Anyone have any Netscalers instances in AWS? I'm working on getting the built in agent talking to ADM Service, but currently we can't get out to the internet when traffic is sourced from the Netscalers. All other functions work, internal LBs, Netscaler Gateways, etc... We aren't using a NAT gateway and we don't have a public IP associated with the NSIP address (obviously don't want to expose that). Looks like an option is to use the NAT Gateway and use a PBR rule for NSIP source IPs....and another option to attached a public IP to the NSIP address and then use a security rule, netscaler ACLs to block the management from being accessible. Wonder what others are doing here?

That is what I was goin to recommend

If it is an HA pair the built in agent can be a bit tricky. If you can absorb the ~$50 per month, you can go with the license only ADM Agent. We had an issue with the built in BOT policy being bound globally preventing the NetScalers from communicating with Duo. I wonder if this is similar. I think both AWS and Azure are doing away with the default outbound route and requiring a NAT gateway now (pretty sure it is a make you pay for something reason). Can you ping baga.adm.cloud.com from the NetScalers? DNS can prevent the outbound as well. Just throwing out some ideas.

we dont have internet b/c there is no public ip associated with the managment IP, so the NSIP can't get out at all. To install the external agent in AWS, is that this offering from the marketplace? Looks like it's free, but prob have to pay for disk?

It is. But it is the "+AWS usage fees" that will cost you as it needs a 4 CPU 8 GB RAM appliance.

ah, for some reason thought they would advertise those here. is that not what you were referring to when you said "If you can absorb the ~$50 per month, you can go with the license only ADM Agent"

It is. you will need to pay for the 4 CPU 8 GB RAM 30 GB HDD

The external agent (netscaler service agent) aws marketplace instance worked well. Note, in order to kick off the deployment_type.py , you have to use python..... "python ./deployment_type.py". Confirmed it did reboot the netscaler when switching to LAS license.