Release Notes for NetScaler ADM 14.1–12.34 Build
This release notes document describes the enhancements and changes, fixed and known issues that exist for the NetScaler ADM release Build 14.1–12.34.
Notes
- This release note document does not include security related fixes. For a list of security related fixes and advisories, see the Citrix security bulletin.
- Build 14.1–12.34 replaces Build 14.1–12.30.
- Build 14.1–12.34 includes a new feature NSADM-98483 and a known issue NSADM-106497, along with all the enhancements and bug fixes available in Build 14.1–12.30.
What’s New
The enhancements and changes that are available in Build 14.1–12.34.
Licensing
NetScaler Flexed licensing
NetScaler Flexed licensing is the new licensing framework aimed at simplifying the license management process. Your Flexed license includes software instance licenses (VPX/CPX/BLX, SDX, MPX, and VPX FIPS) and bandwidth capacity licenses. You must apply the Flexed licenses in the NetScaler Console service or NetScaler ADM on-prem. You must also apply the MPX Z-Cap and SDX Z-Cap license on NetScaler MPX hardware and NetScaler SDX hardware, respectively. You can then allocate them across all NetScaler form factors deployed in cloud or on-prem.
For more information, see Flexed license.
Flexed licenses are officially supported in NetScaler ADM on-prem 14.1 and 13.1 releases. In release ADM on-prem 14.1-12.x and later, bundled entitlement of unlimited ADM VIPs for analytics is available if you have applied Flexed licenses. You can manage Flexed licenses through the Flexed dashboard UI (NetScaler Licensing > Flexed Licensing).
For ADM on-prem release 13.1 and 14.1 builds earlier than 14.1-12.x, when you apply Flexed licenses, ADM treats them the same as Pooled licenses and shows the details in the Pooled dashboard UI (Infrastructure > Pooled Licensing). Bundled entitlement of unlimited ADM VIPs for analytics when the Flexed license is applied is not available in these releases.
For a better product experience showcasing Flexed GUI and offering bundled entitlement, we recommend that you upgrade your ADM on-prem to release 14.1-12.x or later.
Note:
To comply with current Flexed licensing requirements, you must enable ADM on-prem Cloud Connector. This feature connects your ADM on-prem to ADM service for telemetry collection. We recommend that you enable telemetry collection when you are using Flexed licensing. To enable ADM On-Prem Cloud Connector, see ADM On-Prem Cloud Connector.
[ NSADM-98483 ]
Analytics
Anomaly detection in application key metrics
As an administrator, you must ensure that your applications are efficiently managed to get insights for better prioritizing and troubleshooting. In some scenarios, you might also want to view and analyze the unusual application performance deviations that might occur for a specific duration.
In App Dashboard, when you select an application, the Key Metrics tab enables you to view how your applications are used. NetScaler ADM monitors the traffic pattern and analyzes if the key metrics are in the expected range. You can now view anomalies for the following key metrics if there are deviations from the expected range:
- Response Time
- Throughput
- Data Volume
- Requests per second
For more information, see Application usage and anomalies
[ NSADM-97531 ]
Export data to Splunk and New Relic only from selected instances
When you create a subscription to export data to Splunk and New Relic, you can now select instances. If you create a subscription with specific instances, the data is exported to Splunk and New Relic only from the selected instances.
For more information, see Integration with Splunk and Integration with New Relic.
[ NSADM-94371 ]
Actionable tasks and recommendations
The following enhancements are now added to the Tasks feature:
- A new Tasks tab is introduced where you can view actionable tasks that need your immediate attention. These tasks are displayed based on your current utilization. As an administrator, completion of these actionable tasks ensure that your NetScaler deployment is secured, compliant, and efficient. These actionable tasks are based on the severity of the issues (Critical and Medium).
- The To Do tab is renamed as Recommendations. In Recommendations, you can continue to review the existing tasks and click Guide Me to complete the task.
- The Archive tab is no longer available. Instead, you can choose to Dismiss a recommendation from the list.
For more information, see Actionable tasks and recommendations.
[ NSADM-91870 ]
Infrastructure
Use certificate store to update SSL certificates
When you update an SSL certificate in Infrastructure > SSL Dashboard > Update, you can now select the certificate from the certificate store. Earlier, you had to upload the certificate file and key file to update an SSL certificate.
For more information, see How to update an installed certificate.
[ NSADM-101303 ]
Scan Log support in Security Advisory
In Security Advisory, you can now view a new option called Scan Log. Using the Scan Log, you can:
- View the report of the last five CVE scan. The report includes both default system scan and on-demand user-initiated scan.
- Download the report of each scan in CSV and PDF formats.
- View the status of the on-demand scan that is currently in progress.
For more information, see Security Advisory.
