Release Notes for Build 41.16 of NetScaler MAS 12.0 Release

Updated: April 28, 2017 | Release notes version: 1.0
This release notes document describes the enhancements and changes and specifies the issues that exist, for the NetScaler MAS release 12.0 Build 41.16.
What's New?
The enhancements and changes that are available in Build 41.16.
  • SSL Insight Error Handling
    Note: This feature is currently available in Beta.
    You can now view the information about the failed SSL handshake transactions (SSL frontend and SSL backend) on the SSL insight GUI in NetScaler MAS.
    To monitor SSL Insight Metrics in NetScaler MAS
    1. On the Analytics tab, navigate to Web Insight and click the Client, Server, or Application node to display the metrics about clients, the server, or the applications, respectively.
    2. In the top-left pane, from the drop-down list, select the time frame whose metrics you want to display. You can customize the time frame by using the time-frame slider. Click Go.
    3. The SSL Insight metrics appear as pie charts, which you can click for more details.
    4. To display details for a specific application, client, or server, click the corresponding value on the bar graph.
    5. To View the Failed SSL transactions, on the SSL section, select the radio button on the SSL section.
    For more information, see
    [# 672462]
  • User Agent Reporting in HDX Insight
    You can now view the user agents for all the sessions in HDX Insight. Navigate to Analytics > HDX Insight > Users, where the Users table shows the User Agent for each available user name in the selected timeframe.
    For more information, see
    [# 554709]
  • Security Insight Enhancements
    On the App Security dashboard, you can now view the syn attacks, small window attacks, and DNS flood attacks for the discovered NetScaler instances. To display the attack details, Navigate to Applications > App Security Dashboard.
    For more information, see
    [# 670167]
  • AppFlow Transportation Modes
    Note: This feature is currently available in Beta.
    You can now select the AppFlow transportation mode to IPFIX or Logstream. To select the transportation mode for the discovered NetScaler instances,
    1. From the action drop-down, select Enable/Disable Insight.
    2. Select the virtual servers that you need to enable AppFlow.
    3. Click Enable AppFlow.
    4. From the Enable Insight window, select the transport mode to IPFIX or Logstream.
    For more information, see
    [# 677938, 649177]
  • Video Insight
    Video Insight provides an easy and scalable solution for monitoring the metrics of the video optimization techniques used on NetScaler appliances. The metrics can help you optimize these techniques to provide benefits such as the following, with no increase in video start times:
    - Significant ABR bandwidth reduction
    - Increase in total number of minutes for which videos are watched
    - Increase in average viewing time
    - Reduction in number of very short duration video plays (Aborted connected attempts).
    For more information, see
    [# 631831]
  • Ability to Find Users Connected to a Geo Location
    You can now view the historical and active users' details from the geo location maps in HDX Insight. Navigate to Analytics > HDX Insight, and in the World section of the map, click the country or region for which you want to see the details. You can further drill down to view information by city and state.
    For more information, see
    [# 620992]
Application Analytics and Management
  • Live and Historical Reporting for Virtual servers on NetScaler MAS
    Note: This feature is currently available in Beta.
    You can now view historical and live reporting data for all the virtual servers. You can select the reports to display the data collected during the past one month, one day, one hour, or one week.
    To display the reports
    1. On the App Dashboard, click on the application tile, and select the virtual server from the app info panel.
    2. From the Action drop-down list, select Statistics. You can view reports on Transactions, Connections, or Throughput for the selected virtual servers.
    On the NetScaler MAS Application Dashboard, all the licensed virtual servers are now displayed as applications. You can also define custom applications with one or more virtual servers. You can also compare the reports for two or more virtual servers across different instances in a defined application.
    For more information, see
    [# 654174]
  • View Statistics for Virtual Servers and Services on NetScaler MAS
    Note: This feature is currently available in Beta.
    You can now view the statistics of entities such as virtual servers and services on NetScaler MAS.
    To view the statistics of the virtual servers or services
    1. On the App Dashboard, click on the application tile.
    2. From the App info panel, select the Virtual Server or Service.
    3. For Virtual Servers, from the Action drop-down, select Statistics.
    4. For Services, select Statistics.
    For more information, see
    [# 656473]
  • Application Security Dashboard
    Note: This feature is currently available in Beta.
    The App Security Dashboard provides a holistic view of the security status of your applications. For example, it shows security violations and signature violations. To display the security details of a NetScaler instances, navigate to Applications > App Security Dashboard, and select the instance IP address from the Devices drop-down list.
