Anyone configured Secure-MGMT feature (with two different routing tables) https://docs.netscaler.com/en-us/citrix-adc/current-release/networking/mgmt-and-data-plane-separation.html I've waited for this for years, but it breaks my AAA with SAML (Entra is IDP) 😕 so not sure on how it breaks internal processing of SAML Token. Debuglog shows "unknown error code in aaatm_handler 32" - as soon as I disable, SAML is working again

Would love to use it but it doesn't support Admin Partitions, traffic domains, Nutanix VPX etc.. Sounds to me like a quick and dirty implementation at this point.

Same as Frank... Has been a long debated subject in PTEC for many years... I was disappointed when I read the release notes so I still rely on my way of doing it though it means having to overcome dispatcher NSIP limitation that can't be solved with ACL/RNATs/PBR and implies setting up indirect monitoring of resources through internal LBs to spoof the dispatcher source IP with the desired SNIP.... A bit cumbersome (one set of internal LBVS/SVG per target machine plus one monitor per target resource monitored with dispatcher) but rock solid

I have had to move the monitor items off of the NSIP before and it is not fun. Securing the heartbeats is a nice new feature, but the strict separation I have not seen much, btu we have done it before.