Release Notes for Build 51.24 of NetScaler MAS 12.0 Release

Updated: July 19, 2017 | Release notes version: 1.0
This release notes document describes the enhancements and changes, lists the issues that are fixed, and specifies the issues that exist, for the NetScaler MAS release 12.0 Build 51.24. See Release history.
Notes:
What's New?
The enhancements and changes that are available in Build 51.24.
Analytics
  • AppFlow Transportation Modes
    Note: This feature is currently available in Beta.
    You can now set the AppFlow transportation mode to IPFIX or Logstream. To specify the transportation mode for the discovered NetScaler instances:
    1. From the action drop-down, select Enable/Disable Insight.
    2. Select the virtual servers for which to enable AppFlow.
    3. Click Enable AppFlow.
    4. In the Enable Insight window, set the transport mode to IPFIX or Logstream.
    [# 677938, 649177]
  • Support for NetScaler Secure Web Gateway Analytics
    You can now integrate NetScaler Secure Web Gateway (SWG) log data into the NetScaler Management and Analytic System (MAS). The NetScaler SWG appliance exports its logged user activity and the subsequent records to NetScaler MAS by using logstream. NetScaler MAS then collates and presents information about the activities of users (for example, websites visited and time spent on line). It also reports bandwidth use and detected threats, such as malware and phishing sites. You can use these key metrics to monitor your network and take corrective actions with the NetScaler SWG appliance.
    [# 606272]
Application Analytics and Management
  • Application Health Dashboard
    Note: This feature is currently available in Beta.
    The health score is the product of a scoring system that defines how well an application is performing. It shows whether the application is performing well in terms of responsiveness, is not vulnerable to threats, and has all systems up and running. Health Score is displayed at the application level. Calculation of the score is based on the following three key components, which defines Health Score:
    - APP Performance (APDEX score of the application)
    Derived from the response time variation of the application.
    - App Server Resource
    This value is derived from three more components:
    > Average CPU Usage
    > Memory Usage
    > NIC Card Saturation
    - NetScaler System Resource
    This value is derived from two more components:
    > Percentage of Active Services
    > Surge Queue Requests
    For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/application-analytics-and-management/application-security-analytics.html.
    [# 674073]
Networks
  • Licensing the non-addressable virtual servers
    When system licensing in NetScaler MAS is set to automatically select virtual servers, the licensing feature no longer licenses non-addressable virtual servers. However, you can manually license these virtual servers as follows:
    1. Navigate to Network > Licenses > System Licenses.
    2. Disable Auto-select Virtual Servers, and click Select Virtual Servers.
    3. Select the available virtual servers from the menu.
    4. Click Finish.
    [# 681152]
  • Option to save or not save the configuration changes while enabling or disabling the entities.
    You can now choose to save the configuration changes in NetScaler instances when you are enabling and disabling the Virtual servers, services, service groups, and application servers from NetScaler MAS. In NetScaler MAS, navigate to Networks > Network functions > Load Balancing. Select the required entities and choose Save Configuration when prompted for when you enable or disable the instances.
    [# 680815]
  • Auto selection and Manual selection of virtual servers for licensing
    You can now select the virtual servers to be managed by the NetScaler MAS. Earlier, even after you explicitly select the virtual servers to be managed, with the next polling cycle, NetScaler MAS randomly manages more virtual servers if managed virtual servers are less than the licensed limit.
    To enable manual selection of virtual servers for licensing
    1. Navigate to Networks > Licenses > System Licenses.
    2. Disable the Auto Select Virtual-Servers.
    3. Click Select Virtual Servers field. You will be navigated to Choose Virtual Server page.
    4. Select the virtual servers from the available list.
    5. Click Save and Exit.
    To enable auto selection of virtual servers for licensing
    1. Navigate to Networks > Licenses > System Licenses.
    2. Enable the Auto Select Virtual-Servers.
    [# 679005]
  • Audit Templates created in Configuration Audit module are now available in Configuration Jobs module
    You can create audit templates in Configuration Audit module in NetScaler MAS to make sure that certain configurations exist on your NetScaler instances and to check the instances regularly for any deviation. NetScaler MAS allows you to save this template in the system so that the audit template is available in Configuration Jobs module also. Now the audit templates can be used to create configuration jobs. This allows the audit templates to be used interchangeably between configuration jobs and configuration audits.
    For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/configuration-management/how-to-reuse-configuration-audit-templates-in-configuration-jobs.html
    [# 664123]
  • Last State change for entities in NetScaler MAS
    You can view the state changes along with the duration of the change for virtual servers, services, service groups, and servers under the Networks > Network functions in NetScaler MAS. To view the state change, navigate to Networks > Network Functions, and you can see the details under the Last State Change coloumn of the selected entity.
