Citrix Analytics for Security

Security Analytics Document History

The following table describes important changes to the Security Analytics documentation. To receive notifications about these updates, subscribe to the RSS feed.

Date Change Description
06 Dec 2021 Updated SIEM integration- Elasticsearch, Azure Sentinel, Splunk, and Others Added Kafka endpoints for the Asia Pacific South region. Learn more.
06 Dec 2021 Updated Data sources Updated data sources supportability for the Asia Pacific South region. Learn more.
06 Dec 2021 Updated Known issues Added known issue for Secure Browser (CAS-62254). Learn more.
03 Dec 2021 Updated Self-service search for Secure Browser Added prerequisite to enable Hostname Tracking to send events. Learn more.
03 Dec 2021 Updated Citrix Analytics data format for SIEM Added schema format of the Malware files detected risk indicator. Learn more.
02 Dec 2021 Updated What’s new Added new feature. Learn more.
02 Dec 2021 Updated Content Collaboration risk indicators Added Malware files detected risk indicator. Learn more.
29 Nov 2021 Updated What’s new Added new feature. Learn more.
29 Nov 2021 Added End user email settings Updated how to use the end user email settings. Learn more.
26 Nov 2021 Updated What’s new Added enhancements. Learn more.
26 Nov 2021 Updated Custom risk indicators Updated the navigation link to access the Custom risk indicators page. Learn more.
26 Nov 2021 Updated Policies and actions Updated the navigation link to access the Policies page. Learn more.
25 Nov 2021 Updated What’s new Updated Security Information and Event Management (SIEM) integration enhancements. Learn more.
25 Nov 2021 Updated Security Information and Event Management (SIEM) integration Added integration with Elasticsearch, Microsoft Azure Sentinel, and other SIEMs using Kafka or Logstash. Learn more.
09 Nov 2021 Updated What’s new Added fixed issue- CAS-60920. Learn more.
02 Nov 2021 Updated What’s new Added enhancements and fixed issue- CAS-59608. Learn more.
02 Nov 2021 Updated Access Assurance Location dashboard Added Access Profile page and User Logons page. Learn more.
02 Nov 2021 Updated Self-service search for Content Collaboration Added malware logs. Learn more.
20 Oct 2021 Updated What’s new Added Session recording server integration. Learn more.
20 Oct 2021 Updated Citrix Virtual Apps and Desktops data source Added Session recording server integration. Learn more.
19 Oct 2021 Updated What’s new Updated Notify admin email template, Access assurance location dashboard enhancements, and added fixed issue- CAS-59595. Learn more.
19 Oct 2021 Updated Access Assurance location dashboard Added user logon trend and deviation column. Learn more.
01 Oct 2021 Updated Self-service search for Content Collaboration Added audit logs. Learn more.
01 Oct 2021 Updated What’s new Added audit logs for self-service search for Content Collaboration. Learn more.
29 Sep 2021 Updated Access assurance location dashboard The dashboard is now generally available to all users. Learn more.
15 Sep 2021 Updated What’s new Added enhancement. Learn more.
15 Sep 2021 Updated Custom risk indicators Enhancements to custom risk indicator modification and deletion process. Learn more.
14 Sep 2021 Updated What’s new Added features and known issue- CAS-58426. Learn more.
14 Sep 2021 Updated Citrix Analytics data format for SIEM Added schema details for the Suspicious logon risk indicator. Learn more.
14 Sep 2021 Updated Citrix Virtual Apps and Desktops risk indicators Added the Suspicious logon risk indicator and deprecated the Access from an unusual location risk indicator. Learn more.
19 Aug 2021 Updated What’s new Added features and enhancements. Learn more.
19 Aug 2021 Updated Citrix Virtual Apps and Desktops data source Added support for Citrix Director. Learn more.
19 Aug 2021 Updated Citrix Analytics data format for SIEM Added custom risk indicators schema for Citrix Virtual Apps and Desktops. Learn more.
