Viewing NetScaler SD-WAN Analytics Data for a Multi-Hop Deployment

A multi-hop network deployment has multiple devices between the client and the server, as shown in the following figure. In this type of deployment, the NetScaler SD-WAN SE appliances and the NetScaler Gateway are added to NetScaler MAS, and AppFlow is enabled.

localized image

NetScaler MAS identifies the appliance from which it receives the data, based on the hop count and connection chain ID. The hop count represents the number of appliances through which the traffic flows from the client to the server. The connection chain ID represents the end-to-end connections between the client and the server.

NetScaler MAS uses the hop count and connection chain ID to correlate the data from the appliances, and generates the reports.

For NetScaler SD-WAN SE appliances to send the analytics data to NetScaler MAS, you should configure the Virtual IP address of NetScaler Gateway as the DPI ICA IP and set the DPI ICA port number to 443.

To configure ICA DPI settings:

  1. In the NetScaler SD-WAN SE appliance UI, navigate to Configuration Editor > Advanced > Global > Applications > Settings.

  2. Select Enable Deep Packet Inspection > Enable Deep Packet Inspection for Citrix ICA Applications > Enable Multi-Stream ICA.

    localized image

  3. In the DPI ICA IP-1 field, enter the NetScaler Gateway Virtual IP address and prefix.

  4. In the DPI ICA Port-1 field, enter the port number 443.

  5. Click Apply and export the configuration to the appliance using the change management process.

    In NetScaler MAS, for every active ICA session, you can view a session diagram in HDX Insight. The session diagrams provide details about the devices in the connection path. They also provide insight into the client-side / server-side latency between a network device and its immediate next hop. This information enables you to identify the root cause of delay and troubleshoot performance issues.

    NetScaler SD-WAN SE does not send HDX data records. It provides TCP for HDX information only. The HDX insight data is provided by the HDX insight enabled devices in your network (for example, NetScaler ADC or NetScaler Gateway).  

    The NetScaler SD-WAN EE appliance can send TCP for HDX data or HDX insight data, depending on the AppFlow configuration of the appliance. HDX template should be enabled on the Data Center appliance.


    In a multi-hop deployment, ensure that only one of the network devices sends HDX insight data. The rest of the network devices can send TCP for HDX data.

To view multi-hop data:

 In NetScaler MAS web interface, navigate to HDX Insight > Users > Current Sessions or HDX Insight > Applications > Current Sessions and click the Diagram icon.

localized image

The network topology diagram appears.

localized image

 Click any network element to display more information.


The information displayed depends on the selected network element.

The following parameters appear for NetScaler appliances:

  • Name: Name of the NetScaler appliance.

  • IP Address: IP address of the appliance.

  • WAN Latency: Latency caused by the client side of the network. That is, from NetScaler to end-user.

  • DC Latency: Latency caused by the server side of the network. That is, from NetScaler to back-end servers.

  • State: Device reachability status.

Viewing NetScaler SD-WAN Analytics Data for a Multi-Hop Deployment