- This release notes document does not include security related fixes. For a list of security related fixes and advisories, see the Citrix security bulletin.
Management and Monitoring
Migrate on-premises Citrix ADM to Citrix Cloud
You can now migrate on-premises Citrix ADM running 13.0 64.35 or a later version to Citrix Cloud. If your Citrix ADM has 12.1 or an earlier version, you must first upgrade to 13.0 64.35 or a later version, and then migrate.
ADM service through Citrix Cloud enables you to get:
- Faster releases, approximately every two weeks with latest feature updates.
- Machine-learning based analytics for application WAF, performance, and usage.
- Various other features that are currently supported only in ADM service, such as peak and lean period analytics, application security analytics for WAF and bot, application CPU analytics, and many more.
For a successful migration, ensure to:
[ NSADM-57369 ]
- Have internet connectivity in on-premises Citrix ADM for Citrix cloud accessibility
- Configure the ADM service agent
- Get the client and secret CSV file from Citrix Cloud
- Validate the ADM service licensing
- Complete the migration using a script
Create a CSR with Subject Alternate Names
You can now create a Certificate Signing Request (CSR) with Subject Alternate Names. With this feature, you can secure multiple domains with a single certificate.
During CSR creation of the selected SSL certificate, you can now include multiple values. These values can be domain names and IP addresses. For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/networks/ssl-certificate-dashboard/how-to-create-csr.html[ NSADM-51556 ]
Download a consolidated diff report of an ADC upgrade job
You can now download a consolidated diff report of an ADC upgrade job. This report contains the differences between the outputs of the pre-upgrade and post-upgrade script. So, you can determine what changes occurred on the ADC instance post upgrade.
Note: The diff report is generated only if you specify the same script in the pre-upgrade and post-upgrade stages. Therefore, ensure to select the Use same script as Pre-upgrade option in the post-upgrade stages.
You can download the following types of diff reports:
[ NSADM-50200 ]
- Pre vs Post upgrade pre failover diff report
- Pre vs Post upgrade diff report
Clean up the ADC disk space at the time of upgrade
Before you upgrade an ADC instance from ADM, you can now check and clean up the ADC disk space if needed. Earlier, you were able to clean up the disk space only from the ADC instance. For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/networks/configuration-jobs/how-to-upgrade-netscaler-instances.html[ NSADM-45762 ]
Service graph - View services key metrics
In service graph, you can now use the tabular view to see:
- Key metrics for the service
- Key metrics between a source service to a destination service
As an administrator, using these key metrics, you can analyze the trends of golden signals for the selected time duration.[ NSADM-65163 ]
Service graph - Use the Poll Now option to get the pod status
In service graph, you can now use the Poll Now option to get the latest pod status. The Poll Now option fetches the latest pod status from the cluster.
[ NSADM-62963 ]
- Click a node and select View Details
- In the Pods tab, click Poll Now
Bot insight - View bot categories for mobile (Android) applications
In Bot insight, you can now view the following bot categories that are detected through a mobile network:
[ NSADM-57724 ]
- Web Client Rate Limit
- Android Rate Limit
- Web Client Device
- Android Device
Application CPU usage to calculate app score
As an administrator, you can now monitor the CPU utilized by an application. You can also configure thresholds for the app CPU usage to determine the final app score. The Configure App Score page enables you to select the App CPU Usage and configure the low and high threshold values.[ NSADM-57468 ]
HDX insight Search using city name
In HDX insight, you can now filter results based on the city name.[ NSADM-57366 ]
App security violations - Visualize applications with security insight and bot insight details
In Analytics > Security > Security Violations, you can now visualize applications with full visibility into the threat details associated in both security insight and bot insight. The Security Violations page now has All Violations and Application Overview options.
- All Violations Displays the application security violation details. For more information, see View application security violation details.
[ NSADM-57174 ]
- Application Overview Displays an overview with information such as total violations, total WAF and Bot violations, top applications, violation by country, and so on.
Service graph View all associated backend pod details
In service graph, when you hover the mouse pointer on a service, you can now view total pods associated with each service.[ NSADM-47395 ]
Change the StyleBook of multiple configuration packs at once
You can now change the StyleBook of multiple configuration packs at once.
When you want to replace an existing StyleBook with a new one, you have to change the existing StyleBook for the associated configuration packs. In such cases, you can use this feature to change the StyleBook. Earlier, you had to select each configuration packs one by one to change their StyleBook.
Note: Ensure to select the configuration packs that are associated with the same StyleBook. Otherwise, the Change StyleBook option becomes unavailable.
For the selected configuration packs, ADM successfully changes the StyleBook when the following conditions are met:
- All the configuration parameters of the existing StyleBook must be present in the selected StyleBook.
- The new parameters from the selected StyleBook are optional.