    For more information, see
    [# 673751]
  • Searchable Dashboard for Application Triaging
    Note: This feature is currently available in Beta.
    The Application Dashboard provides a holistic view of all the applications monitored by NetScaler MAS and provides key information related to all the applications.
    For example, the dashboard displays performance and security metrics, counters, and the health status of the applications. To display information about a particular application, select the application tile.
    In the Summary panel, bar graphs show metrics, such as health score and threat indexes, for all monitored applications.
    On the Application Dashboard, you can
    - View your applications.
    - View the health scores of applications.
    - Define applications.
    - View statistics in the App Summary Panel.
    For more information, see
    [# 670486]
  • Application Health Dashboard
    Note: This feature is currently available in Beta.
    The health score is the product of a scoring system that defines how well an application is performing. It shows whether the application is performing well in terms of responsiveness, is not vulnerable to threats, and has all systems up and running. Health Score is displayed at the application level. Calculation of the score is based on the following three key components, which are averaged to define Health Score:
    - Performance Score (APDEX score of the application)
    Derived from the response time variation of the application.
    - Server Resource
    This value is derived from three more components:
    > Average CPU Usage
    > Memory Usage
    > NIC Card Saturation
    - NetScaler Instance Resource
    This value is derived from two more components:
    > Percentage of Active Services
    > Surge Queue Requests
    For more information, see
    [# 674073]
  • Advanced Analytics
    Note: This feature is currently available in Beta.
    The Advanced Analytics feature of the NetScaler Management and Analytics System (NetScaler MAS) provides an easy and scalable solution for monitoring and troubleshooting applications that are delivered through NetScaler ADC and NetScaler Gateway appliances.
    Advanced Analytics not only monitors all the levels of application transactions, but also uses machine learning techniques to define normal traffic patterns in your network and detect anomalies. This reduces the overall turnaround time and improves the overall application uptime.
    In a typical deployment, thousands of servers cater to the data needs of the users. The traffic sent to these servers is load balanced and monitored by virtual servers configured on NetScaler appliances. Each virtual server is bound to multiple services representing the backend servers. In such deployments, the Advanced Analytics feature helps you monitor, manage, and make decisions during outages and other events. This feature monitors the virtual servers and services configured for an application and displays critical information about them, so that you can change the configurations as required to achieve optimum performance by the applications.
    For more information, see
    [# 655818]
  • Role based Access Based on Application Name Defined on a Dynamic Filter
    When including individual applications in application RBA settings, you can use wildcard support so that you are not required to add or update the applications individually.
    For more information, see
    [# 654136]
  • Server Errors
    Note: This feature is currently available in Beta.
    With Advanced Analytics, you can now view the server error codes for all the server error events, and take corrective actions to overcome server issues so that client requests are served and web pages are always available.
    To view the the server errors
    1. On the App Dashboard, double-click the application tile of the application for which you want to view the server errors.
    2. In the App Activity Investigator section, select the error legend plotted for Server Error-5XX on the graph.
    3. The Server Error-5xx section displays details such as the time of the transaction, requested URL, and server error status (5xx error code), along with the other details such as total bytes and response time.
    For more information, see
    [# 670872]
  • NetScaler MAS Licensing Changes
    You can manage and monitor any number of instances and entities without a license. However, you can only manage 30 discovered apps on the App dashboard and view analytics data for only 30 virtual servers without applying a license. To manage more than 30 discovered apps or to view analytics for more than 30 virtual servers, you must purchase and apply licenses.
    For more information, see
    [# 673106]
  • Use NetScaler MAS to Export Syslog Messages
    NetScaler MAS, by scheduling exports of all syslog messages that the NetScaler MAS server has received from your NetScaler instances. You can export the messages in PDF, CSV, PNG, and JPEG formats. You can schedule the exports to occur at various intervals and be sent to specified email addresses.
    For more information, see
    [# 655109]
  • Specify User Credentials while Configuring Jobs on NetScaler MAS
    When the Specify User Credentials for this Job option is enabled, the job is executed using credentials that the administrator has provided explicitly for the job and not by the NetScaler instance's profile credentials.
    For more information, see
    [# 654141]
  • Change in Data Centers Feature Name
    The Data Centers feature of NetScaler MAS is now called Sites.
