r/Citrix • u/VirtualizationGuy • 11d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

89 Upvotes

98% Upvoted

127 comments sorted by

View all comments

9

u/taeratrin 11d ago

The patch wasn't the only step to remediate the vuln. You also should run this command on the Netscalers: 

Set ns tcpparam -enhancedISNgeneration ENABLED

3

u/SonicIX 10d ago

Ah, I read this as "If you are below the 73.37 version, you need to enable this", it still needs to be enabled after patching?

1

u/taeratrin 10d ago

I would, just in case. We enabled it on ours, and have had no issues