NetScaler® Console service

Known issues

NetScaler Application Delivery Management (NetScaler Console) has the following known issues:

Licensing

  • This issue will impact you if you have an SDX migrated or migrating from any type of NetScaler local license (fixed capacity subscription or perpetual license) file based licensing to any type of license with LAS based licensing and the legacy file-based licenses have not been deleted from the SVM.

    Impact: If there is any local legacy file-based license yet existing on the SVM after having transitioned to LAS, then the expiry of the file-based license triggers the un-licensing of the SDX (SVM and VPX on SDX) on the date of that license file expiry.

    Workaround: Delete the local file-based license(s) on the SVM after the migration to LAS has been done successfully. The file-based licenses would be located in SVM folder /mpsconfig/license and must be deleted from this folder using the shell prompt.

    [NSADM-128298]

Management and monitoring

  • The NetScaler® Console CVE advisory might display an incorrect overall severity when no vulnerabilities are found in File Integrity Monitoring scans. The correct severity is displayed in the detailed CVE view.

    [NSADM-123777]

  • In Infrastructure > SSL Dashboard > Manage Certificate Store, when you click Import NetScaler Certificates, NetScaler Console fails to import NetScaler certificates of PFX format.

    [NSHELP-34803]

Infrastructure

  • In NetScaler Console, when an instance is authorized for a system group and a new partition is added to the instance, the system group authorization setting is automatically assigned to the new partition.

    [NSADM-119768]

  • When you try to install a certificate on a NetScaler BLX™ instance, the installation fails and the Infrastructure > SSL Dashboard > SSL Audit Logs page displays the following error message:

    SCP: Authentication by password fails on _<ip-address>_.

    [NSADM-102202]

  • When an event rule is created with some entities selected in Infrastructure > Events > Rules > Create rule > Select Failure Objects, all the selected entities do not get displayed. This issue is seen when there is a large number of virtual servers, services or service groups.

    Workaround: Contact the NetScaler Support team for assistance with this issue.

    [NSADM-110553]

  • The SSH or SCP operation that is used in the Configuration Jobs might fail with the following error message:

    “SSH Failure establishing ssh session: -5”

    Workaround:

    1. Log on to NetScaler Console using an SSH client.

    2. Check the output for the following command:

      ls -l /etc/sshd_config

    3. In /etc/sshd_config, update it to add the following:

      HostKey /nsconfig/ssh/ssh_host_ecdsa_key

    4. Apply the changes:

      ps -aux | grep /usr/sbin/sshd | grep -v grep | tr -s ' ' | cut -d ' ' -f 2 | xargs kill -9

[ NSADM-114072 ]

Known issues