Command Center :20:00 UTC Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement

Transcription

1 Command Center :20:00 UTC 2015 Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement

2 Contents Command Center Command Center Command Center 4.0 Release Notes Command Center 4.0 Release Notes New in This Release Bug Fixes in Release Limitations Known Issues and Workarounds Citrix Products Supported Installing Command Center Software Before You Begin Hardware Requirements Disk Space for Performance Management Operating System Requirements Database Requirements Additional Linux Requirements Client Requirements Port Settings Database Settings Installing the Command Center Server on Windows Installing Command Center Agents on Windows Starting the Command Center Server on Windows Shutting Down the Command Center Server on Windows Uninstalling the Command Center Server from Windows Installing the Command Center Server as a Windows Service Installing the Service Running the Command Center Server as a Windows Service Stopping the Command Center Server Running as a Service Uninstalling the Service

3 Installing the Command Center Server on Linux Installing Command Center Agents on Linux Starting the Command Center Server on Linux Shutting Down the Command Center Server Uninstalling the Command Center Server from Linux Installing the Command Center Server as a Linux Startup Service Installing the Service Running the Command Center Server as a Linux Service Stopping the Command Center Server from Running as a Service 71 Uninstalling the Service Setting the Command Center Communication Mode Installing the Command Center Server in High Availability Mode Installing Certificates for Secure Communication Generating a New Certificate and Key Copying the Certificate and Key Files to Your Command Center Server 77 Converting the Certificate and Key to pkcs#12 Format Importing the Certificate into Truststore Changing the Password for Keystore Applying the Certificate Changes to the Command Center Server 81 Upgrading Command Center Migrating MySQL Database Installing the Service Pack Getting Started with Command Center Logging on to Command Center Adding Devices Understanding the Discovery Process Provisioning NetScaler VPX Devices on XenServers Viewing the Discovery Status of Devices Viewing Inaccessible Devices Monitoring the Citrix Network Configuring Maps Adding Maps Adding Submaps Modifying Maps Deleting Maps Performing Operations on Maps Configuring NetScaler Pool

4 Viewing the NetScaler Pool Dashboard Performing Operations on NetScaler Pool Monitoring Two-Tier Application View Monitoring Datacenter View Monitoring Devices Viewing Device Properties Running Reports Viewing Events and Alarms Executing Tasks Running Configuration Audits Invoking the CLI of NetScaler Devices Invoking the User Interface of NetScaler Devices Invoking the CLI and User Interface of Repeater Devices Generating the Tar Archive of Configuration Data of NetScaler Devices 121 Replicating a Repeater Device's Configuration to Other Repeater Devices 122 Viewing the Replication Status of Repeater Devices Viewing the Device Configuration of Repeater Devices Searching Devices from Device Inventory Configuring the Location Restarting Devices Pinging Devices Tracing the Route of Devices Viewing the Discovery Status Rediscovering Devices Moving Devices to Another Map Deleting Devices Unmanaging Devices Performing Operations Specific to HA Devices Doing a Force Failover Staying as Secondary on Secondary Devices Monitoring Your Network by Using the Home Page Understanding the Alarm Summary Monitoring Device Inventory Monitoring Active Alarms Monitoring Recent Alarms Finding Devices Monitoring and Managing Events Generated on Citrix Devices

5 Monitoring SNMP Events and Alarms Viewing Events Viewing Alarms Configuring Views for Events and Alarms Adding Views for Events and Alarms Modifying Views Deleting Views Searching Events and Alarms Managing SNMP Events and Alarms Assigning Alarms to Users Viewing and Managing Alarms Assigned to a User Printing a List of Events and Alarms Setting the Auto Refresh Interval for Events and Alarms Saving List of Events and Alarms to a File Assigning Severity to Events Clearing and Deleting Alarms Monitoring Syslog Events Configuring Command Center as the Syslog Server Viewing Syslog Messages Configuring Syslog Views Adding Syslog Views Modifying Syslog Views Deleting Syslog Views Configuring Event and Alarm Triggers Monitoring and Managing the Real-Time Status of Entities Configured on NetScaler Devices... Monitoring Virtual Servers, Services, and Service Groups Viewing the Status of Virtual Servers Viewing Services and Service Groups Bound to a Virtual Server 175 Viewing the Status of Services Viewing the Virtual Servers to which a Service is Bound Viewing the Status of Service Groups Viewing the Virtual Servers to which a Service Group is Bound 179 Configuring Views Adding Views for Virtual Servers Adding Views for Services Adding Views for Service Groups Modifying Views

