This message was deleted.
# citrix-netscalers
Slackbot
10/18/2023, 11:09 PMThis message was deleted.
m
Mike Streetz (O_P)
10/18/2023, 11:13 PMthey are just stored in RAM right?
s
Stephen
10/18/2023, 11:19 PMI thought the same thing, if it reboots after upgrade.. ?
m
Mike Streetz (O_P)
10/18/2023, 11:19 PMIf you have session mirroring for ICA turned on maybe sessions hang around forever?
Mike Streetz (O_P)
10/18/2023, 11:20 PMlike the new primary would push the session list back to the secondary? That’s about the only scenario I can think of
Mike Streetz (O_P)
10/18/2023, 11:20 PMI’m looking at this mandiant article saying you need to kill all persistent sessions
Mike Streetz (O_P)
10/18/2023, 11:24 PMmaybe they are talking about if you have connection mirroring on
r
Ray Davis
10/19/2023, 4:41 PMWasn't their a command to do this?
m
Mike Streetz (O_P)
10/19/2023, 4:42 PMyeah the question is why you really need to
Mike Streetz (O_P)
10/19/2023, 4:43 PM Copy code
clear lb persistentSessionsr
Ray Davis
10/19/2023, 4:43 PMoh
m
Mike Streetz (O_P)
10/19/2023, 4:43 PMlike the only reason you’d have to clear them is if they were shared, but the article doesn’t go into that
r
Ray Davis
10/19/2023, 4:43 PMCPU and Memory usage mabye?
Ray Davis
10/19/2023, 4:44 PMGuessing here
m
Mike Streetz (O_P)
10/19/2023, 4:44 PMthey are saying it’s a security thing
Mike Streetz (O_P)
10/19/2023, 4:44 PMbecause the attacker can get back in
Mike Streetz (O_P)
10/19/2023, 4:44 PMbut thinking it through, if you have a single node, how are they getting back in after you reboot it?
Mike Streetz (O_P)
10/19/2023, 4:45 PMdoesn’t the persistent session token need to exist on the NS? You can’t just present a cookie if the NS doesn’t know about it
Mike Streetz (O_P)
10/19/2023, 4:50 PMThe only scenario I can think of where the sessions don’t get cleared is where Session Reliability is turned on for ICA sessions or where Connection Mirroring is on
Mike Streetz (O_P)
10/19/2023, 4:50 PMthe latter is not very common in my experience
2 Views