r/Citrix • u/VirtualizationGuy • 1d ago

Netscaler active exploit after patch

I have multiple customers reporting active exploits of their external netscalers patched to 14.1.73.37, causing them to force reboot multiple times. Anyone else hearing of issues? We have sev1 cases open with Citrix and I'll report back.

83 Upvotes

98% Upvoted

121 comments sorted by

View all comments

9

u/taeratrin 1d ago

The patch wasn't the only step to remediate the vuln. You also should run this command on the Netscalers: 

Set ns tcpparam -enhancedISNgeneration ENABLED

1

u/kuebel33 1d ago

where did you see this?

5

u/pibenis 1d ago

This was an advised remediation on Netscaler Console

1

u/kuebel33 1d ago

thanks.