Citrix ADC SDX Appliance

• Users cannot configure a tagged VLAN on the 50G and 100G interfaces of an ADC instance without explicitly specifying the allowed VLAN list on the interface from the Management Service. The issue is seen if the ADC instance is provisioned on one of the following Citrix ADC SDX platforms:
  – SDX 15000-50G
  – SDX 26000
  – SDX 26000-50S
  – SDX 26000-100G
  [ NSSVM-3697 ]

• After deleting an interface or a channel from an ADC instance, the instance might be unreachable from the Management Service. With this change, if your Citrix ADC SDX appliance is running release 13.0 build 71.x and later or release 12.1 build 60.x and later, you cannot delete the interface or channel on an ADC instance from the Management Service.
  [ NSSVM-3442 ]

User Interface

• Next/Previous navigation option for Web App Firewall Profile GUI page
  In Citrix ADC GUI, the Web App Firewall Profiles page now displays the Next/Previous navigation option to view more than 25 profiles in the list pane.

  Navigation: Security->Citrix Web App Firewall->Profiles

  [ NSUI-16487 ]

  Release Notes for Citrix ADC 12.1-59.16 Release

  The enhancements and changes that are available in Build 12.1-59.16.

  User Interface

  • Next/Previous navigation option for Web App Firewall Profile GUI page
    In Citrix ADC GUI, the Web App Firewall Profiles page now displays the Next/Previous navigation option to view more than 25 profiles in the list pane.

    Navigation: Security->Citrix Web App Firewall->Profiles

    [ NSUI-16487 ]

  • Citrix logo change
    Citrix now has a new logo that reflects its brand transformation. The Citrix ADC and Citrix Gateway GUI now reflect the new Citrix logo.
    [ NSUI-16210 ]

  Release Notes for Citrix ADC 12.1-58.15 Release

  The enhancements and changes that are available in Build 12.1-58.15.

  Citrix ADC SDX Appliance

  • Auto-upgrade of the built-in agent without initialization
    From Citrix ADC release 12.1 build 58.xx, Citrix ADC SDX appliance has built-in agents with ADM Service Connect functionality. The Citrix ADM built-in agent available on the ADC SDX appliance starts like an active daemon and communicates with ADM service. After communication with ADM service is established, the built-in agent auto-upgrades itself to the latest software version regularly.
    [ NSSVM-3852 ]

  • Citrix ADM service connect feature to enable auto-onboarding to Citrix ADM service
    The Citrix Application Delivery Management (ADM) service connect feature enables seamless onboarding of Citrix ADC SDX appliances onto Citrix ADM service. This feature lets the ADC SDX appliance automatically connect with ADM service and send system, usage, and telemetry data to ADM service. Using this data, you can get insights and recommendations for your Citrix ADC infrastructure, on Citrix ADM service.

    By default, the Citrix ADM service connect feature is enabled when you install or upgrade Citrix ADC SDX appliance.

    For more information, see the following topics:

    – Citrix ADM service: https://docs.citrix.com/en-us/citrix-application-delivery-management-service/citrix-application-delivery-management-service.html
    – Data governance: https://docs.citrix.com/en-us/sdx/12-1/data-governance.html
    – Citrix ADM service connect: https://docs.citrix.com/en-us/sdx/12-1/adm-service-connect.html

    Note: The ADM service connect feature is now available on Citrix ADC instances and Citrix Gateway appliances, however, the corresponding functionality on Citrix ADM service is not yet available. Citrix will update this note when the corresponding functionality becomes available in ADM service so that you can leverage the complete benefit of this feature.

    [ NSSVM-3470 ]

  Load Balancing

  • GSLB configuration sync on slave sites is not triggered when there is an MEP UP event for a site In a GSLB setup, configuration synchronization is no longer dependent on the MEP state. The configuration change is synced as long as there is connectivity to the remote sites irrespective of the MEP state.
    [ NSLB-4493 ]

  User Interface

  • Citrix ADM service connect feature to enable auto-onboarding to Citrix ADM service
    The Citrix Application Delivery Management (ADM) service connect feature enables seamless onboarding of Citrix ADC MPX, SDX, and VPX instances, and Citrix Gateway appliances onto Citrix ADM service. This feature lets the ADC instance or Gateway appliance automatically connect with ADM service and send system, usage, and telemetry data to ADM service. Using this data, you get insights and recommendations for your Citrix ADC infrastructure on Citrix ADM service.

    By default, the Citrix ADM service connect feature is enabled when you install or upgrade Citrix ADC MPX, SDX, and VPX instances or Citrix Gateway appliance.