19 Aug 2021 Updated Access assurance location dashboard Added geofencing feature. Learn more.
19 Aug 2021 Updated Users page View Workspace app status. Learn more.
19 Aug 2021 Updated Custom risk indicators Support for the IS EMPTY operator. Learn more.
19 Aug 2021 Updated Citrix users risk indicators Added risky factors. Learn more.
19 Aug 2021 Updated User risk timeline and profile Added risk summary. Learn more.
19 Aug 2021 Updated Splunk integration Added Citrix Analytics App for Splunk. Learn more.
19 Aug 2021 Added Citrix Analytics dashboards in Splunk Added new dashboards for Citrix Analytics App for Splunk. Learn more.
29 Jul 2021 Updated What’s new Deprecated feature. Learn more.
29 Jul 2021 Updated Citrix Endpoint Management risk indicators Removed the following actions that an admin can apply- Lock device, Notify Endpoint Management admin, Notify user, Revoke device, and Wipe device. Learn more.
14 Jul 2021 Updated What’s new Added enhancement. Learn more.
14 Jul 2021 Updated Custom risk indicator Added IS NOT EMPTY operator. Learn more.
06 Jul 2021 Updated What’s new Added a feature. Learn more.
06 Jul 2021 Updated Users dashboard Added non-risky users. Learn more.
01 Jul 2021 Updated What’s new Added access assurance location enhancements. Learn more.
01 Jul 2021 Updated Access assurance location dashboard. Updated unknown locations tab, facets, and timeline views. Learn more.
01 Jul 2021 Updated Self-service search for Virtual Apps and Desktops Updated the facet from OS Major to OS. Learn more.
30 Jun 2021 Updated What’s new Added enhancement. Learn more.
30 Jun 2021 Updated Splunk integration Added supported versions for Splunk integration. Learn more.
07 Jun 2021 Updated What’s new Added a feature and enhancement. Learn more.
07 Jun 2021 Updated Policies and actions Updated Notify administrator(s) action and added Change links to view-only sharing action. Learn more.
18 May 2021 Updated What’s new Added a feature and a fixed issue- CAS-50153. Learn more.
18 May 2021 Updated Preconfigured custom risk indicators and policies Added preconfigured custom risk indicators for first time access. Learn more.
18 May 2021 Updated Citrix Gateway risk indicators Removed the First time access from new IP risk indicator. Learn more.
18 May 2021 Updated Citrix Virtual Apps and Desktops risk indicators Removed the First time access from new device risk indicator. Learn more.
29 Apr 2021 Updated What’s new Added a feature and a fixed issue- CAS-49628. Learn more.
29 Apr 2021 Updated Custom risk indicators Added event details of the custom risk indicator. Learn more.
29 Apr 2021 Updated Self-service search for Virtual Apps and Desktops Removed print size and print format from the App.SaaS.File.Print event. Learn more.
16 Apr 2021 Updated What’s new Added new features. Learn more.
16 Apr 2021 Updated Citrix Analytics data format for SIEM Client IP added for all risk indicators. If data is not available, -999 is assigned to integer data type fields and NA is assigned to string data type fields. Learn more.
26 Mar 2021 Updated What’s new Added new features. Learn more.
26 Mar 2021 Updated Citrix Analytics data format for SIEM Added a maximum threshold on the event details for each risk indicator that is sent to your SIEM service. Added new fields- data_source_id and indicator_category_id for the indicator summary schema and event details schema. Learn more.
18 Mar 2021 Updated What’s new Added new features and a deprecated feature. Learn more.
18 Mar 2021 Added Access assurance location Added the topic- Access assurance location. Learn more.
18 Mar 2021 Updated Self-service search Added support for the NOT LIKE (!~) operator. Learn more.
18 Mar 2021 Updated Custom risk indicators Added support for the NOT LIKE (!~) operator. Learn more.
18 Mar 2021 Updated Self-service search for Gateway Removed the record types Application Launch Failure record (VPN_AF) and Session Update record (VPN_SU). Learn more.
18 Mar 2021 Updated Self-service search for Virtual Apps and Desktops Added dimensions based on the contextual template. Learn more.
