What is your procedure for recovering the NetScaler VPX configuration from a backup to a clean VM when the original VM is untrusted and its native backup mechanism doesn't support restoring onto a different instance?

Do you have access to the ns.conf? I can recommend the nsconf2iac tool so every instance is re-deployable

If you have the backup you can open it with 7zip and grab the SSL folder and ns.conf. I have recovered instances like this in the past. Also you can grab earlier ns.conf files from before the attacks as well.

I can see space for improvement for Citrix… in restoring to different instances.

@Arthur more than happy to forwards improvement ideas to PM - feel free to send me a DM. My personal take is that every instance should be redeployable trough automation. netscaler.com/blog/application-modernization/new-utility-converts-netscaler-configurations-into-iac-for-greater-automation netscaler.com/solutions/adc-automation

Wrong channel sorry!! 😢