NetScaler Times newsletter for Week 28 - 2025
Some Console Service updates..
Hello Everyone
It’s Andrew with the latest edition of the NetScaler Times, an update to keep you up-to-date on all things NetScaler-related! The idea is to pull together events, firmware releases, support articles, and anything else I think is relevant into a single email, as email is the future!
1. The latest firmware builds.
Below are the details for the various builds, which can help you plan for new releases in your environment. This support document provides additional information on the various release cycles.
NetScaler has multiple form factors to support different environments. It is built on a single operating system with a software-based architecture, so its behaviour will be the same regardless of whether it is used as hardware, a virtual machine, bare metal, or a container. Select one that works for your environment and needs.
Latest Build Versions:
Here is a timeline for the 14.1 and 13.1 builds to show where they are within their respective release lifecycle.
Here are all the firmware builds in a table:
Notes about Builds:
NetScaler Console Service update - 14.1-54.27 - July 02, 2025
Telemetry - New validation for telemetry data
As part of the NetScaler telemetry program, you must upload your telemetry data at least once every 90 days. The NetScaler Console service now verifies that the latest file in the uploaded payload is within 90 days. If the file is older than 90 days, the upload is rejected. This new validation check ensures that your uploaded telemetry data is up-to-date and compliant.
If your upload is rejected:
Download a fresh payload from your Console on-prem.
Upload it again.
Removal of telemetry analytics profile from the managed NetScaler instance
The following telemetry metrics profile configuration is no longer required for telemetry collection:
add analytics profile telemetry_metrics_profile -type timeseries -outputMode prometheus -metrics ENABLEd -serveMode Pull -schemaFile "./telemetry_collect_ns_metrics_schema.json" -metricsExportFrequency 300
As part of the NetScaler telemetry program, the telemetry metrics profile configuration was pushed to the managed NetScaler instances.
NetScaler Console automatically removes this configuration from your NetScaler instances on July 19, 2025, if it still exists. Alternatively, you can manually remove the configuration at any time by using the following command:
rm analytics profile telemetry_metrics_profile
For information about telemetry metrics profile configuration, see NetScaler telemetry program.
The release notes are here, with fixes and other updates.
Which release should I use?
The release families are designed so that 14.1 has more elements changing with each update, hence the feature phase designation. Due to its maintenance phase, 13.1 will have fewer changes now.
An example of the move to 14.1 might be that you want to take advantage of removing the dependency of ALB in Azure with your NetScaler HA deployment. Read more here. This could save some $$$ (insert local currency).
Also, a recent customer request included plans to build a new Azure infrastructure. This was not expected to be a short-term deployment. Looking at the build cycles above, it would make sense to start looking at 14.1 for this. This would avoid re-architecting the solution next year when 13.1 moves to CVE-only support.
What about NetScaler SDX?
There are multiple NetScaler designations. VPX, MPX, SDX, BLX, and CPX all use the same firmware. The table above applies to all NetScaler types. It might not be the same download file, as appliances like the SDX do have other elements to update.
End Of Sale Appliances & End of Life Appliances
The lists below have the recent appliance status changes. These have been revised to be a bit more exhaustive.
EoS Appliances
These appliances are End of Sale (unavailable to buy new now), they will live and run for 5 more years from 2024/2023. Just add 5 years to the EoS date to get the EOL.
EOL Appliances
A table shows the EOL appliance events for the last 18 months. April had a few appliances reach their end of life and must be replaced (to get support). The MPX/SDX 16000 is the replacement in most cases.
I pulled these summary tables from the official site here. Just open and expand the NetScaler section.
2. Latest NetScaler Security updates
Nothing new here(this week).
On June 25th, the following were issued
1. NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543
Full support doc: Link
On June 17th, the following were issued.
2. NetScaler ADC & Gateway Security Bulletin for CVE-2025-5349 & CVE-2025-5777.
Support ref: CTX693420. Status: Critical
Full support doc: Link
3. Citrix Workspace app for Windows Security Bulletin CVE-2025-4879.
Support ref: CTX694718. Status: High
Full support doc: Link
4. NetScaler Console and NetScaler SDX (SVM) Security Bulletin for CVE-2025-4365 –
Support ref: CTXCTX694729. Status: Medium
Full support doc: Link
NetScaler WAF Signatures Update v155 was updated on the 2nd July.
New signature rules are generated for the vulnerabilities identified in the week 2025-07-02. You can download and configure these signature rules to protect your appliance from security-vulnerable attacks.
Link to details.
3. Updates from around the web.
Some selected updates from around the web for the last 7 days..
NetScaler ADC achieves certification for DoDIN Approved ...
6 days ago — NetScaler helps to enhance availability and protect cybersecurity and interoperability through a range of capabilities. Key features include advanced load ...
Authentication Failures After Upgrading to 14.1 47.46 ,13.1 ...
6 days ago — After upgrading NetScaler to build 14.1 47.46 or 13.1 59.19 customers might experience issues with Authentication.This can manifest as a "broken" login page ...
Creating the right organisational culture for cybersecurity
Calling cyber security professionals, culture specialists and leaders to drive the uptake of new cybersecurity culture principles.
4. Feedback for this newsletter
Naturally, if something you feel should be added/removed, or called out, drop me a note at Andrew.Scott@cloud.com. All mistakes are mine 🤭. All opinions expressed in this newsletter are solely my own and do not express the views or opinions of my employer.
You can get all the previous newsletters plus other articles here:
Have a great week!