Citrix SD-WAN, formerly NetScaler SD-WAN

UPDATE: New builds are now available. Please see https://support.citrix.com/article/CTX227928 for more information.

Original article text:
Due to an issue found in the builds, NetScaler 10.1, 10.5, 11.0, 11.1 and 12.0 builds are not available for download temporarily. Currently, we are testing replacement builds, which we expect to release in the coming days.

In the meantime, our guidance is to make sure your NetScaler is configured following our best practices guides found at https://support.citrix.com/article/CTX121149 and https://docs.citrix.com/content/dam/docs/en-us/netscaler/media/secure-deployment-guide/NetScaler-Secure-Deployment-Guide.pdf.

1. Configure Authentication to Use SSH Keys
   SSH keys means that an attacker can’t get to the front door without a cryptographically sound login. You can’t attack what you can’t even connect to. For more details on configuring SSH keys, visit https://support.citrix.com/article/CTX109011.

2. Keep Your Management IPs (NSIP and configured SNIPs) on a Private Network
   In general, we always recommend keeping your management IP on a private network, preferably on an isolated VLAN. This limits the number of people that can even see the IP address, let alone connect to it.

3. Use ACLs to Limit Access to Your Management IPs
   The NetScaler has a rich set of Access Control Lists (ACLs) that limit who can connect to which IP address. These ACLs can also protect your management IPs. With ACLs, restrict access to only those networks from which your administrators will access.

Obtaining Support

If you require technical assistance with setting up any of the best practices, please contact Citrix Technical Support. Contact details for Citrix Technical Support are available at  http://www.citrix.com/site/ss/supportContacts.asp.

Thank you for your patience, and please stay tuned for further updates.