6 Deleting Views Managing the Real-Time Status of Entities Configuring the Polling Interval Enabling or Disabling Virtual Servers Enabling or Disabling Services Enabling or Disabling Service Groups Viewing the Audit Trail Searching Virtual Servers, Services, and Service Groups Polling the Status of Virtual Servers, Services, and Service Groups 193 Customizing Columns Using Tasks to Configure Managed Devices Managing Built-in Tasks Upgrading NetScaler with Built-in Tasks Configuring NetScaler with Built-in Tasks Upgrading Repeater with Built-in Tasks Configuring Repeater with Built-in Tasks Viewing Built-in Tasks Executing Built-in Tasks Viewing the Execution Log for Specific Built-in Tasks Scheduling Built-in Tasks Exporting Built-in Tasks Configuring Custom Tasks Adding Custom Tasks Adding New Custom Tasks Adding Custom Tasks from Command Files Adding Custom Tasks by Importing from Task Files Executing Custom Tasks Viewing the Execution Log for Specific Custom Tasks Scheduling Custom Tasks Exporting Custom Tasks Modifying Custom Tasks Deleting Custom Tasks Customizing Built-in and Custom Tasks Viewing the Execution Log for all Tasks Monitoring and Managing SSL Certificates Configured on NetScaler Devices Enabling or Disabling Certificate Management Viewing the Current Status of SSL Certificates

7 Setting the Polling Interval for SSL Certificates Setting the Expiry Criteria of SSL Certificates Generating Certificate Signing Requests Updating SSL Certificates Viewing the Audit Trail for SSL Certificates Downloading SSL Certificates Auditing Configuration Changes Across NetScaler Devices Configuring Audit Templates Adding Audit Templates Modifying Audit Templates Deleting Audit Templates Configuring Audit Policies Adding User-Defined Audit Policies Executing Built-in and User-Defined Audit Policies Scheduling Built-in and User-Defined Audit Policies Modifying User-Defined Audit Policies Deleting User-Defined Audit Policies Generating Audit Reports Viewing Audit Reports Exporting Audit Reports Setting Auto Refresh Interval for Audit Reports Deleting Audit Reports Using Performance Reports and Thresholds to Monitor Device Performance Configuring Polled Counters Running Quick Reports Configuring Custom Reports Using Built-in Custom Reports Adding Custom Reports Viewing Custom Reports Scheduling Custom Reports Modifying Custom Reports Deleting Custom Reports Configuring Thresholds to Monitor Devices Adding Threshold Limits Modifying Thresholds Deleting Thresholds Monitoring AppFirewall Syslog Events

8 Using the Dashboard Using Reports Viewing Recent Log Messages Configuring Views Adding Views Modifying Views Searching Recent AppFirewall Log Messages Administering Command Center Configuring Discovery Settings Configuring Device Profiles Adding Device Profiles Viewing Device Profiles Modifying Device Profiles Deleting Device Profiles Configuring Server Settings Configuring Inventory Settings Configuring High Availability Settings Configuring Mail Server Settings Configuring Access Settings Setting Up Command Center Agents Configuring Security Settings Configuring Authentication Settings Configuring Groups Adding Groups Assigning Users to Groups Modifying Groups Deleting Groups Configuring Users Adding Users Assigning Groups to a User Viewing Permissions Assigned to Users Modifying User Profiles Changing the Root User Password Deleting Users Viewing Audit Logs for All Users Configuring Logs Generating Support Logs

9 Viewing Server Logs Configuring Server Log Settings Viewing Server and Logged-in User Information Changing the Database Password Shutting Down the Command Center Server NetScaler SNMP Counters Polled from Command Center AAA Counters ACL Counters ACL Table Counters ACL6 Counters ACL6 Table Counters Application Firewall Counters Cache Redirection Policies Counters Compression Counters Content Filters Counters Content Switch Policies Counters CPU Usage Counters DNS Counters GSLB Counters HTTP Counters ICMP Counters Integrated Cache Counters IP Counters Interface Counters Policy Engine Counters Resources Counters Simple ACL Counters SSL Counters Service Groups Counters Services Counters Sure Connect Counters System Disk Counters TCP Counters UDP Counters VLAN Counters Virtual Servers Counters Virtual Services Counters

10 10 VPN Counters

11 Command Center 4.0 Citrix Command Center is a management and monitoring solution for Citrix application networking products that include Citrix NetScaler, Citrix Access Gateway Enterprise Edition, Citrix Branch Repeater, and Citrix Repeater. Use Command Center to manage, monitor, and troubleshoot the entire global application delivery infrastructure from a single, unified console. What's New in Command Center 4.0 Command Center 4.0 provides two types of Command Center server installation, the Evaluation type with pre-packaged PostgreSQL database and the more flexible Typical installation type for production environment. This release also provides a distributed multi-tier setup that reduces the load on the Command Center server. There are enhancements in the discovery process too. Now, adding devices for discovery is no longer attached to the creation of maps. With this release, you can configure NetScaler pools, provision NetScaler VPX devices on a XenServer, and monitor devices configured in a two-tier architecture. This release provides a dashboard and built-in reports to monitor application firewall syslog events. This release also provides support for Citrix Branch Repeater VPX devices. New built-in tasks are now available. For more information, see New in This Release. In This Section Citrix NetScaler and Branch Repeater Versions Supported Installing Command Center Upgrading Command Center Getting Started with Command Center Monitoring the Citrix Network Monitoring Devices Provides a list of the NetScaler and Branch Repeater versions that Command Center supports. Provides step-by-step instructions for installing Command Center server on Windows Server and Linux operating systems. Also included is information about certificates and using Command Center as a startup service. Provides step-by-step instructions for upgrading Command Center server on Windows Server and Linux operating systems. Provides instructions on how to log on to Command Center and begin monitoring and managing Citrix devices. Provides instructions on how to monitor the Citrix network using different views. Describes the operations you can perform on Citrix devices from the Citrix Network tab. 11

