I'm in the boat of needing to get off 13.0 firmware. Options are to go to 13.1 and stay there or to go to 13.1 and then 14.1 and stay there. Any reason anyone can sight to avoid 14.1 at this point? I like the idea of a longer support runway, but I also dislike the bleeding edge. Thoughts?

14.1 has the WAF feature for Citrix Gateway.

What @Carl Stalhood said. Besides, just because you go to 14.1 doesn't mean you need to upgrade every firmware release. If you're stable and there's not a security flaw, you can stay on the firmware you're using.

thanks for the feedback, fellas! 14.1 it is!

You’re welcome.

Would bear in mind that the 14.1 WAF for GW was just published and if you're not implementing it before autumn, running a stable version of 13.1 might be a valid option too. The new WAF bit is really interesting though and from my perspective is the first feature in 14.1 that made me consider upgrading 13.1 to that. We're still upgrading the last 13.0 ones to 13.1 to be supported.

Luckily the 13.1 firmware released yesterday adds waf to 13.1

Thanks @Jeff Riechers, would've missed that one.

That is excellent!

a surprising twist as 14.1 is in feature phase and the 13.1 in maintenance

They must have considered WAF for Gateway a security need.

My thoughts exactly, it's now included with all editions too (for GW)

The waf feature is fine, but keep in mind it's not a fully fledge AppFW profile, it's based on a schema and some RFC for now, but more to come. No false positives yet from what i've seen, but blocked stuff for sure.