Hello Everyone
It’s Andrew again over at Cloud Software Group. This NetScaler Times update aims to keep you up-to-date! 🚀 Why read this? The idea is to pull together events, firmware releases, support articles, and anything else I think is relevant into a single email. Some say email is the future, others tell the truth!
High-level agenda according to Gemini, other AI tools are available too:-)
This is a NetScaler Times newsletter with updates on firmware builds, documentation, security bulletins, and other relevant information.
The latest firmware builds for NetScaler are provided, with a note that 12.1 NDcPP is now End Of Life.
Updated documentation on selective SSL logging and license management is available.
There are no new security bulletins, but the latest NetScaler WAF Signatures Update is mentioned.
The NCSC has released guidance on penetration testing.
Feedback on the newsletter is welcomed
1. The latest firmware builds.
The details for the various builds have been listed below, as this helps plan for new releases in your environment. This support document has a lot more information on the different release cycles.
The NetScaler has multiple form factors to support different environments. NetScaler is built on a single operating system with a software-based architecture, so the behavior will be the same regardless of which is used — hardware, virtual machine, bare metal, or container. Pick one that works for you…
Latest Build Versions:
Here is a timeline for the 14.1 and 13.1 builds to show where they are within their respective release cycles.
Here are the other firmware builds:
No new builds this week
NetScaler 12.1 NDcPP EOL
This has been marked as End Of Life from the end of last month. As a result, this build has been pulled from the tables above. The recommendation is to switch to the 13.1 NDcPP (currently under evaluation).
Which release should I use?
The release families are designed such that 14.1 has more elements changing with each update, hence the feature phase designation. There will be fewer changes in 13.1, so unless you need a capability that is only available in the 14.1 release, the advice is to choose 13.1 for most production deployments.
End Of Sale Appliances
These appliances are End of Sale (unavailable to buy new now), they will live and run for 5 more years from 2024.
EOL Appliances
Here is a table showing the significant EOL appliance events for the next 12 months. April looks to have a few appliances that will reach their end of life.
2. Doc updates & other web updates
Selective SSL logging - Product Documentation - NetScaler
4 days ago — An SSL log profile provides control over logging the following events for a virtual server or a group of virtual servers.
License management for Flexed and Pooled licensing
6 days ago — The license files present on your NetScaler are listed in this section. File name contains, Description, Download information, Where to upload/apply the license ...
3. Recent security bulletin
No new security bulletins. Here is the last one from Nov 2024. NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-8534 and CVE-2024-8535.
CTX Number: CTX691608
Article Type: Security Bulletin: Created Date: 12/Nov/2024
Last Modified Date: 14/Nov/2024: Severity: High
NetScaler WAF Signatures Update v144
The latest version of its integrated Web App Firewall signatures helps customers mitigate several CVEs with varying CVSS scores. Link to details
4. NCSC advice on Pen testing
This was released at the end of January and is a handy topic!
Introduction
Penetration testing is a core tool for analysing the security of IT systems, but it's not a magic bullet.
This guidance will help you understand the proper commissioning and use of penetration tests. It will also help you to plan your routine security measures so that you gain maximum benefit from this powerful but expensive operation.
Read more
5. Feedback for this newsletter
Naturally, if something you feel should be added/removed or called out, drop me a note; Andrew.Scott@cloud.com. All mistakes are mine.
I would happily get feedback on what you could do with seeing more of or what you find hard to set up. You can get all the previous newsletters plus other articles here:
Have a great week!