.
If the total number of virtual servers discovered in your NetScaler Console is lower than the number of installed virtual server licenses, NetScaler Console, by default, licenses all the virtual servers.
To select the virtual servers manually, or to restrict licensing to limited virtual servers, you have to first disable auto licensing the virtual servers, and then select the virtual servers you want to manage.
Disable auto-licensing virtual servers
-
Navigate to Settings > Licensing & Analytics Configuration.
The dashboard displays the virtual server licenses available, the managed virtual servers along with the virtual server type, and license expiry information.
-
In Virtual Server License Allocation, disable Auto Licensed Virtual Servers and Auto-select non addressable Virtual Servers.
Select third-party virtual servers for licensing
-
Navigate to Settings > Licensing & Analytics Configuration.
The dashboard displays the virtual server licenses available, the managed virtual servers along with the virtual server type, and license expiry information.
-
In Third Party Virtual Server Summary, disable Auto-select Third Party Virtual Servers.
Apply virtual server licenses manually
You can manually apply licenses to an individual virtual server.
-
In Virtual Server License Allocation, select Configure Licenses.
The All Virtual Servers page is displayed.
-
Filter unlicensed virtual servers using the property:
Licensed: No. -
Select the virtual server that you want to license.
-
Click License.
Configure policy based virtual server licensing
You can configure a policy to apply license to virtual servers. This policy controls the number of virtual servers that you want to auto-license. It also applies licenses to selected instances’ virtual servers only.
Click Edit Policies and you can specify the following:
-
Set virtual servers limit on CPX instances separately to apply licenses. NetScaler Console applies license to virtual servers on CPX instances up to a specified limit.
Important
This limit applies to CPX instances except sidecar deployment types.
To view CPX instances of sidecar deployment types, filter the virtual servers using the property:
License Type: Freely Managed. -
Set virtual servers limit on selected NetScaler instances (MPX/VPX/BLX) to apply licenses. NetScaler Console applies licenses to virtual servers on NetScaler instances up to a specified limit.
-
Select the priority NetScaler instances to apply virtual server licenses. Therefore, NetScaler Console can apply license to selected instances’ virtual servers only.
View the licensed virtual servers
After the licenses are applied to the virtual servers, you can view the licensed virtual servers or third-party virtual servers.
-
Navigate to Settings > Licensing & Analytics Configuration.
-
Click the virtual server type in the Total Licensed section in the Virtual Servers License Summary.
Configure auto license support for non-addressable virtual servers
NetScaler Console, by default, does not automatically apply licenses to non-addressable virtual servers. For licensing non-addressable virtual servers, you must disable the auto-license option and manually select the non-addressable virtual servers. This increases your effort to manually select the non-addressable servers initially when you apply the licenses. You also need to manually select the new non-addressable virtual servers whenever they are added to your network.
NetScaler Console provides an option under Virtual Server License Allocation. If you enable the Auto-select non addressable Virtual Servers option, licenses are applied automatically to the non-addressable virtual servers.
Note
NetScaler Console, by default, still does not automatically select non-addressable virtual servers for licensing.
Application analytics (App Dashboard) is the only analytics currently supported on licensed non-addressable virtual servers.