To see the progress of the selected configuration packs, select Configurations in Progress/Failed in the Configurations page.[ NSADM-57941 ]
Improvements to infrastructure analytics
In Infrastructure Analytics, utilities and thematic improvements are added to UI that improves the user experience[ NSADM-57697 ]
Switch tabs of an existing configuration job
When you edit an existing configuration job, you can now switch to any tab. For example, if you are in the Select Configuration tab, you can switch to the Job Preview tab. Earlier, you were able to go only linearly to the next tab. For example, from the Select Configuration tab, you were only able to go to the Select Instances tab. For more information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/current-release/networks/configuration-jobs/how-to-upgrade-netscaler-instances.html[ NSADM-42944 ]
After upgrading Citrix ADM to 13.0 71.40, the app score for many applications display as NA.[ NSHELP-25989 ]
In Analytics > Gateway Insight > Gateways, the Gateways count displayed under Gateways is incorrect.[ NSHELP-25729 ]
In Infrastructure Analytics, when you click an instance, the key metrics (Throughput, HTTPS Requests/sec, TCP connections, and SSL transactions/sec) are displayed as zero.[ NSHELP-25559 ]
Management and Monitoring
In an ADM high-availability pair, the ADM database fails to synchronize between primary and secondary server.[ NSHELP-26544 ]
When you remove an ADC instance from ADM and if the instance belongs to a group, the applications associated with the instance are not deleted from the group settings.[ NSHELP-26248 ]
While you add an ADC instance in ADM, if you select SNMP v2 as the Citrix ADC profile, the ADM IP address is added as the SNMP manager.[ NSHELP-26245 ]
Sometimes, the ADM GUI becomes unresponsive and the ADM fails to authenticate the external servers.[ NSHELP-26168 ]
When you repackage an SDX backup file to restore the SDX instance, using ADM GUI, temporary folders are created in the /var/mps/ns_image directory. The folders do not get deleted even after the repackage process is complete.[ NSHELP-26158 ]
While restoring an SDX instance, using ADM, the partitions of the VPX instances that run on the SDX and their corresponding user group configurations are removed from ADM.[ NSHELP-26093 ]
In System > User Administration > Sessions, the user's sessions are not displayed for super administrators.[ NSHELP-26049 ]
You cannot remove a Citrix ADC SDX instance from Citrix ADM if the instance is configured as an FQDN and contains a hyphen ("-") in the name.[ NSHELP-26022 ]
The LDAP server fetching attributes fail, if security type selected is TLS/SSL.[ NSHELP-26018 ]
Citrix ADM displays an error message, when you add or edit the group in System > User Administrator > Groups with large number of applications.[ NSHELP-25907 ]
When you create or edit an email distribution list, the "Invalid email address" error appears after entering the email address.[ NSHELP-25905 ]
In the ADM GUI (Networks > Instances > Citrix ADC), the Dashboard view of an ADC instance incorrectly displays the total memory allocated to its partitions.[ NSHELP-25781 ]
For non-admin users, GSLB Services data takes more than a minute to appear under Networks >Network Functions >GSLB in the ADM GUI.[ NSHELP-25740 ]
In the User Administration page, ADM fails to validate regular expressions for applications in Group Authorization Settings.[ NSHELP-25739 ]
When you try to repackage a Citrix ADC SDX backup, ADC base image is not selected if exact ADC version base image is missing.[ NSHELP-25736 ]
You receive email notifications on license pool thresholds, even when it is not configured.[ NSHELP-25723 ]
When you upload an SSL certificate or key from the SSL dashboard in the ADM GUI, the upload intermittently fails with no error message.[ NSHELP-25722 ]
Memory consumption of an ADM primary node crosses 80% because of the ADM high-availability monitoring process "mas_hb_monit".[ NSHELP-22071 ]
In on-premises Honeycomb deployment, the monitor attached to SNMP, SNMP_Get, and Syslog services is incorrect.
Note: Before you upgrade your Honeycomb deployment, ensure to clean the API gateway configuration.[ NSADM-68186 ]
When you select Record and Play under Configuration Source in Networks > Configuration Jobs > Create Job, the following error message appears:
Unable to get config diff for: <instance IP>[ NSADM-63986 ]
If you configure a DNS name for the ADC license server, the Networks > Licenses page does not display pooled licenses.[ NSHELP-26159 ]
ADM intermittently sends email notifications for license pool threshold breach even if it is not configured.[ NSHELP-25586 ]
In the StyleBook configuration pack, when you update a system file, ADM fails to update or import it.[ NSADM-65691 ]
When you a create a job in Networks > Configuration Jobs and select the Execution Frequency as specific day of a week or date of a month, the scheduled job does not run according to the specified time.[ NSHELP-26034 ]
In System > User Administration, the group count takes longer time to appear than usual.[ NSHELP-25677 ]
In Analytics > Gateway Insight > Gateways > [selected VPN gateway], the Number of Users in the User Logon Activity graph table is changed to Number of logins.[ NSHELP-25666 ]
An idle ADM user session does not time out even after exceeding the set timeout period.[ NSHELP-25548 ]
The scheduled reports incorrectly display the HDX users summary as zero.[ NSHELP-25197 ]
Management and Monitoring
ADM fails to register or update without a DNS server, when a proxy server is enabled and the agent fails to get its IP address.[ NSHELP-25835 ]
The ADM GUI displays the removed cluster node if the following conditions are met:
- The cluster node is removed manually.
- The cluster is rediscovered in ADM.
Workaround: Remove the whole cluster in ADM and add it again.[ NSADM-61445 ]
- When you create a member on OpenStack Lbaas using ADM orchestration, the member creation fails on OpenStack intermittently. This issue happens when a proxy request from ADM to orchestration services times out after 30 seconds.
With this fix, the request timeout for orchestration APIs has increased to 120 seconds.[ NSHELP-21490 ]
- If you are using OpenStack Queens for LBaas workflow, the Load Balancing virtual server is not bound to Content Switching virtual server. This issue impacts the traffic.
1. Create a pool with Load Balancing virtual server.
2. Create a listener with the pool ID.
If you already have a listener, update the listener with the pool ID.[ NSADM-36631 ]