    [# 680732]
  • Using Networking Reports and Thresholds to Monitor Instance Performance on NetScaler MAS
    The following are the Performance Reporting Improvements made on NetScaler MAS:
    NetScaler MAS uses threshold functionality to generate performance reports about all of your managed instances. You can generate the following new performance reports after navigating to Networks > Network Reports > NetScaler/ NetScaler SD-WAN-WO:
    - Content Switching
    - Global Sever Load Balancing
    - Cache Redirection
    - SSL VPN
    - Authentication
    - SSL Traffic Rate
    Before you run reports, you must ensure that performance counters are enabled for polling. NetScaler MAS monitors the health of an instance by polling the performance counters of your instance. You can configure the polling interval by navigating to Networks > Network Reporting > Settings > Configure Polling Interval for Reporting. Your polling interval cannot be less than 15 minutes or exceed 60 minutes.
    You can set thresholds for monitoring the state of a discovered instance. You can set a rule and specify threshold values for a specific counter to monitor instances. You can also set email or SMS notification alerts.
    You can also export your performance report to a file in PDF, JPEG, PNG, or CSV format, or you can schedule the report to be sent to an email distribution list at a specific time and interval.
    For more information, see
    [# 659098, 609157]
  • View Audit Trails for SSL Certificates on NetScaler MAS
    NetScaler MAS can display log details about the following types of operations on SSL certificates:
    - Installing SSL certificates
    - Linking and unlinking SSL certificates
    - Updating SSL certificates
    - Deleting SSL certificates
    To display an audit log for a particular SSL certificate operation, navigate to Networks > SSL Dashboard > Audit Trails. You can view the status, start time, and end time of the operation. You can view the instance on which the operation was performed and the commands executed on that instance.
    For more information, see
    [# 653166]
  • Support for SNMP Version 3 Traps on NetScaler MAS for NetScaler Instances
    NetScaler MAS now receives and processes SNMP v3 traps sent from its managed NetScaler instances. SNMP v3 provides security capabilities such as authentication and encryption by using the credentials of SNMP users.
    For more information, see
    [# 621877]
  • Custom Email Settings in Event Rules
    You can now add a customised subject line and user message, and upload an attachment to your email when you choose to send an email notification when an incoming event matches the configured rule.
    For more information, see
    [# 679107]
  • View NetScaler SNMP Trap Details in NetScaler MAS
    The NetScaler MAS Event Settings page now shows the details of each SNMP trap that the NetScaler MAS server has received from NetScaler instances. For a specific trap received from your instance, you can view the following details in tabular format:
    * Category - Category of the instance to which the event belongs
    * Severity - Severity of the event, indicated by the color green, amber, or red
    * Description - Messages associated with the event
    [# 654132]
  • Change in Infrastructure Module Name
    The Infrastructure module on NetScaler MAS is now called Networks.
    [# 671639]
  • Support for New Event Actions on NetScaler MAS
    You can assign two new actions to your configured event rules: Run Command Action and Execute Job Action.
    You can run a command or execute a job when an incoming event matches the configured rule. For example, you can run a command script or execute a job using configuration templates to resolve the issue when a configuration change on a managed instance raises an event of "Critical" severity.
    For more information, see
    [# 621870]
  • Audit Log Enhancements on NetScaler MAS
    Audit logs are generated and stored centrally in the NetScaler MAS server's database for all the changes you make on the NetScaler instances through NetScaler MAS. These logs can be filtered by module, event type, severity, and so on. To display the Audit Logs, navigate to System > Auditing. On the Auditing page, under Audit Messages, select Syslog Messages. You can then choose the filters that you want to apply to the system log messages.
    For more information, see
    [# 645109]
  • Use the "Master Configuration" Template while Configuring Jobs on NetScaler MAS
    To replicate your NetScaler instance's complete configuration on a set of other NetScaler instances, you can now use the built-in Master Configuration template to create a configuration job. This template takes care of replicating the NetScaler configuration that's defined in the ns.conf file. You can customize the job by adding commands to support situations in which you might want to upload other input files, such as certificate files, license files, and so on.
    For more information, see
    [# 664124]
  • Suppress Event Action for a Specific Time Period
    You can use the Suppress Action event action to configure a time period, in minutes, for which an event is suppressed. You can suppress the event for a minimum of 1 minute.
    For more information, see
    [# 679108]
  • New Event Rules Filters
    You can now filter event rules by Device Family filter to track the NetScaler instance from which NetScaler MAS receives an event.
    You can also add a configuration command as a filter in an event rule, and the rule can include the command's authentication status and/or its execution status.
    You can also filter your events by messages. You can specify the complete message, or you can use the wildcard character (*) for parts of the message.
