I am working on an Azure migration and need to move an existing Netscaler to another subscription. Since Azure does not support direct migration of this SKU I am wondering what's the best way to approach it? Just build a new NS in another subscription and configure from scratch (I don't have build automation for NS)? Or maybe build a base NS, install certs, and then restore config from ADM? What do you guys think?

For any NS migration i prefer to build from scratch! You can script a lot of course but in the end i prefer to migrate VIP by VIP. Disable the IP on the old config then enable the IP on the new config. If it works move to the next service, if there is any issue disable the IP on the new config and re-enable on the old config. Then start troubleshooting 🙂. Might take a little longer but extremely flexible. And perfect moment to re-evaluate every config line 🥳

this is more of all or nothing in my case as the VNET cannot exist in both subscriptions. I would have to take the old NS down, move the VNET and then rebuild