Command Center :20:00 UTC Citrix Systems, Inc. All rights reserved. Terms of Use Trademarks Privacy Statement

Contents Command Center 4.0... 11 Command Center 4.0... 13 Command Center 4.0 Release Notes... 14 Command Center 4.0 Release Notes... 15 New in This Release... 20 Bug Fixes in Release 4.0... 25 Limitations... 28 Known Issues and Workarounds... 29 Citrix Products Supported... 32 Installing Command Center Software... 33 Before You Begin... 35 Hardware Requirements... 36 Disk Space for Performance Management... 37 Operating System Requirements... 38 Database Requirements... 39 Additional Linux Requirements... 40 Client Requirements... 41 Port Settings... 42 Database Settings... 44 Installing the Command Center Server on Windows... 47 Installing Command Center Agents on Windows... 49 Starting the Command Center Server on Windows... 51 Shutting Down the Command Center Server on Windows... 52 Uninstalling the Command Center Server from Windows... 53 Installing the Command Center Server as a Windows Service... 54 Installing the Service... 55 Running the Command Center Server as a Windows Service... 56 Stopping the Command Center Server Running as a Service... 57 Uninstalling the Service... 58 2

Installing the Command Center Server on Linux... 59 Installing Command Center Agents on Linux... 63 Starting the Command Center Server on Linux... 65 Shutting Down the Command Center Server... 66 Uninstalling the Command Center Server from Linux... 67 Installing the Command Center Server as a Linux Startup Service... 68 Installing the Service... 69 Running the Command Center Server as a Linux Service... 70 Stopping the Command Center Server from Running as a Service 71 Uninstalling the Service... 72 Setting the Command Center Communication Mode... 73 Installing the Command Center Server in High Availability Mode... 74 Installing Certificates for Secure Communication... 75 Generating a New Certificate and Key... 76 Copying the Certificate and Key Files to Your Command Center Server 77 Converting the Certificate and Key to pkcs#12 Format... 78 Importing the Certificate into Truststore... 79 Changing the Password for Keystore... 80 Applying the Certificate Changes to the Command Center Server 81 Upgrading Command Center... 82 Migrating MySQL Database... 84 Installing the Service Pack... 86 Getting Started with Command Center... 89 Logging on to Command Center... 91 Adding Devices... 92 Understanding the Discovery Process... 93 Provisioning NetScaler VPX Devices on XenServers... 95 Viewing the Discovery Status of Devices... 97 Viewing Inaccessible Devices... 98 Monitoring the Citrix Network... 99 Configuring Maps... 100 Adding Maps... 101 Adding Submaps... 102 Modifying Maps... 103 Deleting Maps... 104 Performing Operations on Maps... 105 Configuring NetScaler Pool... 106 3

Viewing the NetScaler Pool Dashboard... 107 Performing Operations on NetScaler Pool... 108 Monitoring Two-Tier Application View... 109 Monitoring Datacenter View... 110 Monitoring Devices... 111 Viewing Device Properties... 113 Running Reports... 114 Viewing Events and Alarms... 115 Executing Tasks... 116 Running Configuration Audits... 117 Invoking the CLI of NetScaler Devices... 118 Invoking the User Interface of NetScaler Devices... 119 Invoking the CLI and User Interface of Repeater Devices... 120 Generating the Tar Archive of Configuration Data of NetScaler Devices 121 Replicating a Repeater Device's Configuration to Other Repeater Devices 122 Viewing the Replication Status of Repeater Devices... 123 Viewing the Device Configuration of Repeater Devices... 124 Searching Devices from Device Inventory... 125 Configuring the Location... 126 Restarting Devices... 127 Pinging Devices... 128 Tracing the Route of Devices... 129 Viewing the Discovery Status... 130 Rediscovering Devices... 131 Moving Devices to Another Map... 132 Deleting Devices... 133 Unmanaging Devices... 134 Performing Operations Specific to HA Devices... 135 Doing a Force Failover... 136 Staying as Secondary on Secondary Devices... 137 Monitoring Your Network by Using the Home Page... 138 Understanding the Alarm Summary... 139 Monitoring Device Inventory... 140 Monitoring Active Alarms... 141 Monitoring Recent Alarms... 142 Finding Devices... 143 Monitoring and Managing Events Generated on Citrix Devices... 144 4

