This article contains information about the nsconmsg commands executed from the FreeBSD UNIX command line interface to find the policy hits for the Citrix Gateway policy types such as authentication and session. This syntax will also show hits for Citrix ADC feature policy types including Rewrite, Responder, Content Switching, and ACLs.

The nsconmsg commands are helpful in identifying the real-time hits on the policies and for validating whether the expressions used for these policies are correct or not.

 These commands must be run from FreeBSD UNIX shell on a Citrix ADC or Citrix Gateway appliance.

To access the FreeBSD UNIX shell, connect using SSH version 2 to the appliance NSIP address and then run the shell command. Then, use the example syntax further below to view real-time hits of policies as they are invoked.
 

• Within Citrix ADC / Citrix Gateway firmware versions 12.0, 12.1, or newer, policy symbols within nsconmsg output will be represented as pol_hits, pcb_hits, or pcp_hits. If the policy uses classic expression syntax then output will contain pol_hits. If the policy uses advanced / default expression syntax then output will contain pcb_hits or pcp_hits. Use this syntax to catch all types:

nsconmsg -d current  -g _hits

• Within Citrix ADC / Citrix Gateway firmware version 11.1 or older, use this syntax to view authentication policy or session policy hits:

nsconmsg -d current -g pol_hits

• Within Citrix ADC / Citrix Gateway firmware version 11.1 or older, use this syntax to view all policy type hits (including route, ACL, VLAN, content switching, rewrite, and so on):

nsconmsg -d current -g _hits

Additional Resources

CTX113341 - How to Obtain Performance Statistics and Event Logs from NetScaler