    [# 680896, 678122]
  • New Event Rules Filters
    You can now filter event rules by Device Family filter to track the NetScaler instance from which NetScaler MAS receives an event.
    You can also add a configuration command as a filter in an event rule, and the rule can include the command's authentication status and/or its execution status.
    You can also filter your events by messages. You can specify the complete message, or you can use the wildcard character (*) for parts of the message.
    For more information, see https://docs.citrix.com/en-us/netscaler-mas/12/event-management/create-event-rule-mas.html.
    [# 679110]
Orchestration
  • Creating basic load balancing configuration from VMware NSX Manager GUI
    The VMware NSX Manager GUI now supports StyleBooks. With this enhancement, you can create the complete load balancing configuration from this GUI. NetScaler MAS uses built-in stylebooks to deploy the load balancing configuration. Previously, you had to deploy StyleBooks in NetScaler MAS in order to deploy load balancing configurations or applications on NetScaler.
    Do the following to enable configuration of load balancing from the VMware NSX Manager GUI:
    1. Open the /mps/stylebooks/scripts/shipped_stylebooks_list.sh file in NetScaler MAS.
    2. Edit the file.
    3. Add the following two StyleBooks to the end of the StyleBooks list in shipped_stylebooks_list.sh.
    a. nsx-root-params
    b. nsx-lb-mon
    4. Restart NetScaler MAS services by entering the masd restart command.
    [# 687279]
StyleBooks
  • Prompt users for instance credentials when creating configpacks
    A new option has been added to NetScaler MAS that when enabled, requires you to provide your credentials that you use to login to the NetScaler instances during the creation or update of a configpack. If this option is not enabled, NetScaler MAS would always use the user credentials stored in the device profile when connecting to the NetScaler for creating or updating a configpack.
    [# 681706]
System
  • Instance Backup Settings
    You can now configure NetScaler MAS to create automatic backup files of NetScaler instances in the network at a specific time (hour and minute). This is in addition to the backups created at a specified interval. Additional updates to instance backup settings are the following:
    . You now have the option to disable the creation of device backups by NetScaler MAS. #683315
    . Because of the large size of Geo database files, you now have the option to selectively include or exclude them in the backup files. # 683833
    . You can now transfer the NetScaler instance backup files to an external location by specifying the IP address of the external storage device. # 680907
    . NetScaler MAS can now reexecute the task of backing up an instance once every 30 seconds. # 680795
    . NetScaler MAS can now send an SNMP trap or a Syslog notification when it is unable to create a backup file for the selected NetScaler instance. # 683832
    . NetScaler MAS can now create a backup file whenever a NetScaler instance sends a NetScalerConfigSave trap to NetScaler MAS. # 678285
    . You can retain up to 50 backup files of the current state of a NetScaler instance. The default is three backup files. # 672123
    For more information, see http://docs.citrix.com/en-us/netscaler-mas/12/instance-management/how-to-backup-and-restore-using-mas.html
    [# 675654]
  • NetScaler MAS High Availability Active-Passive deployment
    A high availability deployment (HA) of NetScaler MAS servers now deploys two servers in an active-passive HA mode. One NetScaler MAS server is deployed as the active node and the other as the passive node. Both servers have the same configuration. If, for any reason, the active node goes down, the passive node takes over (a process called failover). This deployment type is ideal for disaster recovery.
    If you are upgrading your NetScaler MAS HA setup from a previous build to this build, make a note of the following before you begin upgrading your setup:
    * The NetScaler MAS active-passive HA deployment mode is supported from NetScaler MAS version 12.0 build 51.24.
    * The upgrade process changes the active-active HA setup to an active-passive HA setup.
    * As part of the upgrade process, all configurations are updated such that all NetScaler instances are now managed by the active node. This is applicable to all configurations such as SNMP, Syslog, Analytics, and so on.
    * After you upgrade the NetScaler MAS to active-passive mode, some NetScaler instances will still continue to send traffic to the passive node for approximately 5 minutes. As a result, the incoming traffic will be lost for that duration.
    * If you had configured a load balancing virtual server for unified management access of your NetScaler MAS servers, after you upgrade the NetScaler MAS HA pair to active-passive mode you have to run the following command on the NetScaler appliance to update the load balancing configuration:
    add lb monitor MAS_Monitor TCP-ECV -send "GET /mas_health HTTP/1.1\r\nAccept-Encoding: identity\r\nUser-Agent:NetScaler-Monitor\r\nConnection: close\r\n\r\n"" -recv "{"statuscode":0,"is_passive":0}" -LRTM DISABLED
    [# 688767]
Fixed Issues
The issues that are addressed in Build 51.24.
Analytics
  • The Video Insight metrics might be incorrect if they represent both encrypted and unencrypted video traffic.