12 Command Center 4.0 Monitoring Your Network by Using the Home Page Monitoring and Managing Events Generated on Citrix Devices Monitoring and Managing the Real-Time Status of Entities Configured on NetScaler Devices Using Tasks to Configure Managed Devices Monitoring and Managing SSL Certificates Configured on NetScaler Devices Auditing Configuration Changes Across NetScaler Devices Using Performance Reports and Thresholds to Monitor Device Performance Administering Command Center NetScaler SNMP Counters Polled from Command Center Describes the high-level view of the performance of your Citrix network. Provides a conceptual reference and instructions for monitoring and managing the SNMP and Syslog events generated on the Citrix devices. Provides a conceptual reference and instructions for monitoring and managing the states of virtual servers, services, and service groups across the NetScaler infrastructure. Provides a conceptual reference and instructions for using built-in and custom tasks to make configuration changes across devices. Provides a conceptual reference and instructions for monitoring and managing SSL certificates installed across all managed NetScaler devices. Provides a conceptual reference and instructions for monitoring and auditing configuration changes across managed NetScaler devices. Provides a conceptual reference and instructions for monitoring the performance of discovered Citrix devices by using performance reports and threshold functionality. Also provides instructions for monitoring Application Firewall syslog events. Provides a conceptual reference and instructions for administering and securing the Command Center server. Describes the SNMP counters that Command Center polls from NetScaler devices to gather performance data. 12

13 Command Center 4.0 Release Notes The Citrix Command Center Release Notes describe the new features and enhancements, bug fixes, limitations, and known issues and workarounds in Citrix Command Center release 4.0. In this section: New in This Release Bug Fixes in Release 4.0 Limitations Known Issues and Workarounds 13

14 Command Center 4.0 Release Notes The Citrix Command Center Release Notes describe the new features and enhancements, bug fixes, limitations, and known issues and workarounds in Citrix Command Center release 4.0. In this section: New in This Release Bug Fixes in Release 4.0 Limitations Known Issues and Workarounds 14

15 New in This Release The Citrix Command Center release 4.0 includes the following new features and enhancements. Changes in Database Requirements With this release, the following databases are supported. MySQL 5.0 and higher with InnoDB storage engine Microsoft SQL Server 2005 Oracle 10g Packaged Postgre SQL with the Evaluation installation type of Command Center Also, Command Center 4.0 no longer supports internal MySQL that was packaged with earlier releases of Command Center. If you are using Command Center release 3.x with internal or external MySQL database version earlier than 5.0 and/or with MyISAM storage engine, you must migrate your data to a MySQL database running 5.0 or later with InnoDB storage engine by running the Data Migration executable. For more information, see Upgrading Command Center. Operating System Support With this release, you can install the Command Center server on Windows Server Types of Command Center Server Installation There are two types of server installation: Evaluation and Typical. The installation type is specified at the start of the installation process. Evaluation: Quickly installs the Command Center server by installing the pre-packaged PostgreSQL database and by using predefined defaults. Although this installation type provides all functionality of Command Center, it is not supported in production environment. Citrix recommends you use this installation type only for evaluation purposes. Typical: Provides more flexibility and enables you to connect to an external database and specify the security mode you want to use. This installation type provides all Command Center functionality and Citrix recommends you use this in production 15

