Be honest — how many of you apply new NetScaler builds immediately upon release, but only in cases where Citrix has not publicly disclosed any vulnerabilities or CVEs related to that build?

Lol good question. i've thought about it but haven't been that brave. Surprised they haven't released a 'netscaler upgrade service' like they did for VDA upgrades

Look into bcEvergreen then. 😉 https://braincon.de/bcevergreen-en/

We upgrade if there's a reason; ie. break/fix, feature, or the aforementioned vuln.

Our own NetScalers pretty much instantly. Both using bcEvergreen and manually, given we run BLX. At customers, it depends on their usage and feature set. We have a lot already on 14.1, and it’s more than stable enough.

Customers, security immediately. My lab, everything immediately, with lots of snapshots.

Save early, save often