Monitoring SNMP Events and Alarms... 145 Viewing Events... 146 Viewing Alarms... 147 Configuring Views for Events and Alarms... 148 Adding Views for Events and Alarms... 149 Modifying Views... 151 Deleting Views... 152 Searching Events and Alarms... 153 Managing SNMP Events and Alarms... 154 Assigning Alarms to Users... 155 Viewing and Managing Alarms Assigned to a User... 156 Printing a List of Events and Alarms... 157 Setting the Auto Refresh Interval for Events and Alarms... 158 Saving List of Events and Alarms to a File... 159 Assigning Severity to Events... 160 Clearing and Deleting Alarms... 161 Monitoring Syslog Events... 162 Configuring Command Center as the Syslog Server... 163 Viewing Syslog Messages... 164 Configuring Syslog Views... 165 Adding Syslog Views... 166 Modifying Syslog Views... 167 Deleting Syslog Views... 168 Configuring Event and Alarm Triggers... 169 Monitoring and Managing the Real-Time Status of Entities Configured on NetScaler Devices... Monitoring Virtual Servers, Services, and Service Groups... 173 Viewing the Status of Virtual Servers... 174 Viewing Services and Service Groups Bound to a Virtual Server 175 Viewing the Status of Services... 176 Viewing the Virtual Servers to which a Service is Bound... 177 Viewing the Status of Service Groups... 178 Viewing the Virtual Servers to which a Service Group is Bound 179 Configuring Views... 180 172 Adding Views for Virtual Servers... 181 Adding Views for Services... 182 Adding Views for Service Groups... 183 Modifying Views... 184 5

Deleting Views... 185 Managing the Real-Time Status of Entities... 186 Configuring the Polling Interval... 187 Enabling or Disabling Virtual Servers... 188 Enabling or Disabling Services... 189 Enabling or Disabling Service Groups... 190 Viewing the Audit Trail... 191 Searching Virtual Servers, Services, and Service Groups... 192 Polling the Status of Virtual Servers, Services, and Service Groups 193 Customizing Columns... 194 Using Tasks to Configure Managed Devices... 195 Managing Built-in Tasks... 196 Upgrading NetScaler with Built-in Tasks... 197 Configuring NetScaler with Built-in Tasks... 198 Upgrading Repeater with Built-in Tasks... 199 Configuring Repeater with Built-in Tasks... 200 Viewing Built-in Tasks... 201 Executing Built-in Tasks... 202 Viewing the Execution Log for Specific Built-in Tasks... 203 Scheduling Built-in Tasks... 204 Exporting Built-in Tasks... 205 Configuring Custom Tasks... 206 Adding Custom Tasks... 207 Adding New Custom Tasks... 209 Adding Custom Tasks from Command Files... 212 Adding Custom Tasks by Importing from Task Files... 213 Executing Custom Tasks... 214 Viewing the Execution Log for Specific Custom Tasks... 215 Scheduling Custom Tasks... 216 Exporting Custom Tasks... 217 Modifying Custom Tasks... 218 Deleting Custom Tasks... 219 Customizing Built-in and Custom Tasks... 220 Viewing the Execution Log for all Tasks... 223 Monitoring and Managing SSL Certificates Configured on NetScaler Devices... 224 Enabling or Disabling Certificate Management... 225 Viewing the Current Status of SSL Certificates... 226 6