16 Command Center 4.0 Release Notes environment. For more information on the server installation types, see Installing Command Center. Command Center in Distributed Multi-Tier Architecture To manage and monitor such large number of devices, you can now set up Command Center in a distributed multi-tier architecture by configuring Command Center agents to monitor the Citrix devices. This architecture reduces the load on the Command Center server by distributing the load across the different agents. The agents are used for polling and collecting data used for performance monitoring, such as CPU usage, resource utilization, and IP bytes transmitted, and for certificate management. You can install the Command Center agents by using the Command Center installation package available at: After the agents are installed and connected to the Command Center server, you can view the agent details on the Administration tab from the Command Center client. You can activate the agents from the client, and then assign devices to the agent to manage. You can also monitor the state of the agents from your Command Center client. For more information, see Installing Command Center. Enhancements in Device Discovery Process Adding devices for discovery is no longer attached to the creation of maps. To add devices, you do not need to add maps. You can add devices and schedule them for discovery from the Device Inventory pane. After the devices are discovered, you can group them under maps. A device can be, now, added to more than one map. For more information, see Getting Started with Command Center. This new process of discovery introduces the following enhancements: Device Inventory Using this, you can monitor all Citrix devices, including inaccessible devices. You can also perform various operations, such as run report, config audit, and execute task on single and multiple devices from this view. To navigate to the device inventory view, on the Citrix Network tab, in the left pane, under Citrix Network, click Device Inventory. Device Profiles Device profiles specify the user credentials and SNMP details that are used by Command Center to communicate with the Citrix devices and retrieve configuration data and SNMP traps. You can create device profiles for the three device families: NetScaler, Repeater, and XenServer. These device profiles are used by Command Center to discover the Citrix devices. You can add device profiles in two ways: 16

17 Command Center 4.0 Release Notes From the Administration tab. For more information, see Setting Up Command Center Agents. When adding devices from the Citrix Network tab. For more information, see "Adding Devices" in the Citrix Command Center online Help. Enhancements in Maps With this release, maps are not part of the device discovery process. Maps are used only to group devices. Devices deleted from a map continue to be managed by Command Center. You can use maps in the following two ways: You can add a map and group devices under it logically, such as based on features configured on your devices. You can add a NetScaler pool and add devices to it. The devices added in maps configured as NetScaler pools are considered one logical unit. For more information, see Monitoring the Citrix Network. Configure and Monitor NetScaler Pools A map configured as a NetScaler pool consists of devices that are considered as one logical unit. All configuration changes are done on all the devices in a pool. You may have a NetScaler pool already configured on your network; in which case, you need to add the devices that are part of the pool when adding the map. Or, you may configure a NetScaler pool from Command Center. In this case, add the devices that you want to be part of the pool when adding the map. These devices are displayed as a single unit on the Maps pane. You then need to configure the NetScaler pool by adding VIPs to it. Command Center implicitly configures these VIPs across all the NetScaler devices added to the pool and sets up a distributed VIP configuration. You can then view the configured VIP status across all the NetScaler devices in that pool. The NS Pool Dashboard provides a tabular view of the VIPs assigned to the NetScaler devices based on the priorities assigned to the VIPs. The active VIPs are depicted by a green icon. For more information, see Monitoring the Citrix Network. Note: This feature is supported only for NetScaler devices running release 9.2 nc. Provision NetScaler VPX Devices on XenServers You can now discover XenServer devices from Command Center and provision NetScaler VPX devices on XenServer, and consequently manage and monitor the NetScaler VPX instances. First, you need to add a XenServer device and set it for discovery. After the XenServer is discovered, provision the NetScaler VPX devices on the XenServer from the Command Center client. Command Center implicitly deploys NetScaler VPX devices on the XenServer, 17

18 Command Center 4.0 Release Notes and then discovers the NetScaler VPX devices for monitoring and management. If you have NetScaler VPX devices already installed on a XenServer, discovering the XenServer implicitly discovers all the NetScaler VPX devices. Note: Command Center is used to manage single or multiple NetScaler VPX instances. To manage XenServer, use the XenCenter client. For more information, see Monitoring the Citrix Network. Citrix Branch Repeater VPX Support With this release, Citrix Branch Repeater VPX is supported and is depicted using the icon BR. Support for Two-Tier Application View You can view and monitor applications configured on NetScaler devices set up in a two-tier architecture. For example, consider that you have a load balancing virtual server configured on a NetScaler in tier-1. And you have three NetScaler VPX devices with load balancing virtual servers configured in tier-2. Now, on the NetScaler MPX in tier-1, you configure and bind services that represent the virtual servers on your NetScaler VPX devices in tier-2. Using Command Center you can view and monitor the devices and the entities configured in this topology. For more information, see Monitoring the Citrix Network. View Devices Based on Location The Datacenter pane groups the discovered Citrix devices based on the location configured on these devices. For example, if you configure the Location value of a set of devices as Santa Clara, Command Center groups these devices within the Santa Clara group. Further if you change the Location value of a device, Command Center regroups the device on subsequent rediscovery of the device. For more information, see Monitoring the Citrix Network. Support for AppFirewall Syslog Events Monitoring With this release, you can monitor the security violations encountered on the NetScaler devices by the Application Firewall module. By default, you can view the security violations encountered in the last one week. 18

