I have a non-addressed Gateway configured on a Net...
# citrix-netscalerk
Kari Ruissalo (WyW)
03/05/2025, 2:09 PMI have a non-addressed Gateway configured on a NetScaler, which is accessed via a Content Switch. The gateway is solely used for VPN connections (using SAC). Do I need to configure the Gateway insights to be enabled:
• Only on the non-addressed Gateway vServer
• On the GW vServer and CS vServer
• On the GW, CS and AAA vServer
I need to be able to report who has been connecting to VPN and generate some level user session amounts.
r
Richard Faulkner
03/05/2025, 2:18 PMIf it is non-addressed, then the insights at the GW level may only show one client, the NetScaler. AAA should show you just the who is connected information and when. CS will show you that as well, I believe, but I have not fully tested it in the specific example you have given.
k
Kari Ruissalo (WyW)
03/05/2025, 2:21 PMI have only the GW now configured and it shows many sessions
Kari Ruissalo (WyW)
03/05/2025, 2:22 PMfor example with one days time frame, I'm seeing 506 sessions and 153 "full tunnel"
r
Richard Faulkner
03/05/2025, 2:23 PMGood to know. Is it giving you all the information you need? The gateway has the ability to gather all the HDX, which would have user information as well so I am not really surprised.
k
Kari Ruissalo (WyW)
03/05/2025, 2:27 PMA bit limited info I'd say
j
Jeff Riechers
03/06/2025, 1:36 PMYou want appflow on the gateway for the hdx and gateway insight. Those same policies can't apply on the content switch. I do it in my lab, works great.
Jeff Riechers
03/06/2025, 1:36 PMExcept for the fact you can't do DTLS 1.2 or HTTP QUIC with a content switch unfortunately.
k
Kari Ruissalo (WyW)
03/06/2025, 2:08 PMare you able to pick trend data using NSC from Gateway sessions, like unique user amounts etc... @Jeff Riechers, if so, where?
2 Views