Citrix - Pablo Legorreta - Cloud & Virtualization Expert

NetScaler CVE-2025-6543 and CVE-2025-5777 How to Exploit and Remediate

By Pablo Legorreta Citrix, NetScaler (ADC)1 Comment

Introduction Citrix NetScaler appliances, widely deployed in enterprise environments for load balancing, application delivery, and secure remote access, must be rigorously maintained against vulnerabilities. CVE-2025-6543 and CVE-2025-5777 represent critical security…

Redirect HTTP to HTTPS without DOWN server

By Pablo Legorreta NetScaler (ADC)2 Comments

Redirects on NetScaler permanently mark the service as down (read: RED status) which inevitably always leads to questions as to why it was configured with something marked down. There is a better way to perform HTTP to HTTPS redirects on NetScaler.

XenApp 7.6 Slow Login & Black Screen

By Pablo Legorreta Virtual Apps & Desktops (CVAD)

On Server 2012 R2 with XenApp 7.6 I noticed a strange phenomenon, when logging in, after the processing of my Group Policies my XenApp session would hang at a black screen for about 10 seconds

Moving Citrix XenApp & XenDesktop Policies Quickly

By Pablo Legorreta PowerShell, Scripting, Virtual Apps & Desktops (CVAD)1 Comment

In large environments, oftentimes there can be lots of Citrix Policies involved. The XenApp 6.5 and XenDesktop 7.x Studio and AppCenter consoles currently do not have an easy mechanism to move policies around quickly. This, however, can be easily accomplished by the use of PowerShell.

XenDesktop Changes made outside of console

By Pablo Legorreta Citrix, Scripting, Virtual Apps & Desktops (CVAD)1 Comment

Issue with CVAD 7.x where using Studio and PowerShell interchangeably can result in the error message "Changes made outside of this console, such as in PowerShell or management tools from previous versions, resulted in a discrepancy between policies. The assigned objects for policy "PolicyName" must match..."

Determine CVAD Device OS

By Pablo Legorreta Citrix, Scripting, Virtual Apps & Desktops (CVAD)

For certain things like pushing policies to certain types of devices or applying monitoring policies, or even troubleshooting, it can be useful to know the end-point Operating System that a user is on from CVAD.

NetScaler Gateway SmartAccess PoSh

By Pablo Legorreta Citrix, NetScaler (ADC), Virtual Apps & Desktops (CVAD)2 Comments

NetScaler Gateway SmartAccess depends on XML requests which need to be enabled. In the past, there was a policy to Trust Requests Sent to the XML Service Port, however, this policy has been removed from the Studio Policies

Citrix on OSX 10.10 Yosemite

By Pablo Legorreta Citrix, Mac, Scripting1 Comment

A feature introduced in Mac OSX 10.9 (Mavericks) which remains in OSX 10.10 (Yosemite) performs validation of ARP requests, which results in unicast ARP requests. These requests will time-out if the gateway on the host does not receive a timely response

XenServer 6.1 Limitations

By Pablo Legorreta XenServer3 Comments

List of limitations of XenServer 6.1

Monitoring XenServer

By Pablo Legorreta XenServer

"How do you monitor XenServer?" While this will greatly depend on how complex the environment is and what the administrators would like to ultimately monitor.