    For more information, see the following topics:
    – Citrix ADM service: https://docs.citrix.com/en-us/citrix-application-delivery-management-service/citrix-application-delivery-management-service.html
    – Data governance: https://docs.citrix.com/en-us/citrix-adc/12-1/data-governance.html
    – Citrix ADM service connect: https://docs.citrix.com/en-us/citrix-adc/12-1/adm-service-connect.html

    Note: The ADM service connect feature is now available on Citrix ADC instances and Citrix Gateway appliances, however, the corresponding functionality on Citrix ADM service is not yet available. Citrix will update this note when the corresponding functionality becomes available in ADM service so that you can leverage the complete benefit of this feature.

    [ NSCONFIG-3793 ]

  • Auto-upgrade of built-in agents without initialization
    From Citrix ADC release 12.1 build 57.xx and higher, the Citrix ADM built-in agent available on Citrix ADC instances communicates with ADM service without initialization on the respective ADC instance. After communication with ADM service is established, the built-in agent auto-upgrades to the latest software version regularly.

    Previously, you had to initialize the built-in agent on Citrix ADC instances, using “mastools” commands, to establish communication with ADM service, and for regular auto-upgrades.

    [ NSCONFIG-2875 ]

  • Update for licensing server IP address You can now update the licensing server IP address in a VPX instance without any impact on the allocated license bandwidth and data loss. For information, see https://docs.citrix.com/en-us/citrix-application-delivery-management-software/13/license-server/adc-vpx-check-in-check-out.html%23update-a-licensing-server-ip-address
    [ NSCONFIG-1974 ]

  Citrix ADC 12.1 Build 56.22 MR

  The enhancements and changes that are available in Build 56.22.

  Authentication, authorization, and auditing

  • Encryption of Citrix Gateway login information for nFactor authentication

    Citrix Gateway with nFactor authentication can encrypt the login request fields submitted by a client (browser or SSO apps) during the authentication process. The encrypted login request fields provide an extra layer of security to protect the user’s sensitive data from being disclosed.

    For details, see https://docs.citrix.com/en-us/citrix-adc/12-1/aaa-tm/multi-factor-nfactor-authentication.html#encryption-of-citrix-gateway-login-information-for-nfactor-authentication
    [# NSHELP-19554]

  Citrix ADC SDX appliance

  • Option to enable or disable dom0 access

    You can now enable or disable access to SDX Control Domain (dom0). With dom0 access, a user can directly access the SDX appliance and also change the configuration. Previously, dom0 access was enabled by default. Upon upgrade to 13.0 xx from previous release, dom0 access will be disabled.

    To enable dom0 access, from the SDX GUI, navigate to System > Network Configuration. Under Appliance Supportability, check the Configure Applliance Supportability box.
    [# NSPLAT-11065]

  Citrix ADC VPX appliance

  • Support for Intel X722 10G NIC on KVM-VPX

    A Citrix ADC VPX instance for the Linux-KVM platform now supports Intel X722 10G SR-IOV network interfaces.
    [# NSPLAT-13197]

  Citrix ADC appliance

  • Support to configure the ADC generated cookie attributes

    For Citrix ADC deployments, support is now added to insert additional cookie attributes to the cookies generated by Citrix ADC appliance. These additional cookie attributes help in enforcing the required policies for the ADC generated cookies based on the application access pattern.

    This feature can be used to prevent issues that can occur because of the Google Chrome upgrade (Google Chrome 80).

    For details, see https://docs.citrix.com/en-us/citrix-adc/13/load-balancing/insert-cookie-attributes.html
    [# NSLB-6068]

  Citrix Gateway

  • Support for SameSite attribute

    For Citrix Gateway and Citrix ADC AAA deployments, support is now added to configure the SameSite cookie attribute. This attribute helps prevent issues that might occur because of certain browsers upgrade, such as Google Chrome 80. The SameSite attribute can now be set to None, Lax or Strict, as per the requirement.

    For details, see https://docs.citrix.com/en-us/citrix-gateway/12-1/configure-samesite-attribute-for-citrix-gateway.html

    https://docs.citrix.com/en-us/citrix-adc/12-1/aaa-tm/configure-samesite-for-aaa-deployments.html
    [# NSAUTH-7531]

  • Support to configure RfWebUI parameters

    You can now configure the RfWebUI parameters such as loginFormTimeout and Session timeout by editing the plugins.xml.
    [# NSHELP-19221]

  High Availability

  • If you upgrade a Citrix ADC appliance in a high availability (HA) setup to the software version 13.0–52.24 or later, HA synchronization and command propagation are disabled during the upgrade process.

    However, after both the appliances are upgraded to the same software version, HA synchronization and command propagation are enabled automatically.
    [# NSLB-6069]