19 Command Center 4.0 Release Notes Command Center provides four built-in reports to monitor the top security violations encountered by the application firewall feature. These reports let you monitor violations encountered by clients, devices, and profiles, and also the different types of violations. You can also view the details of the AppFirewall log messages when a message is generated on a security violation. To monitor the AppFirewall syslog messages, on the Reporting tab, in the left pane, under AppFirewall, click Dashboard. For more information, see Using Performance Reports and Thresholds to Monitor Devices. Enhancements in Authorization Interface With this release, you can set permissions for groups and users by using a simplified authorization user interface. You can assign read, write, and execute permissions to groups for each feature of Command Center. When adding groups, under Delegated Administration, select the check boxes against the permissions you want to assign for each feature. Note that selecting Grant administrative privileges assigns permission to perform all operations on only the Administration tab. New Built-in Tasks With this release, the following built-in tasks have been introduced: ConfigureRemoteLicenseServer: Configure multiple Branch Repeater VPX devices to use a centralized licensing server. ConfigureLocalLicenseServer: Configure multiple Branch Repeater VPX devices to use local licensing server. SoftwareUpgrade-8.xto9.0: Software upgrade from the 8.x release to any version of the 9.0 release of NetScaler, or software upgrade from the 9.0 release to a newer version of

20 New in This Release The Citrix Command Center release 4.0 includes the following new features and enhancements. Changes in Database Requirements With this release, the following databases are supported. MySQL 5.0 and higher with InnoDB storage engine Microsoft SQL Server 2005 Oracle 10g Packaged Postgre SQL with the Evaluation installation type of Command Center Also, Command Center 4.0 no longer supports internal MySQL that was packaged with earlier releases of Command Center. If you are using Command Center release 3.x with internal or external MySQL database version earlier than 5.0 and/or with MyISAM storage engine, you must migrate your data to a MySQL database running 5.0 or later with InnoDB storage engine by running the Data Migration executable. For more information, see Upgrading Command Center. Operating System Support With this release, you can install the Command Center server on Windows Server Types of Command Center Server Installation There are two types of server installation: Evaluation and Typical. The installation type is specified at the start of the installation process. Evaluation: Quickly installs the Command Center server by installing the pre-packaged PostgreSQL database and by using predefined defaults. Although this installation type provides all functionality of Command Center, it is not supported in production environment. Citrix recommends you use this installation type only for evaluation purposes. Typical: Provides more flexibility and enables you to connect to an external database and specify the security mode you want to use. This installation type provides all Command Center functionality and Citrix recommends you use this in production 20

21 New in This Release environment. For more information on the server installation types, see Installing Command Center. Command Center in Distributed Multi-Tier Architecture To manage and monitor such large number of devices, you can now set up Command Center in a distributed multi-tier architecture by configuring Command Center agents to monitor the Citrix devices. This architecture reduces the load on the Command Center server by distributing the load across the different agents. The agents are used for polling and collecting data used for performance monitoring, such as CPU usage, resource utilization, and IP bytes transmitted, and for certificate management. You can install the Command Center agents by using the Command Center installation package available at: After the agents are installed and connected to the Command Center server, you can view the agent details on the Administration tab from the Command Center client. You can activate the agents from the client, and then assign devices to the agent to manage. You can also monitor the state of the agents from your Command Center client. For more information, see Installing Command Center. Enhancements in Device Discovery Process Adding devices for discovery is no longer attached to the creation of maps. To add devices, you do not need to add maps. You can add devices and schedule them for discovery from the Device Inventory pane. After the devices are discovered, you can group them under maps. A device can be, now, added to more than one map. For more information, see Getting Started with Command Center. This new process of discovery introduces the following enhancements: Device Inventory Using this, you can monitor all Citrix devices, including inaccessible devices. You can also perform various operations, such as run report, config audit, and execute task on single and multiple devices from this view. To navigate to the device inventory view, on the Citrix Network tab, in the left pane, under Citrix Network, click Device Inventory. Device Profiles Device profiles specify the user credentials and SNMP details that are used by Command Center to communicate with the Citrix devices and retrieve configuration data and SNMP traps. You can create device profiles for the three device families: NetScaler, Repeater, and XenServer. These device profiles are used by Command Center to discover the Citrix devices. You can add device profiles in two ways: 21