    [# 683205]
Networks
  • When you generate PDF reports of Config Jobs that were run on NetScaler MAS, the order of execution of commands in the generated reports might be incorrect, although the order of execution on the NetScaler instances was correct, in accordance with the configuration template definition.
    [# 686963]
  • In GeoMap datacenter, even if the total number of events is shown as 0, if we click on it, correct values are displayed.
    [# 686638]
  • When a NetScaler SDX is added from SVM, you need to select the required NetScaler VPX profile from the drop-down list and provide the NetScaler VPX instance password.
    1. If the password for the NetScaler VPX profile is provided incorrectly, the NetScaler VPX instance state is displayed as "Out of Service."
    2. If the password for the NetScaler VPX profile is provided correctly, the NetScaler VPX instance state is displayed as "Up."
    [# 678291]
System
  • In NetScaler MAS, while creating the system groups, the session timeout value is displayed as -1 which is an invalid value (System > User Administration > Groups > Create System Groups).
    [# 684947]
  • A high availability deployment (HA) of NetScaler MAS servers now deploys two servers in an active-passive HA mode. One NetScaler MAS server is deployed as the active node and the other as the passive node. Both servers have the same configuration. If, for any reason, the active node goes down, the passive node takes over (a process called failover). This deployment type is ideal for disaster recovery.
    If you are upgrading your NetScaler MAS HA setup from a previous build to this build, make a note of the following before you begin upgrading your setup:
    * The NetScaler MAS active-passive HA deployment mode is supported from NetScaler MAS version 12.0 build 51.24.
    * The upgrade process changes the active-active HA setup to an active-passive HA setup.
    * As part of the upgrade process, all configurations are updated such that all NetScaler instances are now managed by the active node. This is applicable to all configurations such as SNMP, Syslog, Analytics, and so on.
    * After you upgrade the NetScaler MAS to active-passive mode, some NetScaler instances will still continue to send traffic to the passive node for approximately 5 minutes. As a result, the incoming traffic will be lost for that duration.
    * If you had configured a load balancing virtual server for unified management access of your NetScaler MAS servers, after you upgrade the NetScaler MAS HA pair to active-passive mode you have to run the following command on the NetScaler appliance to update the load balancing configuration:
    add lb monitor MAS_Monitor TCP-ECV -send "GET /mas_health HTTP/1.1\r\nAccept-Encoding: identity\r\nUser-Agent:NetScaler-Monitor\r\nConnection: close\r\n\r\n"" -recv "{"statuscode":0,"is_passive":0}" -LRTM DISABLED
    [# 681126, 681117, 682818]
Known Issues
The issues that exist in Build 51.24.
Analytics
  • When exporting reports from Web insight, OS and Agent export reports are captured with extra one blank page on top. Also, export reports do not display Analytics > Web Insight > Request Methods > HTTP Request methods > GET.
    [# 682526]
  • Using the NetScaler MAS GUI, you cannot enable the Video Insight feature.
    Workaround: To enable Video Insight on NetScaler MAS, see http://docs.citrix.com/en-us/netscaler-mas/12/analytics/video-insight.html.
    [# 681681, 683301]
  • In SSL Insight, under the SSL Cipher Negotiated section, all the negotiated SSL ciphers are displayed as NA.
    [# 682828]
  • When a NetScaler instance is upgraded to 11.1 from 11.0 or below, and AppFlow is enabled on any of the virtual servers configured on that instance, NetScaler MAS does not add Logstream configuration. Also, this ensures that, any NetScaler instance upgraded from 11.0 to 11.1 sends logs in IPFIX format.
    [# 683542]
Application Analytics and Management
  • On the App Security Dashboard, under Safety index page, Signature config and System Check config values are not displayed correctly.
    [# 679505]
  • On the NetScaler MAS App dashboard, filtering applications through threat indexes is not working intermittently.
    [# 682303]
Director
  • In NetScaler MAS - Desktop Director integrated setup, when you navigate to Network > NetScaler MAS HDX Insight you should be able to access the screen. But because of some session related error, you might not be able to access the page.
    [# 683251]
Networks
  • When you click Repackage Backup and enter a wrong password for a NetScaler SDX backup file on NetScaler MAS, no error message is displayed.
    [# 670546]
  • In Network functions, the "Last State Change" column in some places is displayed as "Up Since".
    [# 690129]
Orchestration
  • For NetScaler MAS integration with OpenStack Heat, allotment of the NetScaler instances is based on tenants, not on placement policies. You must create a service package for OpenStack Heat by assigning tenants.
    [# 666906]
Release history
For details of a specific release, see the corresponding release notes.

© 1999-2017 Citrix Systems, Inc. All rights reserved. | Terms of use.
Useful links

On this page

What's New? (13)
Fixed Issues (6)
Known Issues (10)