11 Mar 2021 Updated What’s new Added a feature. Learn more.
11 Mar 2021 Updated Citrix Analytics data format for SIEM Added the last_update_timestamp field in the user risk score schema. Learn more.
03 Mar 2021 Updated What’s new Added new features. Learn more.
03 Mar 2021 Updated Citrix Content Collaboration risk indicators Updated the Access from an unusual location and the Ransomware activity suspected risk indicators. Learn more.
03 Mar 2021 Updated Citrix Gateway risk indicators Updated the Logon from suspicious IP risk indicator. Learn more.
03 Mar 2021 Updated Citrix Virtual Apps and Desktops risk indicators Updated the event table of the Access from an unusual location risk indicator. Learn more.
03 Mar 2021 Added new topic- Citrix Analytics data format for SIEM Describes the schema of the processed data for SIEM. Learn more.
18 Feb 2021 Updated What’s new Added new features and deprecated a Citrix Gateway risk indicator. Learn more.
18 Feb 2021 Updated Custom risk indicators Added a new option- First time for a new. Learn more.
18 Feb 2021 Updated User profile Citrix Analytics receives user location information from Citrix Virtual Apps and Desktops. Learn more.
18 Feb 2021 Updated Self-service search Added multi-column sorting. Learn more.
18 Feb 2021 Updated Citrix Gateway risk indicators Deprecated Excessive authorization failures risk indicator. Learn more.
28 Jan 2021 Updated topic- Citrix Virtual Apps and Desktops data source Added firewall exceptions for establishing a connection between a policy agent and an application server. Learn more.
27 Jan 2021 Updated topic- What’s new Enhancements to the Access from an unusual location risk indicator logic. Learn more.
27 Jan 2021 Updated topic- Citrix Content Collaboration risk indicators Enhancements to the Access from an unusual location risk indicator logic. Learn more.
27 Jan 2021 Updated topic- Citrix Gateway risk indicators Enhancements to the Access from an unusual location risk indicator logic. Learn more.
27 Jan 2021 Updated topic- Citrix Virtual Apps and Desktops risk indicators Enhancements to the Access from an unusual location risk indicator logic. Learn more.
20 Jan 2021 Updated topic- What’s new Added fixed issue CAS-46656. Learn more.
19 Jan 2021 Updated topic- What’s new Added fixed issue CAS-46316. Learn more.
13 Jan 2021 Updated topic- Known issues Added known issue CAS-46316. Learn more.
13 Jan 2021 Updated topic- What’s new New version of the add-on for Splunk is available. Added support for Splunk Cloud IDM and Splunk 8.1 64-bit. Removed support for Splunk 7.1 64-bit. Learn more.
13 Jan 2021 Updated topic- Splunk integration Added support for Splunk Cloud IDM and Splunk 8.1 64-bit. Removed support for Splunk 7.1 64-bit. Learn more.
11 Jan 2021 Updated topic- What’s new Added fixed issue CAS-44773. Learn more.
11 Jan 2021 Updated topic- Citrix Virtual Apps and Desktops data source Updated Apps and Desktops site card images and updated the supported clients list. Learn more.
11 Jan 2021 Updated topic- Known issues Updated the Citrix Workspace app events matrix table. Learn more.
11 Jan 2021 Updated topic- Troubleshoot Citrix Analytics for Security Updated the Citrix Workspace app events matrix table. Learn more.
22 Dec 2020 Updated topic- Citrix Gateway data source Added the Event hub endpoint in the allow list category. Learn more.
17 Dec 2020 Updated topic- What’s new Added Preconfigured custom risk indicators and a policy for geofencing use cases. Learn more.
17 Dec 2020 Added topic- Preconfigured custom risk indicators and policies Added preconfigured custom risk indicators and a policy for the geofencing use cases. Learn more.
15 Dec 2020 Updated topic- What’s new Updated user-response email and renamed Content Collaboration risk indicator. Learn more.
15 Dec 2020 Updated topic- Policies and actions Added location information in the user-response email. Learn more.
15 Dec 2020 Updated topic- Citrix Content Collaboration risk indicators Renamed First time access from new location to Access from an unusual location. Learn more.