22 New in This Release From the Administration tab. For more information, see Setting Up Command Center Agents. When adding devices from the Citrix Network tab. For more information, see "Adding Devices" in the Citrix Command Center online Help. Enhancements in Maps With this release, maps are not part of the device discovery process. Maps are used only to group devices. Devices deleted from a map continue to be managed by Command Center. You can use maps in the following two ways: You can add a map and group devices under it logically, such as based on features configured on your devices. You can add a NetScaler pool and add devices to it. The devices added in maps configured as NetScaler pools are considered one logical unit. For more information, see Monitoring the Citrix Network. Configure and Monitor NetScaler Pools A map configured as a NetScaler pool consists of devices that are considered as one logical unit. All configuration changes are done on all the devices in a pool. You may have a NetScaler pool already configured on your network; in which case, you need to add the devices that are part of the pool when adding the map. Or, you may configure a NetScaler pool from Command Center. In this case, add the devices that you want to be part of the pool when adding the map. These devices are displayed as a single unit on the Maps pane. You then need to configure the NetScaler pool by adding VIPs to it. Command Center implicitly configures these VIPs across all the NetScaler devices added to the pool and sets up a distributed VIP configuration. You can then view the configured VIP status across all the NetScaler devices in that pool. The NS Pool Dashboard provides a tabular view of the VIPs assigned to the NetScaler devices based on the priorities assigned to the VIPs. The active VIPs are depicted by a green icon. For more information, see Monitoring the Citrix Network. Note: This feature is supported only for NetScaler devices running release 9.2 nc. Provision NetScaler VPX Devices on XenServers You can now discover XenServer devices from Command Center and provision NetScaler VPX devices on XenServer, and consequently manage and monitor the NetScaler VPX instances. First, you need to add a XenServer device and set it for discovery. After the XenServer is discovered, provision the NetScaler VPX devices on the XenServer from the Command Center client. Command Center implicitly deploys NetScaler VPX devices on the XenServer, 22

23 New in This Release and then discovers the NetScaler VPX devices for monitoring and management. If you have NetScaler VPX devices already installed on a XenServer, discovering the XenServer implicitly discovers all the NetScaler VPX devices. Note: Command Center is used to manage single or multiple NetScaler VPX instances. To manage XenServer, use the XenCenter client. For more information, see Monitoring the Citrix Network. Citrix Branch Repeater VPX Support With this release, Citrix Branch Repeater VPX is supported and is depicted using the icon BR. Support for Two-Tier Application View You can view and monitor applications configured on NetScaler devices set up in a two-tier architecture. For example, consider that you have a load balancing virtual server configured on a NetScaler in tier-1. And you have three NetScaler VPX devices with load balancing virtual servers configured in tier-2. Now, on the NetScaler MPX in tier-1, you configure and bind services that represent the virtual servers on your NetScaler VPX devices in tier-2. Using Command Center you can view and monitor the devices and the entities configured in this topology. For more information, see Monitoring the Citrix Network. View Devices Based on Location The Datacenter pane groups the discovered Citrix devices based on the location configured on these devices. For example, if you configure the Location value of a set of devices as Santa Clara, Command Center groups these devices within the Santa Clara group. Further if you change the Location value of a device, Command Center regroups the device on subsequent rediscovery of the device. For more information, see Monitoring the Citrix Network. Support for AppFirewall Syslog Events Monitoring With this release, you can monitor the security violations encountered on the NetScaler devices by the Application Firewall module. By default, you can view the security violations encountered in the last one week. 23

24 New in This Release Command Center provides four built-in reports to monitor the top security violations encountered by the application firewall feature. These reports let you monitor violations encountered by clients, devices, and profiles, and also the different types of violations. You can also view the details of the AppFirewall log messages when a message is generated on a security violation. To monitor the AppFirewall syslog messages, on the Reporting tab, in the left pane, under AppFirewall, click Dashboard. For more information, see Using Performance Reports and Thresholds to Monitor Devices. Enhancements in Authorization Interface With this release, you can set permissions for groups and users by using a simplified authorization user interface. You can assign read, write, and execute permissions to groups for each feature of Command Center. When adding groups, under Delegated Administration, select the check boxes against the permissions you want to assign for each feature. Note that selecting Grant administrative privileges assigns permission to perform all operations on only the Administration tab. New Built-in Tasks With this release, the following built-in tasks have been introduced: ConfigureRemoteLicenseServer: Configure multiple Branch Repeater VPX devices to use a centralized licensing server. ConfigureLocalLicenseServer: Configure multiple Branch Repeater VPX devices to use local licensing server. SoftwareUpgrade-8.xto9.0: Software upgrade from the 8.x release to any version of the 9.0 release of NetScaler, or software upgrade from the 9.0 release to a newer version of

25 Bug Fixes in Release 4.0 The following tables list the bugs fixed in Command Center release 4.0. Bug Fixes in Release 4.0 Build Issue ID Issue Description An out of memory error occurs when the Command Center server polls large number of performance counters The correlated events for alarms are not displayed when you click View Events (Fault > Alarms > View Events) In an HA environment, the action is not triggered when the threshold is crossed though the event for the threshold is generated If you rediscover a NAT Repeater that is configured as an HA pair by clicking Rediscover on Citrix Network, the HA pair breaks. Bug Fixes in Release 4.0 Build Issue ID Issue Description While upgrading the Command Center server to , if the first device in the list of NetScaler devices is a secondary device, the update of SNMP OID fails If you specify a pattern in the Alarm Message field to filter the incoming messages, the alarm trigger does not work. Bug Fixes in Release 4.0 Build 23.8 Issue ID Issue Description If you have installed Command Center on a Linux server, and if you are using either internal Postgre SQL database or an external My SQL database installed on the same system as your Command Center server, then Command Center server may fail to start up. 25

