Release Notes for Citrix ADM 13.0-67.42 Release

This release notes document describes the enhancements and changes, fixed and known issues that exist for the Citrix ADM release Build 13.0-67.42.

Notes

  • This release notes document does not include security related fixes. For a list of security related fixes and advisories, see the Citrix security bulletin.
  • When you upgrade the ADM software to image version 13.0 67.xx, your ADM database is also migrated. For more information, see NSADM-40196 in this release notes.
  • Build 67.42 replaces Build 67.39

What's New

The enhancements and changes that are available in Build 13.0-67.42.

Analytics

  • View network reporting data by applying aggregation filters

    You can now apply aggregation to the network performance data and view application performance on the dashboard. You can also export the results based on your requirement. Using these aggregations applied to the data, you can analyze and ensure all resources are utilized optimally. Navigate to Network > Network Reporting and select the time duration 1 day or later to get the View By option.

    In the existing average data, you can apply aggregations by selecting the option from the View By list. When you apply aggregation, the data is updated for each metric in the dashboard. Click Settings and select Aggregation Filters.

    For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/networks/network-reporting.html

    [ NSADM-56494 ]
  • In Gateway Insight, you can now view a search bar that enables you to filter results based on the user name. Navigate to Analytics > Gateway Insight > Users to view the search bar for Users and Active Users. Place the mouse pointer on the search bar, select User Name, and type a user name to filter results.

    [ NSADM-55506 ]
  • Geo map support for Gateway Insight

    In Gateway Insight, you can now visualize a geo map view that displays the users information based on the users geographical location. As an administrator, this geo map enables you to view the summary of total users, total apps, and total sessions for a specific location.
    1. Navigate to Analytics > Gateway Insight to view the geo map
    2. Click a country. For example, United States
    The geo map displays the details such as users list, active sessions, terminated sessions, applications for the selected country.

    You can also visualize a geo map for gateways that enables you to filter users based on a particular location.
    1. Navigate to Analytics > Gateway Insight > Gateways
    2. Select a gateway domain name to view the geo map
    3. Click a country. For example, United States
    The geo map displays the details such as users list, active sessions, terminated sessions, applications for the selected country.

    [ NSADM-55504 ]
  • Security Insight - JSON Command Injection

    In Security Insight, you can now view a new violation type, JSON Command Injection. To generate the JSON Command Injection violation in Security Insight, you must configure the following command in Citrix ADC instance:

    add appfw profile abc_js -type JSON -startURLaction none -starturlclosure off -jsoncmdinjectionaction block log stats -jsoncmdinjectiontype cmdkeyword

    After you configure, you can view the JSON Command Injection attack in Security Insight.

    [ NSADM-52869 ]
  • Improvements to Global Service Graph

    In Global Service Graph, you can now use the search bar to filter results. As an administrator, this search bar enables you to narrow-down quickly to a particular instance/client/application/data center, when you have:

    • A large enterprise with many data centers
    • Configured many Citrix ADC instances for each data center
    • Configured many applications deployed or accessed through each Citrix ADC instance
    • Clients accessing the application from different locations

    Place the mouse pointer on the search bar and select the category that you want to create the filter.

    For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/application-analytics-and-management/holistic-view-sg.html

    [ NSADM-52149 ]

Infrastructure

Management and Monitoring

StyleBooks

  • Improvements to StyleBook built-in functions

    When creating StyleBook definitions, now you use the following built-in functions with their improved capabilities:

  • replace() Replaces the characters or strings specified in the list. Earlier, you were not able to provide a list input to this function.
  • ip() - Accepts an integer value and converts that into an equivalent IP address. It also supports IP address addition and subtraction.
  • int() - Accepts an IPv4 address and returns its equivalent integer value.
    The following new StyleBooks built-in functions are added:
  • distinct() - Extracts the unique items from an input list.
  • split() - Splits an input string into lists.

For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/stylebooks/stylebooks-grammar/built-in-functions.html

[ NSADM-56972 ]

Configuration packs You can authorize the configurations that belong to the selected StyleBooks. To do so, select All configurations of the selected StyleBooks in the Configpacks section.

For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/access-control/role-based-access-control/rbac-configuring-groups.html

[ NSADM-52334 ]

User Interface

The Allocation Details column is now removed from the instances list.

License Server Usage - A new indicator added to the usage chart. It displays the pooled capacity consumption of the license server.

For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/license-server/adc-pooled-capacity/configuring-adc-pooled-capacity.html

[ NSADM-52770 ]

b. In the App Dashboard page, the scroll bar is replaced with a carousel slider that enables you an ease of access to all options.

[ NSADM-52759 ]

With these threshold types, you have greater control over the thresholds for the ADC instances, using which the instance score is calculated. You can also configure notifications for the score threshold breaches.

[ NSADM-47453 ]

Fixed Issues

The issues that are addressed in Build 13.0-67.42.

Analytics

  • When you upgrade Citrix ADM to 13.0 67.39, the Web Insight data migration is stopped.

    [ NSHELP-25259 ]
  • Citrix ADM generates high CPU events periodically.

    [ NSHELP-25146, NSADM-61404 ]
  • Sometimes, the key metrics do not appear in the Applications > Dashboard page.

    [ NSHELP-24728 ]
  • ADM checks if metrics collector is enabled on ADC instance at regular intervals. If metrics collector is not enabled, ADM enables it. If some reason, metrics collector configuration fails, then ADM keeps trying to enable and causes unnecessary NITRO calls to ADC instance.
    With this fix, ADM tries to enable the metrics collector for only once.

    [ NSHELP-24573, NSHELP-24609 ]
  • When ADM receives high traffic from the ADC instances, ADM CPU consumption increases to 25 percent.