07 Dec 2020 Updated topic- What’s new Improvements to Potential data exfiltration and First time access from new location risk indicators. Learn more.
07 Dec 2020 Updated topic- Citrix Virtual Apps and Desktops risk indicators Updated WHAT HAPPENED section for Potential data exfiltration. Learn more.
07 Dec 2020 Updated topic- Citrix Content Collaboration risk indicators Added geo map and pie chart and modified event table for First time access from new location. Learn more.
30 Nov 2020 Updated What’s new Improvements to self-service search and policies. Learn more.
30 Nov 2020 Updated topic- Self-service search Improved self-service search page. Learn more.
30 Nov 2020 Updated topic- Policies and actions Updated policy display criteria on the Policies dashboard. Learn more.
12 Nov 2020 Updated topic- What’s new Added a feature. Learn more.
15 Oct 2020 Updated topic- What’s new Added a feature and a deprecated feature. Learn more.
15 Oct 2020 Updated topic- Share Links dashboard Improvements in Share links dashboard. Learn more.
30 Sep 2020 Updated topic - Splunk integration Removed Splunk version 7.0 and lower. Learn more
10 Sep 2020 Updated topic - What’s new Added new features. Learn more.
08 Sep 2020 Updated topic - Microapps dashboard Updated Client OS Version image that no longer displays the OS version. Learn more.
08 Sep 2020 Updated topic- What’s new Added a feature and a fixed issue. Learn more.
01 Sep 2020 Renamed Citrix Managed Desktops logs to Citrix Virtual Apps and Desktops Standard for Azure logs Learn more
31 Aug 2020 Updated topic- Citrix Virtual Apps and Desktops data source Added checklist for StoreFront configuration file. Learn more.
11 Aug 2020 Updated topic- What’s new Added the fixed issue CAS-38021. Learn more.
08 Aug 2020 Updated topic- What’s new Added new feature. Learn more.
31 Jul 2020 Updated topic- What’s new Added the fixed issue CAS-38129. Learn more.
09 Jul 2020 Updated topic- What’s new Added new features and deprecated features. Learn more.
09 Jul 2020 Updated topic- Users dashboard Updated the Users dashboard data. Learn more.
09 Jul 2020 Updated topic- Citrix Gateway risk indicators Added the Access from an unusual location risk indicator. Learn more.
09 Jul 2020 Updated topic- System requirements Removed Internet Explorer 11 from the supported browsers list. Learn more.
09 Jul 2020 Updated topic- Citrix Virtual Apps and Desktops data source Updated the site card data with supported and unsupported clients. Learn more.
01 Jul 2020 Updated topic- Known issues Added the known issues CAS-36236 and CAS-36238. Learn more.
26 Jun 2020 Updated topic- What’s new Unusual time of application access (Virtual/SaaS) risk indicator deprecated. Learn more.
26 Jun 2020 Updated topic- Known issues Added the known issue CAS-33767. Learn more.
02 Jun 2020 Updated topic- What’s new Added the fixed issue CAS-32773. Learn more.
02 Jun 2020 Updated topic- Known issues Added the known issue CAS-35310. Learn more.
14 May 2020 Updated topic- System requirements Updated the system requirements. Learn more.
14 May 2020 Updated topic- Citrix Gateway data source Modified the content and added prerequisites. Learn more.
14 May 2020 Updated topic- Security Analytics home page Added the What’s next section. Learn more.
14 May 2020 Updated topic- Citrix Virtual Apps and Desktops data source Modified the content and prerequisites. Learn more.