26 Bug Fixes in Release If you are using Command Center to manage NetScaler release 9.1 build 103 or later and NetScaler release 9.2 build 45 or later, features such as entity monitoring, fault management, and performance reporting will not work because the SNMP OIDs have been changed on these versions of the NetScaler and Command Center is unable to query the changed OIDs. For information on the list of updated OIDs on NetScaler release 9.2 build 45, see Updated SNMP OIDs For information on the list of updated OIDs on NetScaler release 9.1 build 103, see Updated SNMP OIDs For Repeater devices, for counters under the group Repeater Service Classes +, the instance priority has been changed to Service Class Name If you are using MS SQL or Oracle database, after upgrading to Command Center release 4.0, the Events and Alarm tables are not indexed. This results in a hang on clicking the Fault tab When the number of data points plotted in a chart exceeds the default value (6000), the following error message is displayed: NO DATA TO CHART The syslog dashboard for system syslog messages (Fault > Syslog > Complete View) and the application firewall recent log messages pane(reporting > AppFirewall > Recent Logs) do not display the event ID If your event filter name contains space in the beginning or end of the filter name, you cannot modify or delete this filter You cannot download SSL certificate file names if the certificate file name and the key file name are the same. Bug Fixes in Release 4.0 Build 23.4 Issue ID Issue Description 26

27 Bug Fixes in Release If the string "$" is present the SNMP community of discovered devices, the database migration of newly introduced counters for existing devices fails. As a result, while running performance reports on these counters, the message "No Data to chart" is shown Command Center server running with internal PostgreSQL database does not start on non-english locale systems For Repeater and Branch Repeater devices, the system name does not get displayed in the Sys Name column on the Device Inventory page After you upgrade your Command Center server from release 3.2 build 34.5 to release 4.0 using a service pack, the Command Center high availability pair does not work Command Center high availability fails to work if a firewall is configured on the system While upgrading the Command Center server to release 4.0, upgrade failed during data migration for Oracle 10g database. Bug Fixes in Release 4.0 Build 23.1 Issue ID Issue Description If you are using Google Chrome version , and click the >>> icon next to the device on the Citrix Network or Network Database tab, the menu options are not displayed. Note that this works fine in earlier versions of Google Chrome and also in beta version If you have started the Command Center server in a standalone mode by running startncc.bat, and if you have configured thresholds for scalar counters, Command Center stops collecting performance data. Note: For a list of issues fixed in Command Center release 3.x, see Finding Archived Product Documentation. 27

28 Limitations Issue ID Issue Description The following table describes the limitations and known issues in Command Center If you want to use the pre-packaged Postgre SQL database with Command Center 4.0, you must have the.net framew 3.5 installed on your system If you are upgrading from Command Center release 3.x, and if you are using user-defined SSL certificates for HTTPS communication between the Command Center server and the client, your SSL certificates will no longer be applicable Command Center release 4.0. Please create new SSL certificates as described in Installing Certificates for Secure Communication You cannot modify or delete NetScaler Pool maps The built-in task SoftwareUpgrade fails on Branch Repeater devices running on Windows platform If you have created custom view scopes in Command Center release 3.3 and have now upgraded to release 4.0, the custom view scopes will no longer be available. This is because of the enhancements in the authorization mode. See "Enhancements in Authorization Interface" in New in This Release If you are running Command Center as a virtual machine (VM), when Live Update process of Symantec Endpoint Protection runs, the Command Center server may lose connection to the database or may shut down Event Severity configuration changes roll back to their default configurations after a service pack installation On a Windows system, if you have upgraded to Command Center release 3.3 from an earlier version using the service pack, you may not be able to uninstall Command Center using the Add/Remove option of Windows If you are using Internet Explorer version 8, when you try to execute the built-in task InstallSSLCert, in the Preview pa the actual file path is replaced with a fakepath, for example, c:\fakepath\filename. This is due to a security feature o Internet Explorer version 8. For more information, see On the Linux platform, if you install Command Center from the GUI, after accepting the license agreement, the installation wizard changes to the console mode and prompts for the license file The built-in task SoftwareUpgrade-Within9.x fails on NetScaler high availability (HA) devices running release If the hostname of the Command Center server contains an underscore ('_'), you may encounter a java exception For Repeater devices running 5.0 release, Command Center discovers an high availability (HA) pair only if you provide IP address of the primary device Command Center displays only the latest 1000 events in the client. - - If an alarm is in the Clear state and a new event correlating to this alarm is not generated within 24 hours, the alarm removed from display The wildcard/regex support in the Change Management feature does not function properly. 28