Setting the Polling Interval for SSL Certificates... 227 Setting the Expiry Criteria of SSL Certificates... 228 Generating Certificate Signing Requests... 229 Updating SSL Certificates... 230 Viewing the Audit Trail for SSL Certificates... 231 Downloading SSL Certificates... 232 Auditing Configuration Changes Across NetScaler Devices... 233 Configuring Audit Templates... 234 Adding Audit Templates... 235 Modifying Audit Templates... 236 Deleting Audit Templates... 237 Configuring Audit Policies... 238 Adding User-Defined Audit Policies... 239 Executing Built-in and User-Defined Audit Policies... 240 Scheduling Built-in and User-Defined Audit Policies... 241 Modifying User-Defined Audit Policies... 242 Deleting User-Defined Audit Policies... 243 Generating Audit Reports... 244 Viewing Audit Reports... 245 Exporting Audit Reports... 246 Setting Auto Refresh Interval for Audit Reports... 247 Deleting Audit Reports... 248 Using Performance Reports and Thresholds to Monitor Device Performance... 249 Configuring Polled Counters... 250 Running Quick Reports... 252 Configuring Custom Reports... 254 Using Built-in Custom Reports... 255 Adding Custom Reports... 256 Viewing Custom Reports... 257 Scheduling Custom Reports... 258 Modifying Custom Reports... 259 Deleting Custom Reports... 260 Configuring Thresholds to Monitor Devices... 261 Adding Threshold Limits... 262 Modifying Thresholds... 265 Deleting Thresholds... 266 Monitoring AppFirewall Syslog Events... 267 7

Using the Dashboard... 268 Using Reports... 269 Viewing Recent Log Messages... 270 Configuring Views... 271 Adding Views... 272 Modifying Views... 273 Searching Recent AppFirewall Log Messages... 274 Administering Command Center... 276 Configuring Discovery Settings... 278 Configuring Device Profiles... 279 Adding Device Profiles... 280 Viewing Device Profiles... 284 Modifying Device Profiles... 285 Deleting Device Profiles... 286 Configuring Server Settings... 287 Configuring Inventory Settings... 290 Configuring High Availability Settings... 291 Configuring Mail Server Settings... 292 Configuring Access Settings... 293 Setting Up Command Center Agents... 294 Configuring Security Settings... 295 Configuring Authentication Settings... 296 Configuring Groups... 297 Adding Groups... 298 Assigning Users to Groups... 299 Modifying Groups... 300 Deleting Groups... 301 Configuring Users... 302 Adding Users... 303 Assigning Groups to a User... 304 Viewing Permissions Assigned to Users... 305 Modifying User Profiles... 306 Changing the Root User Password... 307 Deleting Users... 308 Viewing Audit Logs for All Users... 309 Configuring Logs... 310 Generating Support Logs... 311 8

Viewing Server Logs... 312 Configuring Server Log Settings... 313 Viewing Server and Logged-in User Information... 314 Changing the Database Password... 315 Shutting Down the Command Center Server... 316 NetScaler SNMP Counters Polled from Command Center... 317 AAA Counters... 319 ACL Counters... 322 ACL Table Counters... 323 ACL6 Counters... 324 ACL6 Table Counters... 325 Application Firewall Counters... 326 Cache Redirection Policies Counters... 329 Compression Counters... 330 Content Filters Counters... 332 Content Switch Policies Counters... 333 CPU Usage Counters... 334 DNS Counters... 335 GSLB Counters... 337 HTTP Counters... 338 ICMP Counters... 340 Integrated Cache Counters... 342 IP Counters... 347 Interface Counters... 349 Policy Engine Counters... 351 Resources Counters... 352 Simple ACL Counters... 353 SSL Counters... 354 Service Groups Counters... 360 Services Counters... 362 Sure Connect Counters... 364 System Disk Counters... 366 TCP Counters... 367 UDP Counters... 371 VLAN Counters... 373 Virtual Servers Counters... 375 Virtual Services Counters... 377 9

10 VPN Counters... 378

Command Center 4.0 Citrix Command Center is a management and monitoring solution for Citrix application networking products that include Citrix NetScaler, Citrix Access Gateway Enterprise Edition, Citrix Branch Repeater, and Citrix Repeater. Use Command Center to manage, monitor, and troubleshoot the entire global application delivery infrastructure from a single, unified console. What's New in Command Center 4.0 Command Center 4.0 provides two types of Command Center server installation, the Evaluation type with pre-packaged PostgreSQL database and the more flexible Typical installation type for production environment. This release also provides a distributed multi-tier setup that reduces the load on the Command Center server. There are enhancements in the discovery process too. Now, adding devices for discovery is no longer attached to the creation of maps. With this release, you can configure NetScaler pools, provision NetScaler VPX devices on a XenServer, and monitor devices configured in a two-tier architecture. This release provides a dashboard and built-in reports to monitor application firewall syslog events. This release also provides support for Citrix Branch Repeater VPX devices. New built-in tasks are now available. For more information, see New in This Release. In This Section Citrix NetScaler and Branch Repeater Versions Supported Installing Command Center Upgrading Command Center Getting Started with Command Center Monitoring the Citrix Network Monitoring Devices Provides a list of the NetScaler and Branch Repeater versions that Command Center supports. Provides step-by-step instructions for installing Command Center server on Windows Server and Linux operating systems. Also included is information about certificates and using Command Center as a startup service. Provides step-by-step instructions for upgrading Command Center server on Windows Server and Linux operating systems. Provides instructions on how to log on to Command Center and begin monitoring and managing Citrix devices. Provides instructions on how to monitor the Citrix network using different views. Describes the operations you can perform on Citrix devices from the Citrix Network tab. 11