    [ NSHELP-24534 ]
  • When ADM is integrated with Desktop Director, and very high number of users from Desktop Director is accessing HDX Insight report, users experience a slowness in report accessibility.

    As part of the fix, several improvements have been made to provide the HDX Insight report faster.

    [ NSHELP-24319 ]
  • Web Insight reports are not available for users, who do not have full admin rights.

    [ NSHELP-24226 ]
  • The App dashboard does not display application analytics because the virtual server license information is unavailable during metrics processing.

    [ NSADM-61800 ]
  • In lstreamd.conf, NGS, SWG, VPN, and ICA must be set to none by default, to avoid high memory and CPU consumption.

    [ NSADM-61408 ]

High Availability

  • In a Citrix ADM HA pair, after upgrading from 13.0 47.22 to 13.0 52.24, when the failover occurs, ADM uses primary node IP address for the AppFlow collector instead of floating IP address.

    [ NSHELP-23027 ]

Infrastructure


  • When you upgrade to ADM software version 13.0 71.x from version 11.1 any build, ADC historical data fails to migrate.

    [ NSADM-62301 ]
  • After you upgrade ADM to 13.0.64.35, database synchronization between the ADM standalone server and the disaster recovery node fails.

    [ NSADM-60395 ]

Management and Monitoring

  • The backup (System > Backup) option is not visible to the user, even though the user has admin access.

    [ NSHELP-24972 ]
  • Perform the following:

    1. Navigate to Networks > Network Functions > Load balancing

    2. Select the ServiceGroup and click Bound Members

    When you try to click the Enable/Disable/Poll Now option of the bound members, Citrix ADM GUI stops and the nitro fails with Not Authorized.

    [ NSHELP-24779 ]
  • When you upgrade Citrix ADM to13.0 61.48, the upgrade does not complete and still remains in the same ADM build.

    [ NSHELP-24745 ]
  • In some cases, ADM does not send email alerts for cleared events if the Repeat Email notification until the event is cleared option is selected.

    [ NSHELP-24585 ]
  • After the DR node has become the primary node, the roll back from DR node to original primary site is not working as expected.

    [ NSHELP-24529 ]
  • When you upgrade ADM to version 13.0 61.xx, association of peer servers with configured NTP servers in ADM is lost.
    [ NSHELP-24520 ]
  • When you attempt to increase the ADM secondary disk size, the process fails and "Swap partition cannot be deleted" error message appears.

    [ NSHELP-23878 ]
  • ADC pre-upgrade check for free flash space always passes even if the free space is low.

    [ NSADM-60092 ]
  • The configuration job fails to execute if it has an angle bracket (<) symbol in the configuration command.

    [ NSADM-53465 ]

Miscellaneous

  • Pooled license information for ADC cluster nodes is not displayed correctly in the ADM dashboard.

    [ NSHELP-24359 ]

StyleBooks

  • When you import a private StyleBook with an icon, the ADM GUI does not display the icon for the imported StyleBook.

    [ NSADM-60506 ]
  • The "Error while adding tags" message appears when you do any of the following:

    - Add tags to a StyleBook.

    - Add tags to a configuration pack.

    - Associate StyleBook tags to a configuration pack.

    [ NSADM-60298 ]
  • When you deploy ADM for the first time, the ADM GUI fails to display the default StyleBooks.

    [ NSADM-58681 ]

User Interface

  • After you upgrade to 13.0 61.48, ADM integration with Director might not display Network Analytics (HDX) and User sessions.

    [ NSHELP-24832 ]
  • In Networks > Instances, even if you enable the pooled licensing mode for the Citrix ADC MPX instance, it appears under the Not Licensed section.

    [ NSHELP-24509 ]
  • Citrix Director fails to integrate with Citrix ADM.

    [ NSADM-60878 ]

Known Issues

The issues that exist in release 13.0-67.42.

Analytics

  • When you enable HDX Insight, the mas_afdecoder process stops responding and fails generating HDX analytics.

    [ NSHELP-26754, NSHELP-27397 ]

Management and Monitoring

  • In Citrix ADM, when you enable Perform Audit on receiving netScalerConfigChange event, ADM polls the ADC instances for every configuration change. However, if there are multiple changes in the ADC configuration at the same time, the configuration audit polling fails. For more information to enable configuration audit polling, see Set configuration audit notifications.

    [ NSHELP-29855 ]
  • If the mas_hb_monit.conf file is corrupted, all the processes in ADM do not start. As a result, the ADM start-up fails.

    With this fix, if the mas_hb_monit.conf file is corrupt, all the processes will now search for the clean file in all the directories and recover it before accessing the file.

    [ NSHELP-29543 ]
  • When you upgrade an ADC instance by using ADM maintenance jobs, after the instance restarts, under the Citrix ADC instance page, the upgraded ADC image version does not appear. The GUI still shows the old image version.

    [ NSADM-60824 ]

Miscellaneous

  • When you enable analytics on a virtual server, some required information might be lost between ADC and ADM. As a result, the transaction data becomes invalid and is unavailable on the ADM reports.

    [ NSHELP-26545 ]

Orchestration

  • When you create a member on OpenStack Lbaas using ADM orchestration, the member creation fails on OpenStack intermittently. This issue happens when a proxy request from ADM to orchestration services times out after 30 seconds.

    With this fix, the request timeout for orchestration APIs has increased to 120 seconds.

    [ NSHELP-21490 ]
  • If you are using OpenStack Queens for LBaas workflow, the Load Balancing virtual server is not bound to Content Switching virtual server. This issue impacts the traffic.
    Workaround:
    1. Create a pool with Load Balancing virtual server.
    2. Create a listener with the pool ID.
    If you already have a listener, update the listener with the pool ID.

    [ NSADM-36631 ]