29 Known Issues and Workarounds The following table describes the known issues with their workarounds in Command Center Release 4.0. Issue ID Issue Description Workaround Show Running Configuration and Difference between Running and Saved Configuration fails if the SSH password contains single quote (') or double quote (") characters If you have McAfee On-Demand scan running, and if you are using external MySQL database, a few device operations, such as Invoke NS CLI and Rediscover may not work, and you may encounter an error message, such as java.sql.sqlexception: General error message from server: Can't create/write to file 'c:\windows\temp\#sql_5ac_0.myi' (Errcode: 13) If you are running Command Center as a virtual machine (VM), while taking the snapshot of the VM, the Command Center server may lose connection to the database or may shut down. Do not use single quote (') or double quote (") characters in your password. Configure the McAfee On-Demand scan such that it does not protect write operations on the following directory: c:\windows\temp For more information, see Shut down Command Center before taking the VM snapshot. 29

30 Known Issues and Workarounds The restore facility does not restore thresholds and event/alarm filters. Copy the following files located in the /cc_home/conf/ directory on the backup system to the same location in the restored system: Threshold.conf event.filters alert.filters NonPolledVariables.properties Authentication.xml monitoringcertseverity.xml logging_parameters.conf DistributedPoller.xml FailOver.xml Polling.conf securitydbdata.xml SMTPSettings.properties The restore facility does not restore thresholds and event/alarm filters. Copy the following files located in the /cc_home/conf/ directory on the backup system to the same location in the restored system: Threshold.conf event.filters alert.filters NonPolledVariables.properties Authentication.xml monitoringcertseverity.xml logging_parameters.conf DistributedPoller.xml FailOver.xml Polling.conf securitydbdata.xml SMTPSettings.properties 30

31 Known Issues and Workarounds Command Center does not start on Windows XP Service Pack A storage exception occurs during change management tasks Traps from the discovered devices do not reach the Command Center server if it is behind a Network Address Translation (NAT) device. This is because the Command Center server configures its internal IP address as the trap destination on the discovered devices Command Center does not enforce authorization rules at runtime. If a user is logged on to Command Center and the administrator changes operation permissions (add or remove maps, devices, and tasks) for that user, the changes do not get updated dynamically In a Command Center HA setup, you cannot shut down the secondary server running the shutdown.bat or shutdown.sh script. If you have any firewall or antivirus software running on the system, either configure the software such that Citrix Command Center can run on localhost or disable the firewall or antivirus software while using Citrix Command Center. Packet size restrictions in MySQL cause this issue. Increase the value of the max_allowed_packet variable in the my.ini file to a higher number, such as 30 MB. For more information, see: In the HTML client, on the Admin tab, click Server Configuration. Use the Trap Destination option to configure the trap destination. Log out and log on to Command Center. Use the Ctrl + C option to shut down the secondary server. 31

32 Citrix Products Supported The following versions of Citrix Products are supported by Command Center. NetScaler: 7.0 and later Note: The Entity Monitoring feature is supported on NetScaler versions 8.0 and later. Repeater and Branch Repeater: and later Branch Repeater with Windows Server (2003 and 2008): or later Branch Repeater VPX: or later 32

33 Installing Command Center Software Command Center 4.0 offers new features and improved functionality of existing features. For more information, see New in This Release. You can install the Command Center server on either the Windows or Linux platform. You can download the installation package for both Windows and Linux from the Citrix portal Web site: There are two types of server installation: Evaluation and Typical. The installation type is specified at the start of the installation process. Evaluation installation type enables you to quickly install the Command Center server by installing the pre-packaged PostgreSQL database and by using predefined options. Typical installation type provides more flexibility and enables you to connect to an external database; this is recommended for use in production environment. For more information on the installation types and installation steps, see Installing the Command Center Server on Windows Installing the Command Center Server on Linux You can also configure Command Center in a distributed multi-tier architecture by installing Command Center agents that manage and monitor the Citrix devices. This architecture provides scalability and reduces the load on the server. For more information, see Installing Command Center Agents on Windows Installing Command Center Agents on Linux Licensing The following Citrix products and editions are supported by Command Center. A Citrix license is required for each edition you want to use on Command Center. NetScaler Enterprise and Platinum editions Access Gateway Enterprise edition Repeater and Branch Repeater, all editions In this section: Before You Begin Installing the Command Center Server on Windows 33

34 Installing Command Center Software Installing the Command Center Server as a Windows Service Installing the Command Center Server on Linux Installing the Command Center Server as a Linux Startup Service Setting the Command Center Communication Mode Installing the Command Center Server in High Availability Mode Installing Certificates for Secure Communication 34

35 Before You Begin Before you install your Command Center server, make sure that you have the minimum system requirements, such as hardware requirements, operating system requirements, and database requirements. You also need to ensure that the database settings are specified according to Command Center requirements. In this section: Hardware Requirements Disk Space for Performance Management Operating System Requirements Database Requirements Additional Linux Requirements Client Requirements Port Settings Database Settings 35