[ NSADM-101142 ]
Updated list of SNMP traps
The list of SNMP traps is now updated with new traps and some previously missing traps. To view the complete list, navigate to Infrastructure > Events > Event Settings > NetScaler.
[ NSADM-99798 ]
Manage database custom certificates and ciphers in an HA deployment
NetScaler ADM now allows you to replace the default inbuilt database certificates with your own certificates from a trusted certificate authority. You can also configure your own cipher suites for the ADM database. To use this feature, navigate to Settings > HA Deployment > Database Certificates.
For more information, see Manage database custom certificates and ciphers in a high-availability deployment.
[ NSADM-96583 ]
Sharing of subscription license information between ADM on-premises and ADM service
The ADM on-premises server now sends NetScaler subscription license information to the ADM service through the ADM On-Prem Cloud Connector.
[ NSADM-93820 ]
Sharing of pooled license information between ADM on-premises and ADM service
The ADM on-premises server now sends NetScaler pooled license information to the ADM service through the ADM On-Prem Cloud Connector.
[ NSADM-93812 ]
Security
Unified Security dashboard
In NetScaler ADM, you can now use a single-pane dashboard to configure protections, enable analytics, and deploy them on your applications. Navigate to Security > Security Dashboard and then click Manage Application to:
- View all secured and unsecured applications.
- Select a unsecured application, configure protections from various template options, enable analytics for the protections, and deploy them on your application to secure the application.
Earlier, you had to configure all protections in the NetScaler instances and you were able to view only analytics for the configured protections in NetScaler ADM. As an administrator, this single-pane dashboard enables you to configure protections for the application in a single workflow.
For more information, see Unified Security dashboard.
[ NSADM-92678 ]
StyleBooks
Use certificates from the NetScaler ADM certificate store in StyleBooks
You can now define StyleBooks to use certificates from the NetScaler ADM certificate store. When creating config packs, you can select certificates from the certificate store, or add new ones to the certificate store.
For more information, see Manage SSL certificates from the certificate store using StyleBooks.
[ NSADM-101515 ]
Define a drop-down menu in StyleBooks
NetScaler ADM now allows you to define a drop-down menu in the ‘parameters-conditions’ of the StyleBook definition.
For more information, see Parameter conditions.
[ NSADM-99543 ]
Download support bundles for StyleBooks and config packs
You can now download a support bundle for troubleshooting any config pack or StyleBook operations. You can share these support bundles with the NetScaler team when opening a support ticket for StyleBooks. To download a support bundle, navigate to Applications > Configuration > Config Packs > Support Bundles.
For more information, see Download the support bundle.
[ NSADM-97838 ]
Modify the state and ARP status of virtual servers in StyleBooks
In Applications > Configuration > Config Packs > Migrate NetScaler Configuration, you can now view and edit the the state (Enabled/Disabled) and ARP status of any virtual server migrated to a new NetScaler.
For more information, see Create a StyleBook to migrate the NetScaler application configuration.
[ NSADM-97827 ]
Migrate configurations without a config pack
NetScaler ADM now offers the option to migrate application configurations between NetScalers without creating a config pack in NetScaler ADM. By default, the migration creates a config pack on ADM that is used to further manage the configuration through StyleBooks. If you want to only migrate the application configuration from one NetScaler to another without managing it through StyleBooks afterward, clear the Manage the configuration through ADM checkbox during the migration in Applications > Configurations > Config Packs > Migrate NetScaler Configuration > Migrate.
For more information, see Migrate NetScaler application configuration using StyleBooks Configuration Builder.
[ NSADM-97802 ]
Fixed Issues
The issues that are addressed in Build 14.1–12.34.
Analytics
-
Sometimes, the NetScaler ADM agent might crash and generate core dump files after an upgrade.
[ NSHELP-36428 ]
Infrastructure
-
Under certain conditions, the regex configurations applied to some user groups might be lost.
[ NSADM-104565 ]
-
In Infrastructure > Instance Advisory > Security Advisory, when you select a vulnerable NetScaler instance with a CVE and click Proceed to Upgrade workflow, the following error message is displayed:
“Selected NetScaler instance does not require this remediation workflow”
[ NSADM-103649 ]
-
In Infrastructure > Events > Event Messages, NetScaler ADM does not display whether the NetScaler CPU utilization traps are for packet CPU or management CPU.
[ NSADM-103391 ]
-
When the NetScaler ADM is installed on a Kubernetes cluster, certain pages, such as Infrastructure Analytics, Events, Syslog Events, and Data Storage Management, might not appear in the NetScaler ADM GUI.
[ NSADM-103180 ]
-
When a report from a scrollable page in NetScaler ADM is exported, the exported report may truncate content that extends beyond the visible window’s height.