    For more information, see
    [# 679110]
  • Auto provisioning of NetScaler VPX Instances in High Availability in NSXEnvironment
    NetScaler VPX instances in high availability mode can be Auto provisioned in VMware NSX environment.
    For more information, see
    [# 632934]
  • Support for Managing and Monitoring HAProxy Instances
    NetScaler MAS now provides the following to manage and monitor HAProxy instances in your deployment:
    - HAProxy App Dashboard: NetScaler MAS includes an HAProxy App Dashboard that provides real-time statistics of the frontends on the HAProxy instances. The dashboard lists the front ends as discovered applications and shows real-time transactions, throughput, and session's information about the applications.
    - Ability to restart an HAProxy Instance: NetScaler MAS allows you to restart an HAProxy instance from the NetScaler MAS GUI. You can perform hard restart or soft restart an HAProxy instance from the NetScaler MAS GUI.
    - Backup and Restore an HAProxy Instance: NetScaler MAS allows you to backup an HAProxy instance and also allows you to restore an HAProxy instance from a backup.
    - Ability to edit the HAProxy configuration file: NetScaler MAS allows you to edit the HAProxy configuration file.
    For more information, see
    [# 648348]
  • Deploying NetScaler MAS in High Availability in NSX Environment
    NetScaler MAS servers that are deployed in high availability (HA) mode can now be integrated with VMware NSX Manager. Deploying NetScaler MAS in HA mode can provide uninterrupted operation in any transaction.
    For more information, see
    [# 632932]
  • New StyleBook to Deploy Microsoft SharePoint Application in Enterprise Networks
    The new Microsoft SharePoint 2016 StyleBook can be used to create the entire necessary NetScaler configuration to optimize and secure Microsoft SharePoint 2016 deployments in an enterprise network. Using this StyleBook, administrators can now deploy SharePoint application in their network which can utilize some of the NetScaler features such as content switching, load balancing, compression, integrated caching, responder, URL rewrite, and surge protection.
    For more information, see
    [# 667906]
  • Support for NetScaler MAS HA
    This release supports StyleBooks in NetScaler MAS high availability deployments. This allows client configuration requests to be load balanced among NetScaler MAS nodes for resiliency and higher scalability.
    [# 667904]
  • Deploying StyleBook on Multiple NetScaler Instances with Different Configuration Objects
    A StyleBook configuration (configpack) can now be deployed simultaneously on multiple NetScaler instances, each containing different configuration objects (asymmetric configuration). This feature is an extension of the "multiple instances" support that deploys an identical configuration simultaneously on multiple NetScaler instances (symmetric configuration). With the Device Roles feature, a StyleBook author can now target different components of the StyleBook to different roles. When creating a configuration from a StyleBook with device roles, a user can specify the different NetScaler instances to be used for each role. The appropriate configuration is then deployed by NetScaler MAS on each NetScaler instance, as appropriate for its role.
    [# 673686]
  • Support to Build More Powerful Expressions in StyleBooks
    Enhancements of the StyleBooks expression language facilitate building more powerful expressions. Following are some of the improvements:
    - Stronger type checking and inference
    - In-place interpolation syntax support
    - Simpler syntax for map substitutions
    - Addition of several built-in functions
    - Constructs to support nested repeats in components
    - Accessing objects through the index notation
    - Automatic dependency tracking and re-ordering between components.
    For more information, see
    [# 669825]
  • Support to Increase the Limit of Instance Backup Files Saved in NetScaler MAS
    The NetScaler MAS server can now retain up to 50 backup files of the current state of a NetScaler instance. By default, NetScaler MAS retains 3 backup files. To increase the limit, navigate to System > System Administration. Under Instance Settings on the System Administration page, click Instance Backup Settings. Enter the number of backup files you want to retain and click OK.
    For more information, see
    [# 672123]
  • NetScaler MAS Diagnostics and Troubleshooting
    NetScaler MAS Diagnostics and Troubleshooting enables you to diagnose the NetScaler instances with the problem associated to the virtual servers configured such as the state of the virtual servers, state of the services, AppFlow configuration.
    To diagnose a NetScaler instance
    1. Login to NetScaler MAS using administrator credentials.
    2. Navigate to System > Diagnostics > Troubleshooting.
    3. In the Select NetScaler field, select the NetScaler instance from the available instances, and click Select.
    For more information, see
    [# 652970]
  • Ability to Backup a NetScaler Instance when NetScalerConfigSave trap is Received on NetScaler MAS
    NetScaler MAS can now save a NetScaler instance's latest backup file when the instance sends a NetScalerConfigSave trap. To enable this feature, navigate to System > System Administration. Under Instance Settings on the System Administration page, click Instance Backup Settings. Under NetScaler Settings, select the "Do instance backup when NetScalerConfigSave trap is received" checkbox and click OK.
