VPN plugin prompts to downgrade the plugin instead of upgrade after Netscaler upgraded from 10.5 to 12.1 build and above

VPN plugin prompts to downgrade the plugin instead of upgrade after Netscaler upgraded from 10.5 to 12.1 build and above

book

Article ID: CTX247705

calendar_today

Updated On:

Description

> When Citrix ADC is upgraded Directly from 10.5 build to 12.1 build (more than 3 releases). , users are prompted with following error while connecting to the VPN "The Netscaler Gateway requires you to downgrade the client version from 10.5.X.X to 1.1.1.1"
 

Resolution

> Upgrade the NS and VPN/EPA plugins in two phases
   1. Upgrade ADC from 10.5 to 11.1 (Preferably) before upgrading to 12.1 build
   2. The plugin also should be upgraded to 11.1 build before upgrading to 12.1 build
> Another Workaround is manually modify the f_ndisagent.html  version to actual ADC version

Problem Cause

> We do not use f_ndisagent.html to check the plugin version from latest 11.0 build due to security reasons
> The version details on latest 12.1 build (12.1 60) changed to 1.1.1.1 instead of actual ADC build
> Since old 10.5 plugin has this logic to check f_ndisagent.html for version check, it detects 1.1.1.1 as a ADC version and hence prompting to downgrade