Hi, I have a strange behaviour when upgrading Netscaler to the latest version of 14.1 38.53. I am loosing some / maybe all of the predefined WebApplication Firewall Profiles for the Integrated WAF for Citrix Gateway and AAA. Which results in RST when accessing the Citrix Gateway or some preauthentication enabled Site. Disabeling the WebApp Firewall solves the problem but I am unable to recreate the missing WAF profiles. (Export and Import from a working one does not work, the API signatures are missing in the config, but on the filesystem they are there but I cannot import them). This does not happen to all Netscalers, a lot of them are upgrading simply fine (I had the Issue from 14.1 to 14.1 and also from 13.1 to 14.1 in all cases the AppFw was working fine before the upgrade). here a screenshot of a netscaler where "only" the ns-aaa-default-appfw-profile is missing. In some cases it is all of the ns-*. Am I the only one experiencing this issue?

Nasty issue, the one working were on the same build and same upgrade path? If you export the config before upgrade and attempt to import, does it work? It sounds like a bug ...

I am not completly sure cause it took me a couple of updates to realize what really the issue was. In my testenvironment the issue did not appear and this was from the 13.1 from July 2024 to the 14.1 from December. I am wondering if this has something to do with the license. If this happens only on Enterprise Licensed Netscalers?

Yup i posted about this previously i upgraded my lab netscaler to latest 14.1 build hoping to use WAF for my NS GW but i was missing the WAF profiles

yeah in this way I have seen it as well. Now I had one with only the ns-aaa missing. I have also a lot of netscalers that do not show this issue and I have no idea what the diffrence could be. And I don't know how to get the profiles back. Reinstalling the same release once more does not solve the issue.

has the same experience with 14.1. 38,53. Gateway stops working after some days, not directly after the Update from 13.1 to 14.1. To fix the issue, in Version 14.1. 38,53 set the WAF Protection to disable or downgrade to 14.1 34.42 fix the issue.

Mine is a just a lab standalone vpx on latest 14.1 build that is missing the WAF profiles