This message was deleted.
# citrix-netscalers
Slackbot
04/12/2021, 8:46 PMThis message was deleted.
m
Mike Streetz (O_P)
04/12/2021, 9:10 PMnetscaler really only has the authenticated user name, users public ip, the IP of the internal server they connected to, and the ports, and to see that in ICA sessions you need to enable connection mapping. https://support.citrix.com/article/CTX126853
c
Chai
04/12/2021, 9:11 PMJust verified, we dont have that option enabled. So, I assume none of the information is collected by netscaler.
m
Mike Streetz (O_P)
04/12/2021, 9:11 PMit is, it’s just not shown, turn it on
Mike Streetz (O_P)
04/12/2021, 9:11 PMit’ll show up
Mike Streetz (O_P)
04/12/2021, 9:17 PMit’s just creating a graphical table of the current IP connection table
c
Carl Behrent
04/12/2021, 11:00 PMLook at using Citrix ADM
⤴️ 1
r
Ray Davis
04/13/2021, 12:01 AMThe information is collected by the NetScaler, you just have to enable the filter.
c
Chai
04/13/2021, 7:16 AMWe r just looking at what is being collected right now. We have plan to integrate with ADM in future.
s
Stu Carroll
04/13/2021, 8:37 PMYou can determine a lot about the client OS a d browser from user-agent headers recorded in the ns.log which can be forwarded to syslog for greater retention.
m
Mike Streetz (O_P)
04/13/2021, 8:42 PMWhat user agent shows up when you use the inbuilt workspace app browser?
s
Stu Carroll
04/13/2021, 8:50 PMUser-agent is not so great when logging in via the workspace app but if you logon via browser you can gather some info - I’ve made some dashboards in splunk in the past using this data to extract some client info. My better to use appflow data in adm though
2 Views