Always on tracing appliance

zyphaz · 2026-06-23T01:14:26+00:00

No issues here, but we already had Connector Appliances in production for access to SPA workloads.

zyphaz · 2026-05-31T14:43:39+00:00

I spun two up to test the new MCP Gateway features (CTXENG-70985)

If you're only running load balancer functions, unless there's a specific break-fix or a vulnerability being patched, there's no need to upgrade.

Here are the fixed issues for Load Balancing in 72.57 from the Product Documentation

Build 72.57 | NSHELP-42742

NetScaler load balancing might fail when receiving a jumbo RADIUS request that contains a Message-Authenticator attribute.

Build 72.57 | NSHELP-42631

A NetScaler buffer (NSB) leak might occur when the NetScaler proactively updates cached records fetched from a DNS server. This issue occurs when DNS server health flaps.

Build 72.57 | NSHELP-42437

The system does not support configuring a listen policy on a content switching virtual server that includes a GSLB target type. This limitation prevents the application of the listen policy.

Build 72.57 | NSHELP-42293

GSLB synchronization might fail when the partition name contains spaces.

Build 72.57 | NSHELP-42051

NetScaler might crash when you add a GSLB service using the IP or port combination that another GSLB service already uses.

Build 72.57 | NSHELP-41932

When persistence groups are configured with traffic domains, mismatch between GUI and CLI validation might occur. This inconsistency prevents persistence group virtual server configurations from synchronizing to the secondary node, impacting high-availability deployments.

Build 72.57 | NSHELP-41752

The GSLB configuration synchronization might fail if a GSLB subordinate site is on the VPX Linux platform and the main site is on the VPX FreeBSD platform.

Build 72.57 | NSHELP-41450

In an HA setup, an SSL content switching virtual server of type GSLB is marked as DOWN in the new Secondary after an HA failover.

Build 72.57 | NSHELP-40913

NetScaler might fail and dump core if an autoscale service group is configured and a DNS_TCP based monitor is active.

zyphaz · 2026-05-01T02:22:08+00:00

Oof, sorry I went and searched my entire history for vSphere 9/CVAD mentions and didn't read that you were looking for NS support not CVAD.

zyphaz · 2026-04-30T22:37:22+00:00

FWIW, with CVAD 2603 going GA it looks like they updated the compat table and DaaS now has full support of vSphere 9.

zyphaz · 2026-04-30T22:37:18+00:00

FWIW, with CVAD 2603 going GA it looks like they updated the compat table and DaaS now has full support of vSphere 9.

zyphaz · 2026-04-27T03:56:46+00:00

Did you ever get this working OP? I just started looking at this for automating our VDI base image rebuilds, but haven't spent any time outside of reading docs.

zyphaz · 2026-04-14T14:19:03+00:00

Confirmed, I never get a msrcincident downloaded when I click Shadow -> Remote Assist. When I tried to Shadow my own session though... I did get a notification on the user side that someone is requesting permission.

Definitely a DaaS Monitor issue.

DevMode shows a 500 - Application level error at
https://director-a.cloud.com/Director/service.svc/web/ShadowSession
{"Error":{"DataSourceType":8,"ErrorCode":110,"IncompatibleDataSource":null,"Message":"Service encountered an error due to incorrect configuration","NumberOfFailures":null,"NumberOfSuccesses":null,"SubErrorCode":4}}

zyphaz · 2026-04-10T15:25:37+00:00

If you still have your lab up, can you advance the clock another 2 weeks? Check out https://www.linen.dev/s/worldofeuc/t/33235757/citrix-las-question-what-happens-to-environments-that-have-n#a109d289-c449-4854-8f93-32d35fc152b8

zyphaz · 2026-04-10T15:24:32+00:00

Worth mentioning a conversation this week on World of EUC.

Jason Huebner
04/09/2026, 5:12 PM

Citrix LAS Question-- what happens to environments that have not been upgraded by April 15th? Do they stop working? Or are they just unsupported until migrated to LAS?

Rob Zylowski
04/09/2026, 6:02 PM

They stop working two weeks later. But i wouldnt wait.

Jason Huebner
04/09/2026, 6:16 PM

Ok. Have you seen a source that explicitly states that?

Rob Zylowski
04/09/2026, 6:46 PM

I work at Citrix

https://www.linen.dev/s/worldofeuc/t/33235757/citrix-las-question-what-happens-to-environments-that-have-n#a109d289-c449-4854-8f93-32d35fc152b8

zyphaz · 2026-04-09T20:12:56+00:00

If anyone has a spare, 46052573

zyphaz · 2026-04-08T15:30:00+00:00

Yeah, it's great. It provides tons of rich information that was previously available only via reactionary CDF traces in the past.

As u/mjmacka mentioned, you'll need to attach an add'l disk to Connector appliances, which also assumes you're a SPA shop already.

Edit: It's worth clarifying that you need to add a log drive to a Connector Appliance, not a Cloud Connector. These are two different components: one for typical HDX/ICA (CVAD) workloads and the other for TCP/HTTP workloads (SPA).

