NetScaler Times newsletter for Week 8 - 2025
Steady state on NetScaler builds!
Hello Everyone
It’s Andrew again over at Cloud Software Group. This NetScaler Times update aims to keep you up-to-date! 🚀 Why read this? The idea is to pull together events, firmware releases, support articles, and anything else I think is relevant into a single email.
High-level agenda for this week:
This is a NetScaler Times newsletter with updates on NetScaler, including documentation, firmware, and security.
There are no new firmware builds this week.
The latest NetScaler WAF Signatures Update v145 was released on February 6th.
NCSC is working on making Principles Based Assurance (PBA) usable in practice.
Google Chrome has updated its "Enhanced Protection" feature with AI for real-time protection against threats.
Feedback on the newsletter is welcome!
1. NetScaler updates from the last week:
Configuring and using the Learning feature | Web App Firewall
3 days ago — The learning feature is a repetitive pattern filter that observes activity on a website or application protected by the Web App Firewall.
Install, link, and update certificates | SSL offload and ...
4 days ago — To install a certificate, see Add or update a certificate-key pair. Note: NetScaler supports PEM, DER, and PFX (PKCS12) certificate formats.
NetScaler secure deployment guide
4 days ago — NetScaler MPX is an application delivery controller that accelerates websites, provides L4‑L7 traffic management, and offers an integrated NetScaler WAF..
Migrate NetScaler config to new appliances
4 days ago — In this article, Carl details one method of migrating a Citrix NetScaler ADC configuration from an old to a new appliance pair while….
How to create message action to log to syslog in Citrix ...
6 days ago — This article describes creating a message action that can be bound to a responder or rewrite policy that logs to syslog on the NetScaler.
2. The latest firmware builds.
The details for the various builds have been listed below, as this helps plan for new releases in your environment. This support document has a lot more information on the different release cycles.
The NetScaler has multiple form factors to support different environments. NetScaler is built on a single operating system with a software-based architecture, so the behavior will be the same regardless of which is used — hardware, virtual machine, bare metal, or container. Pick one that works for you…
Latest Build Versions:
Here is a timeline for the 14.1 and 13.1 builds to show where they are within their respective release lifecycle.
Here are all the firmware builds in a table:
There are no new builds this week.
Which release should I use?
The release families are designed such that 14.1 has more elements changing with each update, hence the feature phase designation. There will be fewer changes in 13.1, so unless you need a capability that is only available in the 14.1 release, the advice is to choose 13.1 for most production deployments.
End Of Sale Appliances
These appliances are End of Sale (unavailable to buy new now), they will live and run for 5 more years from 2024.
EOL Appliances
Here is a table showing the significant EOL appliance events for the next 12 months. April looks to have a few appliances that will reach their end of life.
3. Recent security bulletin
No new security bulletins. Here is the last one from Nov 2024. NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2024-8534 and CVE-2024-8535.
CTX Number: CTX691608
Article Type: Security Bulletin: Created Date: 12/Nov/2024
Last Modified Date: 14/Nov/2024: Severity: High
NetScaler WAF Signatures Update v145 updated on the 6th Feb
The latest version of its integrated Web App Firewall signatures helps customers mitigate several CVEs with varying CVSS scores. Link to details
4. NCSC Making Principles-Based Assurance a reality
An update on the work to make Principles Based Assurance (PBA) usable in practice.
For some time now, the NCSC has been actively researching and consulting on the future of technology assurance in the UK. We first shared the outcome of this work in a 2021 white paper, which concluded that the chosen approach was Principles Based Assurance or PBA.
Read more here
5. Google AI Security Update
Google Chrome has updated the existing "Enhanced protection" feature with AI to offer "real-time" protection against dangerous websites, downloads, and extensions.
More here
6. Feedback for this newsletter
Naturally, if something you feel should be added/removed or called out, drop me a note; at Andrew.Scott@cloud.com. All mistakes are mine.
You can get all the previous newsletters plus other articles here:
Have a great week!