Notice of Status Change Announcement for Citrix ADC (Formerly NetScaler ADC) Classic Policy Based Features and Functionalities

Citrix Systems, Inc. announces a Notice of Status Change (NSC) for Citrix ADC Classic policy-based features and functionalities. Table 1 below explains Citrix ADC life cycle management milestones as well as important information about dates and options during this period. The dates and milestones provided are in accordance with stated End of Life/End of Support policies for Citrix Systems, Inc.

Table 1. Milestones and Dates for Citrix ADC Classic policy-based features & functionalities

Milestone Definition Date/Release
Notice of Status Change The NSC date is the date on which Citrix announces the intent to initiate the lifecycle management process for Classic policy engine and some policy features. April 24, 2018
Feature Deprecation The dates on which these features and capabilities were deprecated. Users will be warned to switch to the replacement features when using given build (as suggested in Table 2 below). April 27, 2017 (12.0.41.16)

Dec 23, 2017 (12.0 56.20)
Feature Removal The Citrix ADC release from which these features will not be available* Q2 2021 (next Citrix ADC GA release – 13.1)

*Classic Gateway and AAA Pre-authentication policies will continue to remain available with no changes to existing functionality until Q2 2023. Citrix recommends that you move to Advanced policies which has enhanced features and functionalities.


Citrix ADC Features & Functionalities Affected

The features & functionalities affected by this announcement and their replacements are listed in Table 2 (below). The features & functionalities listed in the Feature Replacement column represent the migration path for these discontinued features/functionalities.

Table 2. Features & functionalities affected by this announcement

Feature Description Deprecation Initiated Feature Replacement
Citrix ADC features and its functionalities: –

  • SureConnect (SC)
  • Priority Queuing (PQ)
  • HTTP Denial of Service Protection (HDoSP)
12.0.41.16 AppQoE
SPDY 12.0.41.16 HTTP/2
HTMLInjection 12.0.41.16 AppFlow with Client-Side Measurements
Filter 12.0.41.16 Responder (for ERRORCODE, or DROP or RESET on the request side), Rewrite (for ADD or CORRUPT, or DROP or RESET on the response side), or Content Switching (for FORWARD).
Q and S prefixes in Advanced expressions 12.0.41.16 HTTP.REQ and HTTP.RES
Pattern function in Rewrite action 12.0.56.20 -Search Rewrite action parameter
Classic Named (policy) expression 12.0.56.20 Advanced policy expression
Application Firewall Classic policy 12.0.41.16 Application Firewall Advanced policy
Compression Classic policy 12.0.41.16 Compression Advanced policy
Classic Cache Redirection policy 12.0.41.16 Advanced Cache Redirection policy
Content Switching Classic policy 12.0.41.16 Content Switching Advanced policy
SSL Classic policy 12.0.41.16 SSL Advanced policy
Classic Audit SYSLOG policy 12.0.41.16 Advanced Audit SYSLOG policy
Classic Audit NSLOG policy 12.0.41.16 Advanced Audit NSLOG policy
Classic AAA Pre-authentication policy 12.0.56.20 Advanced AAA Pre-authentication policy
Authentication Local policy

RADIUS Authentication policy

LDAP Authentication policy

Authentication Certification (cert) policy

TACACS Authentication policy

Authentication Negotiate policy

SAML Authentication policy

Delegation Forms Authentication (DFA) policy

Web Authentication policy
12.0.56.20 Advanced Authentication policy (“add Authentication policy”)
Classic Authorization policy 12.0.41.16 Advanced Authorization policy
Classic Traffic Management Session policy 12.0.41.16 Advanced Traffic Management Session policy
Classic Tunnel Traffic policy 12.0.56.20 Advanced Tunnel Traffic policy
Classic VPN Traffic policy 12.0.41.16 Advanced VPN Traffic policy
Classic VPN Session policy 12.0.41.16 Advanced VPN Session policy
Trace Classic expression 12.0.41.16 Trace Advanced expression
SYS.EVAL_CLASSIC_EXPR Classic function 12.0.41.16 Converting function to Advanced, replacing SYS.EVAL_CLASSIC_EXPR
Client Security expression 12.0.56.20 Advanced Authorization policy

Recommendations for Customers

Citrix recommends that all Citrix ADC customers take steps to switch from the deprecated features & functionalities to the corresponding replacements suggested in Table 2 above. Customers can convert Classic policy expressions to Advanced policy expressions using nspepi tool and it is available in /netscaler/ directory of every released firmware. Please find below example for how to use nspepi tool

>shell>cd /netscaler/>nspepi -f /nsconfig/ns.conf----- new_ns.config file will be created having updated configs>cp new_ns.config ns.config------- copy content of new file to running ns config fileBoot the Citrix ADC instance to make updated ns.config effective.

We have anticipated some scenarios that customers might face due to this Change, and their respective resolutions.

Table 3. Sample scenarios with respective resolutions.

Scenario Resolution
I will be moving from a build where a feature mentioned in Table 2 is supported (example, Citrix ADC 11.0) to a build where the feature is not supported (example, Citrix ADC 13.1). What actions do I need to take? Please use the above Table 2 for finding replacement feature of individual feature that is being removed.
I will be moving from a build where a feature mentioned in Table 2 is deprecated (example, Citrix ADC 12.0.56) to where a build where the feature is not supported (example, Citrix ADC 13.1). What actions do I need to take? Please use the above Table 2 for finding replacement feature of individual feature that is being removed.
How do I convert my existing Classic policy Expressions to Advance policy Expressions? Please use nspepi tool
How do I convert mix of Classic policy Expressions & Advance policy Expressions to only Advance policy Expressions? Please use nspepi tool
I am currently using a build on which a feature mentioned in Table 2 is supported and have no immediate plans of upgrade, how long will I have support for this feature? Support will be provided as per current software support guidelines.
I am adding new deprecated configurations or modifying existing deprecated configs on the builds where Classic policy Expressions are deprecated (e.g. 12.0.56). What is recommended in this case? We recommend not to use deprecated policies and expressions. Please use the above Table 2 for finding replacement feature of individual required feature.

Related:

  • No Related Posts

Leave a Reply