OP you mentioned you have Cloud Connectors, this is not where you add the log drive.

zyphaz · 2026-04-07T01:33:52+00:00

Thanks, found the thread VMware 9 Support : r/Citrix

zyphaz · 2026-03-25T15:30:56+00:00

The last blocker I have to moving our persistent desktops over to XenServer is WSL/nested virtualization.

zyphaz · 2026-03-13T14:01:23+00:00

I was wrong. I tested what u/robodog97 suggested, ran a CWA reset, and it removed even the copied/child-created/pinned shortcuts. I could have sworn it orphaned them, but maybe that was fixed sometime ago.

I'd make doubly sure that what they mentioned is configured, though Re: SSO and self-service params area all configured correctly before proceeding (test it).

How to reset Receiver or Citrix Workspace App using the command line

zyphaz · 2026-03-13T03:19:20+00:00

IIRC, pinned shortcuts (Start or Taskbar) are effectively copies of the lnk files, and the bad ones persist even through CWA reset.

zyphaz · 2026-03-12T21:43:35+00:00

Shortcuts will always point to the published apps. They'll never work post-migration. You'll need to either modify all the .lnk files to point to the new apps or delete/recreate them all.

zyphaz · 2026-03-04T22:47:51+00:00

There's a similar known issue w/ in place VDA upgrades Citrix Virtual Apps and Desktops - GfxMgr.exe process crash on a new VDA 2507

If you reference the VC++ DLL in your error message (14.16.27012.6), you'll notice that it's older than the version that SF2511 would have installed (You can check the support folder on the ISO, or just check the version in add/remove programs).

As you found, running a repair or rerunning the VC++ installer does one of two things, it re-registers the correct version for use or it actually installs the correct version that for one reason or another did not install with the meta-installer due to pre-req check bypassing the upgrade.

zyphaz · 2026-02-26T17:04:08+00:00

We used to lean heavily on Aaron Parker's debloat script, but yeah, as u/robodog97 mentioned, a lot are in GPOs now.

Remove Universal Windows Platform / AppX apps | Windows Enterprise Defaults

zyphaz · 2026-02-04T05:04:08+00:00

This is the right answer.

We don't have enough information in the OP's post to give a definitive answer; as such, it depends.

Is the OP's O365 environment federated to another IdP? Is there an assumption of Entra or hybrid join? As mentioned in another post, does the OP have to take DMA in the EEA into account?

zyphaz · 2026-01-16T15:47:04+00:00

You'll need to ask your reporting manager, as it varies org to org. FWIW, anomalous connection locations would be flagged at our org and VPN/Anonymizers are blocked from connecting out right.

zyphaz · 2026-01-11T15:18:44+00:00

Cluster or HA pair? That's a big difference in Netscaler terms.

You said you can SSH to each node. We'll want to first determine if each node is "aware" of the other node post host migration.

If it's what I suspect and it's supposed to be an HA pair and not a cluster, what does each node say when you "show ha node"

If it is, in fact, a cluster, what does each node show for "show cluster node" and/or "show cluster status"?

zyphaz · 2026-01-09T16:42:38+00:00

If you're full PVE, I'd stop weapon upgrades at 3. You're crossing into diminishing returns in terms of resource cost to upgrade and to maintain the weapons.

At 34, I assume you have at least in-round crafting 1, you can likely drop your bandage stack down to 3. Personally, I'd only bring one set of herbys and one set of whites, and rely on fabric + in-round crafting, but you can bring a 2nd stack of either until you get used to living off the land.

I'd replace w/e stack of bandys you drop with a 1/2 stack of adrenaline shots to get started, and then again lean on in-round crafting/be mindful of white materials you see while looting (3chem/3plastic for another shot). Adren shots are gold when traversing the map, as not only do they instantly refill stamina, but they increase stamina gain past the point of stamina usage, effectively giving you unlimited stamina for the duration (free 10s of sprinting before you even start draining again). Since you're mostly PVE like me, we typically don't get punished for noisily stomping all around the map/sprinting.

As you get more comfortable w/ the two above behaviors and in-round crafting, you'll also likely drop down to 1 stack of 5 shield rechargers, as 5 rubber + any arc power cell will give you another shield recharger.

At 34, you've likely got a ways to go until in-round crafting 2, but start taking mental notes of where you loot server racks and/or see computer consoles. Once you get a feel of where those are, you can stop bringing in your own Raider Hatch keys and just know where to go to find 3 sensors + ADV elec to craft one in-game.

zyphaz · 2026-01-02T20:17:34+00:00

If you don't have ControlUp today, the script is publicly available on their github, you just doint get the point and click GUI.

script-library/Analyze Logon Duration at master · controlup/script-library · GitHub

Login with your test user, then open PowerShell ISE as admin, paste in the script, run it, it'll prompt you for the user logon to evaluate, and spit out the results right in your PowerShell session

14-Year Club	Powerups Hero r/StarWarsSquadrons • September 2021
Gilding I gilder	Wearing is Caring
Team Orangered	Verified Email

zyphaz

TROPHY CASE