11 May 2020 Updated topic- What’s new Added the fixed issues CAS-34209, CAS-34141, and CAS-34139. Learn more.
04 May 2020 Updated topic- Known issues Added the known issue CAS-33934. Learn more.
29 Apr 2020 Updated topic- What’s new Added the fixed issue CAS-31544. Learn more.
08 Apr 2020 Updated topic- Known issues Added the known issue CAS-32773. Learn more.
02 Apr 2020 Updated topic- What’s new Added a feature and the fixed issue CAS-29226. Learn more.
02 Apr 2020 Updated topic- Citrix Virtual Apps and Desktops data source Added StoreFront specifications. Learn more.
18 Mar 2020 Updated topic- Known issues Added the known issue CAS-31544. Learn more.
04 Mar 2020 Updated topic- What’s new Updated the fixed issue CAS-31180. Learn more.
04 Mar 2020 Updated topic- Known issues Updated the supported events. Learn more.
04 Mar 2020 Updated topic- Troubleshoot Citrix Analytics Updated the StoreFront configuration step. Learn more.
04 Mar 2020 Updated topic- System requirements Updated the system requirements for Virtual Apps and Desktops. Learn more.
03 Mar 2020 Updated topic- Known issues Added the known issue CAS-31180. Learn more.
20 Feb 2020 Updated topic- What’s new Added new features and fixed issues CAS-24134, CAS-29207, CAS-29029, and CAS-28781. Learn more.
20 Feb 2020 Updated topic- Known issues Added the known issue CAS-29583. Removed the known issue CAS-18536. Learn more.
20 Feb 2020 Updated topic- Users dashboard Analytics introduces the risk categories dashboard. Learn more.
20 Feb 2020 Updated topic- Custom risk indicators Analytics introduces the risk category column on the Custom risk indicators page. Learn more.
20 Feb 2020 Updated topic- Citrix user risk indicators Updated new risk indicator names. Learn more.
17 Jan 2020 Updated topic- Known issues Added the known issue CAS-29226. Learn more.
10 Jan 2020 Updated topic- Known issues Added the known issue CAS-29207. Learn more.
09 Jan 2020 Updated topic- What’s new Added new features and the fixed issues CAS-26297. Learn more.
09 Jan 2020 Updated topic- Known issues Added the known issue CAS-29029. Learn more.
09 Jan 2020 Added topic- Continuous risk assessment Citrix Analytics supports continuous assessment. Learn more.
09 Jan 2020 Updated topic- Policies and actions Citrix Analytics introduces policy enhancements. Learn more.
09 Jan 2020 Updated topic- Users dashboard Access Summary and Policies and Actions dashboards are introduced. Learn more.
09 Jan 2020 Added topic- Self-service search for Policies Use the self-service search to view the events related to policies. Learn more.
12 Dec 2019 Updated topic- What’s new Added a feature. Learn more.
12 Dec 2019 Updated topic- Splunk integration Added new Splunk versions. Learn more.
04 Dec 2019 Updated topic- What’s new Added a feature. Learn more.
04 Dec 2019 Updated topic- Custom risk indicators Added support for Citrix Gateway data source. Learn more.
22 Nov 2019 Updated topic- What’s new Added new features and the fixed issue CAS-24959. Learn more.
22 Nov 2019 Updated topic- Citrix Virtual Apps and Desktops risk indicators Added the First time access from new device risk indicator and deprecated the Access from new device risk indicator. Learn more.
22 Nov 2019 Updated topic- Citrix Gateway risk indicators Added the First time access from new IP and the Logon from suspicious IP risk indicators. Learn more.
22 Nov 2019 Added topic- Self-service search for Gateway Use self-service search to get insights into gateway events. Learn more.
22 Nov 2019 Added topic- Self-service search for Secure Browser Use self-service search to get insights into Secure Browser events. Learn more.
22 Nov 2019 Updated topic- Watchlist Remove a user from the watchlist. Learn more.
08 Nov 2019 Updated topic- What’s new Added the fixed issue CAS-24844. Learn more.
06 Nov 2019 Updated topic- Citrix Virtual Apps and Desktops data source Added the proxy configuration steps for a StoreFront deployment that is hosted on a webserver that uses an HTTP proxy. Learn more.
21 Oct 2019 Updated topic- Citrix Virtual Apps and Desktops data source Modified the agent name as Analytics policy agent. Learn more.