    For more information, see
    [# 678285]
  • Monitoring the Health of NetScaler MAS
    New alarms are available for monitoring the health of your NetScaler MAS server. The new alarms, for which you can set threshold limits, alarm severity, and a time interval, are: cpuUsageHigh, cpuUsageNormal, diskUtilizationHigh, diskUtilizationNormal, memoryUsageHigh, memoryUsageNormal. To configure an alarm, navigate to System > Alarms. Select the alarm you want to configure and click Edit to modify its settings.
    You can also set notifications to send you either an email or an SMS (Short Message Service) text when an alarm is triggered. You can set notifications by navigating to System > Notifications. Under Settings, click Change Notification Settings, choose how you would like to be notified (via email or SMS) for the categories you select, and click OK.
    For more information, see
    [# 654065]
  • Fine Grained Role based Access Control
    NetScaler MAS uses fine-grained, role based access control (RBAC) to provide controlled access to configuration objects. RBAC in NetScaler MAS uses access policies. An access policy is an object in which you define criteria for granting access to servers, applications, and other resources on your network. Access policies define the access granted to users and groups on the basis of their roles in the network.
    For more information, see
    [# 648670, 645508]
Known Issues
The issues that exist in Build 41.16.
  • For Cache Redirection(CR) feature, reporting of CR metrics under Web Insight (cache hits, cache miss, cache bypass) are removed. However, in a few places on the NetScaler MAS GUI, these metrics are displayed as 0.
    [# 682423]
  • When enabling/disabling insight on any NetScaler insight, Web Insight option will be displayed only if it is supported on the selected NetScaler instance. It should not be dependent on the version of NetScaler instance or transport mode.
    [# 683028]
  • When a NetScaler instance is upgraded to 11.1 from 11.0 or below, and AppFlow is enabled on any of the virtual servers configured on that instance, NetScaler MAS does not add Logstream configuration. Also, this ensures that, any NetScaler instance upgraded from 11.0 to 11.1 sends logs in IPFIX format.
    [# 683542]
  • Backend SSL Handshake failures are not mapped to NetScaler MAS, and these reports are not displayed on the MAS GUI.
    [# 679855]
  • While enabling/disabling insight on any NetScaler instances running on software version 11.1 and earlier, Logstream transport mode is displayed. This transport mode is supported only on NetScaler instances that are running on software version 12.0.
    [# 682980]
  • When exporting reports from Web insight, OS and Agent export reports are captured with extra one blank page on top. Also, export reports do not display Analytics > Web Insight > Request Methods > HTTP Request methods > GET.
    [# 682526]
  • While enabling advanced analytics from NetScaler MAS GUI, if there are no telemetry nodes attached to the NetScaler MAS server, an error is displayed.
    [# 682785, 682695]
Application Analytics and Management
  • on the App Security Dashboard, under Safety index page, Signature config and System Check config values are not displayed correctly.
    [# 679505]
  • On the NetScaler MAS App dashboard, filtering applications through threat indexes is not working intermittently.
    [# 682303]
  • In NetScaler MAS - Desktop Director integrated setup, when you navigate to Network > NetScaler MAS HDX Insight you should be able to access the screen. But because of some session related error, you might not be able to access the page.
    [# 683251]
High Availability
  • In a NetScaler MAS high availability setup, there is a delay in updating the application count after applying licenses. Applications are displayed after the next poll cycle (a fresh poll cycle is initiated every 30 minutes) or using the Poll Now option will fix the Application count.
    [# 681637]
  • In NetScaler MAS HA pair, managed devices are not distributed evenly between the NetScaler MAS servers intermittently.
    [# 683038]
  • Custom templates created while configuring a job are not displayed when you run the “Execute Job Action” event action while creating an event rule.
    [# 682585]
  • When you click Repackage Backup and enter a wrong password for a NetScaler SDX backup file on NetScaler MAS, no error message is displayed.
    [# 670546]
  • For NetScaler MAS integration with OpenStack Heat, allotment of the NetScaler instances is based on tenants, not on placement policies. You must create a service package for OpenStack Heat by assigning tenants.
    [# 666906]

© 1999-2017 Citrix Systems, Inc. All rights reserved. | Terms of use.
Useful links

On this page

What's New? (41)
Known Issues (15)