[ NSADM-102765 ]
-
A mas_service subsystem crash is observed in scaled deployments.
This issue occurs if you have RBAC permissions and you belong to a group which has the following configurations in Settings > Users & Roles > Group > Authorization Settings:
- A specific instance is selected in Instances
- All Applications is selected in Applications
[ NSADM-99873 ]
-
When you, as a root administrator, log on to the NetScaler ADM GUI or API with default credentials for the first time, you are prompted to change the default password.
[ NSADM-95328 ]
Management and Monitoring
-
When an RBAC user sends a NITRO API request to NetScaler ADM to retrieve the list of NetScaler servers, the response incorrectly indicates zero available servers. However, when navigating to the NetScaler ADM GUI (Infrastructure > Network Functions > Load Balancing > Servers), all NetScaler servers linked to that user are displayed.
[ NSHELP-36645 ]
-
The NetScaler ADM restore operation in Settings > Backup Files > Restore intermittently fails to complete.
[ NSHELP-36527 ]
-
NetScaler ADM fails to compress certain core files, resulting in increased disk space consumption.
[ NSHELP-36434 ]
-
When an administrator creates a group with access to all applications, and a user belonging to that group tries to access the Infrastructure > Network Functions > Load Balancing > Servers page, the NetScaler ADM GUI becomes inaccessible.
[ NSHELP-36426 ]
-
During the synchronization of files between primary and secondary nodes in the NetScaler ADM HA setup, the Inventory Subsystem intermittently crashes.
[ NSHELP-36357 ]
-
In NetScaler built-in agents, event alerts or messages are not generated even after the event age exceeds the duration set in Infrastructure > Events > Rules > Add.
[ NSHELP-35706 ]
-
When you provision a VPX instance on SDX in Infrastructure > Instances > NetScaler > SDX > Select Action > Provision VPX, the Manage through network option does not appear.
[ NSHELP-36328 ]
StyleBooks
-
The NetScaler ADM StyleBook log files do not automatically compress even after exceeding the file size limit, resulting in increased disk space consumption.
[ NSHELP-36680 ]
-
When config packs with special characters in their parameters are updated or deleted, NetScaler ADM displays a success message despite incomplete update or delete operations on NetScaler. With this fix, NetScaler ADM now accurately displays errors for any incomplete configurations resulting because of special characters in the config pack definition.
[ NSADM-104423 ]
Known Issues
The issues that exist in release 14.1–12.34.
Analytics
-
In Applications > Dashboard, when you click an application hosted on the NetScaler HA pair, the Performance tab on the application details page does not display any data under All Services.
Workaround: Refresh the page or move to a different tab within the application details page, then return to the Performance tab to view the services associated with the load balancing virtual server.
[ NSADM-105613 ]
Infrastructure
-
The Flexed license dashboard displays NetScaler details only after at least one NetScaler is checked out from the Premium bandwidth license pool.
[ NSADM-106497 ]
-
When licenses are deleted from NetScaler ADM for VMware ESXi, the license count in Settings > Licensing & Analytics Configuration might not immediately reflect the updated number.
[ NSADM-105851 ]
-
The difference report is not generated for an upgrade job in Infrastructure > Upgrade Jobs > Diff Reports.
[ NSADM-106777 ]
-
After a new NetScaler ADM is configured, the following error message might appear: “Error in operation - Metrics not found.”
This issue occurs because the automatic data purge job has not been run yet, resulting in the absence of data. The job is scheduled to run for 3 hours, and after it runs, the necessary data is generated, and the error message no longer appears.
[ NSADM-103157 ]
-
When you try to install a certificate on a NetScaler BLX instance, the installation fails and the Infrastructure > SSL Dashboard > SSL Audit Logs page displays the following error message:
“SCP: Authentication by password fails on ip-address.”
[ NSADM-102202 ]
-
The NetScaler agent does not get registered to NetScaler ADM if either of their passwords has a ‘#’ symbol.
[ NSADM-100613 ]
Licensing
-
After the Flexed or Pooled license is applied, the Analytics Configuration page (Settings > Analytics Configuration) is not updated with the correct details.
Workaround: Refresh the page to get the correct details.
[ NSADM-106665 ]
-
The Flexed license dashboard in NetScaler Licensing > Flexed Licensing > Dashboard appears blank.
Workaround: Apply a Premium bandwidth license.
[ NSADM-106561 ]
Management and Monitoring
-
NetScaler ADM agent generates “netScalerLoginFailure” SNMP traps. This issue occurs because the credentials that the ADM agent uses to log into NetScaler gets truncated due to a newline character.
[ NSHELP-36804 ]
-
In an ADM HA pair, the database status observed to be in Down status and not synchronizing even after trying with Sync Database option in the GUI for several times.
[ NSHELP-29626 ]