21 Oct 2019 Updated topic- Audit logs Refresh the Audit log page to view the latest audit data. Learn more.
21 Oct 2019 Updated topic- What’s new Added new features and fixed issues. Learn more.
21 Oct 2019 Updated topic- Known issues Updated the known issues CAS-24938, CAS-24844, CAS-24959, and CAS-16151. Learn more.
18 Oct 2019 Updated topic- Overview Updated the home page content. Learn more.
14 Oct 2019 Updated topic- Known issues Updated the version for Citrix Workspace app for Mac. Learn more.
30 Sep 2019 Updated topic- Known issues Added the known issue CAS-24776 and updated the table with supported versions for the known issue CAS-16151. Learn more.
23 Sep 2019 Updated topic- What’s new Added the fixed issue CAS-24087. Learn more.
20 Aug 2019 Updated topic- What’s new Added new features. Learn more.
20 Aug 2019 Updated topic- Self-service search Added self-service search enhancements. Learn more.
20 Aug 2019 Updated topic- Custom reports Added custom report enhancements. Learn more.
20 Aug 2019 Updated topic- Users dashboard Risk Indicators dashboard is introduced. Risky Users dashboard is enhanced. Learn more.
20 Aug 2019 Updated topic- Citrix share link risk indicators Excessive downloads risk indicator is introduced. Learn more.
20 Aug 2019 Added topic- Self-service search for Authentication Use self-service search to get insights into the authentication details of Citrix Cloud users. Learn more.
17 Jul 2019 Updated topic- Known issues Added the known issues CAS-16297 and CAS-21329. Learn more.
11 Jul 2019 Updated topic- What’s new Updated the list of new features. Learn more.
11 Jul 2019 Updated topic- Known issues Added the known issues CAS-19466, CAS-20906, CAS-17304, and CAS-21339. Learn more.
11 Jul 2019 Added topic- Custom risk indicators Create custom risk indicators. Learn more.
11 Jul 2019 Updated topic- User risk timeline Updated the privileged user events displayed on the user risk timeline. Learn more.
11 Jul 2019 Updated topic- Citrix share link risk indicators Updated the supported action of share link risk indicators. Learn more.
11 Jul 2019 Updated topic- Self-service search Self-service search enhancements. Learn more.
11 Jul 2019 Updated topics - Citrix Content Collaboration data source, Citrix Access Control data source, Citrix Endpoint Management data source, Citrix Virtual Apps and Desktops data source, and Citrix Gateway data source Site cards display the No data received status. Learn more.
27 Jun 2019 Updated topic- Splunk integration Updated the list of processed data sent to Splunk. Learn more.
19 Jun 2019 Updated topic- What’s new Added the fixed issues CAS-17575, CAS-19467, and CAS-19429. Learn more.
17 Jun 2019 Updated topic- Citrix Virtual Apps and Desktops data source Configure StoreFront to send events to Citrix Analytics. Learn more.
12 Jun 2019 Updated topic - Known Issues Added a known issue- CAS-19930. Learn more.
07 Jun 2019 Updated topic - Known Issues Added a known issue- CAS-16151. Learn more.
04 Jun 2019 Updated topic- Data governance Added Citrix Managed Desktops logs. Learn more.
30 May 2019 Updated topic - Known Issues Added known issues. Learn more.
30 May 2019 Updated topic - What’s new Added new features and fixed issues. Learn more.
30 May 2019 Updated topic - Custom reports Edit custom reports based on your requirements. Learn more.
09 May 2019 Updated topic - Known Issues Self-service search does not work on Internet Explorer 11. Learn more.
09 May 2019 Added topic - Custom reports Create custom reports based on your operational requirements. Learn more.
09 May 2019 Updated topic - Users dashboard Citrix Analytics supports privileged user monitoring. Learn more.
09 May 2019 Added topic - Weekly email summary Citrix Analytics sends a weekly email to administrators summarizing the security risk exposures. Learn more.
26 Apr 2019 Updated topic - System Requirements Subscription to Citrix ADM service is required for configuring an agent. Learn more.
26 Apr 2019 Added topic - Delegated administrators Citrix Analytics now supports delegated administrators (read-only access). Learn more.
Security Analytics Document History