Provision third-party virtual machines

Last published : Sep 30, 2026
Note:
From version 14.1 build 17.x onwards, NetScaler SDX has ended support for third-party virtual machines.
The SDX appliance supports provisioning of the following third-party virtual machines (instances):
  • SECUREMATRIX GSB
  • InterScan Web Security
  • Websense Protector
  • BlueCat DNS/DHCP Server
  • CA Access Gateway
  • PaloAlto VM-Series
SECUREMATRIX GSB provides a highly secure password system that eliminates the need to carry any token devices. Websense Protector provides monitoring and blocking capabilities, preventing data loss and leaks of sensitive information. BlueCat DNS/DHCP Server delivers DNS and DHCP for your network. PaloAlto VM-Series on NetScaler SDX enables consolidation of advanced security and ADC capabilities on a single platform, for secure, reliable access to applications by businesses and service-provider customers. The combination of VM-Series on NetScaler SDX also provides a complete, validated, secure ADC solution for Citrix Virtual Apps and Desktops deployments.
You can provision, monitor, manage, and troubleshoot an instance from the Management Service. All the preceding third-party instances use the SDXTools daemon to communicate with the Management Service. The daemon is pre-installed on the provisioned instance. You can upgrade the daemon when new versions become available.
When you configure third-party virtual machines, then SR-IOV interfaces (1/x and 10/x) that are part of a channel do not appear in the list of interfaces. The interfaces are missing because channels are not supported on third-party virtual machines.
Note:
The total number of instances that you can provision on an SDX appliance depends on the license installed on the appliance.
Important: You must upgrade your Citrix Hypervisor version to version 6.1.0 before you install any third-party instance.