This message was deleted.

What up Matty?? Yes disable external auth always to it, limit use and put it behind PIM if you can.

Thx Oz. let me research how to put it behind pim 🙂

I normally disable external Auth and change the password on the nsroot account as well as setup LDAP with search /member of filter (AD/AAA group called Netscaler Admins) with superuser command policy bound and policy bound globally. I then use ADM to monitor any failed logins