Command Center 4.0 Monitoring Your Network by Using the Home Page Monitoring and Managing Events Generated on Citrix Devices Monitoring and Managing the Real-Time Status of Entities Configured on NetScaler Devices Using Tasks to Configure Managed Devices Monitoring and Managing SSL Certificates Configured on NetScaler Devices Auditing Configuration Changes Across NetScaler Devices Using Performance Reports and Thresholds to Monitor Device Performance Administering Command Center NetScaler SNMP Counters Polled from Command Center Describes the high-level view of the performance of your Citrix network. Provides a conceptual reference and instructions for monitoring and managing the SNMP and Syslog events generated on the Citrix devices. Provides a conceptual reference and instructions for monitoring and managing the states of virtual servers, services, and service groups across the NetScaler infrastructure. Provides a conceptual reference and instructions for using built-in and custom tasks to make configuration changes across devices. Provides a conceptual reference and instructions for monitoring and managing SSL certificates installed across all managed NetScaler devices. Provides a conceptual reference and instructions for monitoring and auditing configuration changes across managed NetScaler devices. Provides a conceptual reference and instructions for monitoring the performance of discovered Citrix devices by using performance reports and threshold functionality. Also provides instructions for monitoring Application Firewall syslog events. Provides a conceptual reference and instructions for administering and securing the Command Center server. Describes the SNMP counters that Command Center polls from NetScaler devices to gather performance data. 12

Command Center 4.0 Release Notes The Citrix Command Center Release Notes describe the new features and enhancements, bug fixes, limitations, and known issues and workarounds in Citrix Command Center release 4.0. In this section: New in This Release Bug Fixes in Release 4.0 Limitations Known Issues and Workarounds 13

New in This Release The Citrix Command Center release 4.0 includes the following new features and enhancements. Changes in Database Requirements With this release, the following databases are supported. MySQL 5.0 and higher with InnoDB storage engine Microsoft SQL Server 2005 Oracle 10g Packaged Postgre SQL with the Evaluation installation type of Command Center Also, Command Center 4.0 no longer supports internal MySQL that was packaged with earlier releases of Command Center. If you are using Command Center release 3.x with internal or external MySQL database version earlier than 5.0 and/or with MyISAM storage engine, you must migrate your data to a MySQL database running 5.0 or later with InnoDB storage engine by running the Data Migration executable. For more information, see Upgrading Command Center. Operating System Support With this release, you can install the Command Center server on Windows Server 2008. Types of Command Center Server Installation There are two types of server installation: Evaluation and Typical. The installation type is specified at the start of the installation process. Evaluation: Quickly installs the Command Center server by installing the pre-packaged PostgreSQL database and by using predefined defaults. Although this installation type provides all functionality of Command Center, it is not supported in production environment. Citrix recommends you use this installation type only for evaluation purposes. Typical: Provides more flexibility and enables you to connect to an external database and specify the security mode you want to use. This installation type provides all Command Center functionality and Citrix recommends you use this in production 15

