This message was deleted.

just had the security bulletin email come in for ctx276688 more bloody firmware updates haha

I can't understand why citrix is pushing these informations to public / customers AND partners at the same time. everyone is confused...

The following versions of Citrix ADC, Citrix Gateway and Citrix SD-WAN WANOP remediate the vulnerabilities: • Citrix ADC and Citrix Gateway 13.0-58.30 and later releases • Citrix ADC and NetScaler Gateway 12.1-57.18 and later 12.1 releases

Scroll to the bottom of the link and you'll see firmware versions that its fixed in. You need to upgrade to one of these.

Any new issues after upgrade?

I hope 12.1 57.18 is a stable build...

I've only had to patch one so far, okay so far.

Do we have anything like patching Tuesday every quarter from Citrix or it’s just random?

One of my customers is seeing problems with backend ssl connections after updating to the latest 12.1 build: The StoreFront Service Group is not coming online again. How is your experience so far?

Did he reboot all NS in HA group ?

Yes and Failover various times

i would personally wait for a week the builds that was rushed out for CVE-2019-19781 had issues with radius and issues with pages that require extra input eg radius challenge page which caused them to crash out so i always leave the early adoption to others

Totally my opinion 😉 Stay calm and wait

Its good feedback. Julian, did you by any chance check the backend ssl profile?

I only was on the phone not troubleshooting myself. They said no packets have been seen going out with the help of nstcpdump.

Interesting. I've got a similar issue to troubleshoot with ica connections and the snip not being seen to be sending traffic to the vdas even though there is a route to the vdas. Its almost as of the route is not respected.

Customer is reporting nFactor issue with 57.18. If user is member of a "only one factor" group - "Login Schema does not permit current login request" message appears. If user is getting 2FA everything is OK. Anyone same?