Product Documentation

Enable data collection for NetScaler Gateway appliances deployed in single-hop mode

May 24, 2018

When NetScaler Gateway is deployed in single-hop mode, the NetScaler Gateway is at the edge of the network and proxies ICA connections to the desktop delivery infrastructure. This is the simplest and most common deployment. This mode provides security if an external user tries to access the internal network in an organization.
In single-hop mode, users access the NetScaler appliances through a virtual private network (VPN).
To start collecting the reports, you must add the NetScaler Gateway appliance to the NetScaler MAS inventory and enable AppFlow on NetScaler MAS.
Figure 2. NetScaler MAS deployed in single-hop mode

localized image

To enable the AppFlow feature from NetScaler MAS

1.       In a web browser, type the IP address of the NetScaler Management and Analytics System (for example,

2.       In User Name and Password, enter the administrator credentials.

3.       Navigate to Infrastructure > Instances, and select the NetScaler instance you want to enable analytics.

4.       From the Action drop-down, select Enable/Disable Insight.

5.       Select the VPN virtual servers, and click Enable AppFlow.

6.       In the Enable AppFlow field, type true, and select ICA.

7.       Click OK.

localized image

Note: The following commands are executed in the background when you enable AppFlow in single-hop mode. These commands are explicitly specified here for troubleshooting purposes.

  • add appflow collector <name> -IPAddress <ip_addr>
  • add appflow action <name> -collectors <string>
  • set appflow param -flowRecordInterval <secs>
  • disable ns feature AppFlow
  • enable ns feature AppFlow
  • add appflow policy <name> <rule> <expression>
  • set appflow policy <name> -rule <expression>
  • bind vpn vserver <vsname> -policy <string> -type <type> -priority <positive_integer>
  • set vpn vserver <name> -appflowLog ENABLED
  • save ns config