Command Center 4.0 Release Notes environment. For more information on the server installation types, see Installing Command Center. Command Center in Distributed Multi-Tier Architecture To manage and monitor such large number of devices, you can now set up Command Center in a distributed multi-tier architecture by configuring Command Center agents to monitor the Citrix devices. This architecture reduces the load on the Command Center server by distributing the load across the different agents. The agents are used for polling and collecting data used for performance monitoring, such as CPU usage, resource utilization, and IP bytes transmitted, and for certificate management. You can install the Command Center agents by using the Command Center installation package available at: http://mycitrix.com After the agents are installed and connected to the Command Center server, you can view the agent details on the Administration tab from the Command Center client. You can activate the agents from the client, and then assign devices to the agent to manage. You can also monitor the state of the agents from your Command Center client. For more information, see Installing Command Center. Enhancements in Device Discovery Process Adding devices for discovery is no longer attached to the creation of maps. To add devices, you do not need to add maps. You can add devices and schedule them for discovery from the Device Inventory pane. After the devices are discovered, you can group them under maps. A device can be, now, added to more than one map. For more information, see Getting Started with Command Center. This new process of discovery introduces the following enhancements: Device Inventory Using this, you can monitor all Citrix devices, including inaccessible devices. You can also perform various operations, such as run report, config audit, and execute task on single and multiple devices from this view. To navigate to the device inventory view, on the Citrix Network tab, in the left pane, under Citrix Network, click Device Inventory. Device Profiles Device profiles specify the user credentials and SNMP details that are used by Command Center to communicate with the Citrix devices and retrieve configuration data and SNMP traps. You can create device profiles for the three device families: NetScaler, Repeater, and XenServer. These device profiles are used by Command Center to discover the Citrix devices. You can add device profiles in two ways: 16

Command Center 4.0 Release Notes From the Administration tab. For more information, see Setting Up Command Center Agents. When adding devices from the Citrix Network tab. For more information, see "Adding Devices" in the Citrix Command Center online Help. Enhancements in Maps With this release, maps are not part of the device discovery process. Maps are used only to group devices. Devices deleted from a map continue to be managed by Command Center. You can use maps in the following two ways: You can add a map and group devices under it logically, such as based on features configured on your devices. You can add a NetScaler pool and add devices to it. The devices added in maps configured as NetScaler pools are considered one logical unit. For more information, see Monitoring the Citrix Network. Configure and Monitor NetScaler Pools A map configured as a NetScaler pool consists of devices that are considered as one logical unit. All configuration changes are done on all the devices in a pool. You may have a NetScaler pool already configured on your network; in which case, you need to add the devices that are part of the pool when adding the map. Or, you may configure a NetScaler pool from Command Center. In this case, add the devices that you want to be part of the pool when adding the map. These devices are displayed as a single unit on the Maps pane. You then need to configure the NetScaler pool by adding VIPs to it. Command Center implicitly configures these VIPs across all the NetScaler devices added to the pool and sets up a distributed VIP configuration. You can then view the configured VIP status across all the NetScaler devices in that pool. The NS Pool Dashboard provides a tabular view of the VIPs assigned to the NetScaler devices based on the priorities assigned to the VIPs. The active VIPs are depicted by a green icon. For more information, see Monitoring the Citrix Network. Note: This feature is supported only for NetScaler devices running release 9.2 nc. Provision NetScaler VPX Devices on XenServers You can now discover XenServer devices from Command Center and provision NetScaler VPX devices on XenServer, and consequently manage and monitor the NetScaler VPX instances. First, you need to add a XenServer device and set it for discovery. After the XenServer is discovered, provision the NetScaler VPX devices on the XenServer from the Command Center client. Command Center implicitly deploys NetScaler VPX devices on the XenServer, 17

Command Center 4.0 Release Notes and then discovers the NetScaler VPX devices for monitoring and management. If you have NetScaler VPX devices already installed on a XenServer, discovering the XenServer implicitly discovers all the NetScaler VPX devices. Note: Command Center is used to manage single or multiple NetScaler VPX instances. To manage XenServer, use the XenCenter client. For more information, see Monitoring the Citrix Network. Citrix Branch Repeater VPX Support With this release, Citrix Branch Repeater VPX is supported and is depicted using the icon BR. Support for Two-Tier Application View You can view and monitor applications configured on NetScaler devices set up in a two-tier architecture. For example, consider that you have a load balancing virtual server configured on a NetScaler in tier-1. And you have three NetScaler VPX devices with load balancing virtual servers configured in tier-2. Now, on the NetScaler MPX in tier-1, you configure and bind services that represent the virtual servers on your NetScaler VPX devices in tier-2. Using Command Center you can view and monitor the devices and the entities configured in this topology. For more information, see Monitoring the Citrix Network. View Devices Based on Location The Datacenter pane groups the discovered Citrix devices based on the location configured on these devices. For example, if you configure the Location value of a set of devices as Santa Clara, Command Center groups these devices within the Santa Clara group. Further if you change the Location value of a device, Command Center regroups the device on subsequent rediscovery of the device. For more information, see Monitoring the Citrix Network. Support for AppFirewall Syslog Events Monitoring With this release, you can monitor the security violations encountered on the NetScaler devices by the Application Firewall module. By default, you can view the security violations encountered in the last one week. 18

