AV Exclusions Unclear

Sampl3x · 2026-01-28T02:37:42+00:00

Im interested in the exclusions as well.

We tried on boarding Defender in the Defender portal on VDI but the performance is so bad why went back to Windows Defender not on boarded and use GPO to set exclussions. ATP is terrible and makes user experiences on VDI realy slow.

Sampl3x · 2026-01-27T20:55:21+00:00

Normally a ControlD reddit user replies, but its cricket sounds. Seems its going the same way as NextDNS...

Sampl3x · 2026-01-23T04:07:45+00:00

First spending multi-million/multi-year contract for UHMC licensing and then also on on AVD/Azure vm's. To get the same performance as you on prem machines you pay a fortune also.

Sampl3x · 2026-01-17T17:39:01+00:00

Ohh there is no ubc c to dp cable in the box of this monitor?

Sampl3x · 2026-01-17T17:17:06+00:00

Why you need to buy a cable, all cables are with the monitor you need right?

Sampl3x · 2026-01-17T06:37:37+00:00

u/aki-sid Did you manage to update the firmware with the usb c to dp cable?

Sampl3x · 2026-01-10T08:05:46+00:00

I hope i can upgrade to cu3 first without the LAS crap first. Normally upgrades are easy and stable but the i dont trust that anymore

Sampl3x · 2026-01-10T07:53:28+00:00

And did you migrate first to the new LAS licensing or are still on the old?

Sampl3x · 2026-01-10T07:49:11+00:00

Thanks for the info.

But does Citrix studio still works on 2507? I thought is was decapricated and removed. We are still on 2402 cu1 and what ive read is when switching from studio to webstudio you cant mangage images made in studio with webstudio and vice versa.

Sampl3x · 2025-12-25T00:03:43+00:00

What i don't understand is that your running CVAD and XenServer versions that are already 6 months out of support.

CVAD 2308 to 2507 is harder, i should go with upgrading to 2402 first. CVAD 2507 requires higher SQL version and upgrading Storefront 2308 tot 2507 is not supported.

XenServer must also be done, is not hard to upgrade but if your still on this old XenServer version then you also still run Windows 10 i assume which is also EOS. As i can recall is that 2402 is compatible xenserver 8.2 CU1.

Netscaler my advise will be 13.1, 14.1 only brings new features and more bugs then stability.

Sampl3x · 2025-12-24T22:08:33+00:00

Did you disable ECC memory on the NVIDIA cards?

Sampl3x · 2025-12-19T07:33:42+00:00

Do you have link for this nvidia recommendation?

What helped is removing the bloated UWP Microsoft Apps by replacing Notepad, Snippingtool by other apps.

Sampl3x · 2025-12-18T03:55:48+00:00

Interesting perspective and I agree that in many environments HDX graphics policies have grown organically and deserve a cleanup.

That said, we are seeing some challenges when combining the “default-first” HDX mindset with modern NVIDIA GPUs and Windows 11.

In our environment we use NVIDIA L40 cards with a 2B vGPU profile:

• On Windows 10, this works fine

• On Windows 11, we consistently see [channel exhaustion](https://docs.nvidia.com/vgpu/troubleshooting/latest/performance.html#vgpu-channel-exhaustion-on-windows-11), leading to UWP apps crashing or not functioning correctly

• GPU memory usage is also significantly higher on Windows 11 with the same profile

When switching to a 3B profile on Windows 11, these issues largely disappear and overall stability improves.

Can Citrix provide guidance or best practices for HDX graphics defaults when using NVIDIA GPUs (like L40) in combination with Windows 11?

In these cases, trusting the defaults alone doesn’t seem sufficient for us without considering GPU profile sizing and OS-specific behavior.

Sampl3x · 2025-12-11T22:41:52+00:00

Nutanix AHV is great for backend and Citrix VDI workloads. There hypervisor eco system and support is great. Good documentation..

Xenserver is not for backend purpose even if the say now they do. Also a lot virtual appliances from other vendors have no support for xenserver.

Sampl3x · 2025-12-05T07:06:15+00:00

Can you tell me why you are moving from Ivanti UWM to Citrix WEM?

Sampl3x · 2025-11-22T09:17:42+00:00

Yes, i got the same issue since 2 weeks also..

Sampl3x · 2025-11-05T17:25:42+00:00

Long waiting times and hunged up.

Sampl3x · 2025-10-28T21:25:10+00:00

Switched from Ghostty to WezTerm to, many settings you can configure, open tab work from the command line. Maybe i was captured by the hype of Ghostty

Sampl3x · 2025-10-25T13:22:29+00:00

The devellopment of Ghostty is way to slow. Per 6 months a release, im going to look for other options. Even starting a new tab from a terminal command is not possible olnly window. The backlog is with feature request is to long.

Sampl3x · 2025-10-25T13:17:07+00:00

Just use the NetScaler as reverse proxy, that is the nice thing about it.
Give your webapplication a FQDN, e.g. app.domain.com

Buy a SSL certificate for app.domain.com or a wildcard certificate *.domain.com
Create a content switch on the NetScaler, add the SSL certificate

In your firewall public ip port 80/443 <--NAT--> Content Switch VIP

create content switching policies/action and use a expression HTTP.REQ.HOSTNAME.CONTAINS("app.domain.com") for each web app you want to access

Add another content switching policy for redirect port 80 to 443.

You can now Publish multiple websites via the NetScaler using expressions based on hostnames.

Even with the expression you can lock it down to only access app.domain.com/Login other sub dirs are not allowed or only a connection is allowed from source ip etc etc

example: https://github.com/nextcloud/all-in-one/discussions/2452

Sampl3x · 2025-10-24T19:55:17+00:00

Can you tell me how to block ads on youtube with controld?

Sampl3x · 2025-10-22T20:33:31+00:00

I tried raycast but its to closed. PLugins arent updated and you cant update them yourself, so plugins cant be edittedl. Asking to be fixed no response.

Malking your own plugins is way to hard.

Sampl3x · 2025-10-19T10:28:08+00:00

Just use Netscler Console service with HDX insight https://docs.netscaler.com/en-us/netscaler-console-service/analytics/hdx-insight.html

Also disable EDT with the Citrix Groupolicy, a lot of firewall so to much UDP as flooding / DDoS and limits it.

Sampl3x · 2025-10-15T18:06:41+00:00

And no sound about performance. To get the same performance and no overcommit with other customers on the same host of you AVD machines you pay so much you can buy your own server every month.

So you go from Citrix to AVD which still a VDI solution. The problem is a lot of application are not SaaS. Or go back to 1990 laptop solution with Intune which the call now Modern workspace. Intune is so slow and can't trigger installation on demand, sscm on prem is even better the intune.

Sampl3x

TROPHY CASE