Enable Analytics on Virtual Servers

You can enable analytics for a specific virtual server on the selected instance, representing an application server, and monitor the traffic of that application server. Analytics provides statistics for the virtual server.


For NetScaler instances of 11.0 release, 65.30 build and above, there is no option on NetScaler MAS to enable Security Insight explicitly. Make sure that you configure the AppFlow parameters on the NetScaler instances, so that NetScaler MAS starts receiving the Security Insight traffic along with the Web Insight traffic. For more information on how to set the AppFlow parameters on NetScaler instances, see To set the AppFlow parameters by using the configuration utility.

To enable Analytics on NetScaler MAS:

  1. Navigate to NetworksInstances, and select the NetScaler instance you want to enable analytics.

  2. From the Action drop-down, select Enable/Disable Insight.

  3. Select the virtual servers, and click Enable AppFlow.

  4. In the Enable AppFlow field, type true, and based on the analytics you want to enable, select Security Insight or Web Insight, or both.

    localized image


    NetScaler MAS uses NetScaler ADC SNIP for Logstream and NSIP for IPFIX. If there is a firewall enabled between NetScaler MAS and NetScaler ADC instance, ensure you open the following port to enable Citrix ADM to collect AppFlow traffic:

    Transport Mode Source IP Type Port
    Logstream SNIP TCP 5557


    • For HDX Insight and Gateway Insight, while clicking Enable AppFlow, select VPN virtual server configured on your NetScaler instance, and select ICA or HTTP check boxes accordingly.

      localized image

    • For TCP Insight, navigate to System > Analytics Settings > Configure Features, and select Enable TCP Insight.

    • For Video Insight, make the configuration changes on the NetScaler Appliance. For more details on how to enable analytics for Video insight, see Video Insight.

    • For WAN Insight:

      1. Navigate to Infrastructure > Instances > NetScaler SD-WAN WO, and select the datacenter WAN optimization appliance.

      2. From the Action list, select Enable Insight.

      3. Select the following parameters as required:

        • Geo data collection for HDX Insight: Shares client IP address with the Google Geo API.

        • AppFlow: Starts collecting data from WAN optimization instances.

        • TCP and WANOpt: Provides TCP and WANOpt Insight reports.

        • HDX: Provides HDX Insight reports.

        • TCP only for HDX: Provides TCP only for HDX Insight reports.

      You can select the AppFlow transportation mode to IPFIX or Logstream while enabling AppFlow on the discovered NetScaler Instances in NetScaler MAS. For more information about IPFIX and Logstream, see Understanding Logstream.

      The following table describes the features of NetScaler MAS that supports IPFIX and Logstream as the transport mode:

      Feature IPFIX Logstream
      Web Insight
      Security Insight
      Gateway Insight
      HDX Insight
      SSL Insight Not supported
      CR Insight
      IP Reputation
      Client Side Measurement

Enable Analytics on Virtual Servers