Command Center 4.0 Release Notes Command Center provides four built-in reports to monitor the top security violations encountered by the application firewall feature. These reports let you monitor violations encountered by clients, devices, and profiles, and also the different types of violations. You can also view the details of the AppFirewall log messages when a message is generated on a security violation. To monitor the AppFirewall syslog messages, on the Reporting tab, in the left pane, under AppFirewall, click Dashboard. For more information, see Using Performance Reports and Thresholds to Monitor Devices. Enhancements in Authorization Interface With this release, you can set permissions for groups and users by using a simplified authorization user interface. You can assign read, write, and execute permissions to groups for each feature of Command Center. When adding groups, under Delegated Administration, select the check boxes against the permissions you want to assign for each feature. Note that selecting Grant administrative privileges assigns permission to perform all operations on only the Administration tab. New Built-in Tasks With this release, the following built-in tasks have been introduced: ConfigureRemoteLicenseServer: Configure multiple Branch Repeater VPX devices to use a centralized licensing server. ConfigureLocalLicenseServer: Configure multiple Branch Repeater VPX devices to use local licensing server. SoftwareUpgrade-8.xto9.0: Software upgrade from the 8.x release to any version of the 9.0 release of NetScaler, or software upgrade from the 9.0 release to a newer version of 9.0. 19

New in This Release environment. For more information on the server installation types, see Installing Command Center. Command Center in Distributed Multi-Tier Architecture To manage and monitor such large number of devices, you can now set up Command Center in a distributed multi-tier architecture by configuring Command Center agents to monitor the Citrix devices. This architecture reduces the load on the Command Center server by distributing the load across the different agents. The agents are used for polling and collecting data used for performance monitoring, such as CPU usage, resource utilization, and IP bytes transmitted, and for certificate management. You can install the Command Center agents by using the Command Center installation package available at: http://mycitrix.com After the agents are installed and connected to the Command Center server, you can view the agent details on the Administration tab from the Command Center client. You can activate the agents from the client, and then assign devices to the agent to manage. You can also monitor the state of the agents from your Command Center client. For more information, see Installing Command Center. Enhancements in Device Discovery Process Adding devices for discovery is no longer attached to the creation of maps. To add devices, you do not need to add maps. You can add devices and schedule them for discovery from the Device Inventory pane. After the devices are discovered, you can group them under maps. A device can be, now, added to more than one map. For more information, see Getting Started with Command Center. This new process of discovery introduces the following enhancements: Device Inventory Using this, you can monitor all Citrix devices, including inaccessible devices. You can also perform various operations, such as run report, config audit, and execute task on single and multiple devices from this view. To navigate to the device inventory view, on the Citrix Network tab, in the left pane, under Citrix Network, click Device Inventory. Device Profiles Device profiles specify the user credentials and SNMP details that are used by Command Center to communicate with the Citrix devices and retrieve configuration data and SNMP traps. You can create device profiles for the three device families: NetScaler, Repeater, and XenServer. These device profiles are used by Command Center to discover the Citrix devices. You can add device profiles in two ways: 21

New in This Release From the Administration tab. For more information, see Setting Up Command Center Agents. When adding devices from the Citrix Network tab. For more information, see "Adding Devices" in the Citrix Command Center online Help. Enhancements in Maps With this release, maps are not part of the device discovery process. Maps are used only to group devices. Devices deleted from a map continue to be managed by Command Center. You can use maps in the following two ways: You can add a map and group devices under it logically, such as based on features configured on your devices. You can add a NetScaler pool and add devices to it. The devices added in maps configured as NetScaler pools are considered one logical unit. For more information, see Monitoring the Citrix Network. Configure and Monitor NetScaler Pools A map configured as a NetScaler pool consists of devices that are considered as one logical unit. All configuration changes are done on all the devices in a pool. You may have a NetScaler pool already configured on your network; in which case, you need to add the devices that are part of the pool when adding the map. Or, you may configure a NetScaler pool from Command Center. In this case, add the devices that you want to be part of the pool when adding the map. These devices are displayed as a single unit on the Maps pane. You then need to configure the NetScaler pool by adding VIPs to it. Command Center implicitly configures these VIPs across all the NetScaler devices added to the pool and sets up a distributed VIP configuration. You can then view the configured VIP status across all the NetScaler devices in that pool. The NS Pool Dashboard provides a tabular view of the VIPs assigned to the NetScaler devices based on the priorities assigned to the VIPs. The active VIPs are depicted by a green icon. For more information, see Monitoring the Citrix Network. Note: This feature is supported only for NetScaler devices running release 9.2 nc. Provision NetScaler VPX Devices on XenServers You can now discover XenServer devices from Command Center and provision NetScaler VPX devices on XenServer, and consequently manage and monitor the NetScaler VPX instances. First, you need to add a XenServer device and set it for discovery. After the XenServer is discovered, provision the NetScaler VPX devices on the XenServer from the Command Center client. Command Center implicitly deploys NetScaler VPX devices on the XenServer, 22

New in This Release and then discovers the NetScaler VPX devices for monitoring and management. If you have NetScaler VPX devices already installed on a XenServer, discovering the XenServer implicitly discovers all the NetScaler VPX devices. Note: Command Center is used to manage single or multiple NetScaler VPX instances. To manage XenServer, use the XenCenter client. For more information, see Monitoring the Citrix Network. Citrix Branch Repeater VPX Support With this release, Citrix Branch Repeater VPX is supported and is depicted using the icon BR. Support for Two-Tier Application View You can view and monitor applications configured on NetScaler devices set up in a two-tier architecture. For example, consider that you have a load balancing virtual server configured on a NetScaler in tier-1. And you have three NetScaler VPX devices with load balancing virtual servers configured in tier-2. Now, on the NetScaler MPX in tier-1, you configure and bind services that represent the virtual servers on your NetScaler VPX devices in tier-2. Using Command Center you can view and monitor the devices and the entities configured in this topology. For more information, see Monitoring the Citrix Network. View Devices Based on Location The Datacenter pane groups the discovered Citrix devices based on the location configured on these devices. For example, if you configure the Location value of a set of devices as Santa Clara, Command Center groups these devices within the Santa Clara group. Further if you change the Location value of a device, Command Center regroups the device on subsequent rediscovery of the device. For more information, see Monitoring the Citrix Network. Support for AppFirewall Syslog Events Monitoring With this release, you can monitor the security violations encountered on the NetScaler devices by the Application Firewall module. By default, you can view the security violations encountered in the last one week. 23

New in This Release Command Center provides four built-in reports to monitor the top security violations encountered by the application firewall feature. These reports let you monitor violations encountered by clients, devices, and profiles, and also the different types of violations. You can also view the details of the AppFirewall log messages when a message is generated on a security violation. To monitor the AppFirewall syslog messages, on the Reporting tab, in the left pane, under AppFirewall, click Dashboard. For more information, see Using Performance Reports and Thresholds to Monitor Devices. Enhancements in Authorization Interface With this release, you can set permissions for groups and users by using a simplified authorization user interface. You can assign read, write, and execute permissions to groups for each feature of Command Center. When adding groups, under Delegated Administration, select the check boxes against the permissions you want to assign for each feature. Note that selecting Grant administrative privileges assigns permission to perform all operations on only the Administration tab. New Built-in Tasks With this release, the following built-in tasks have been introduced: ConfigureRemoteLicenseServer: Configure multiple Branch Repeater VPX devices to use a centralized licensing server. ConfigureLocalLicenseServer: Configure multiple Branch Repeater VPX devices to use local licensing server. SoftwareUpgrade-8.xto9.0: Software upgrade from the 8.x release to any version of the 9.0 release of NetScaler, or software upgrade from the 9.0 release to a newer version of 9.0. 24

Bug Fixes in Release 4.0 The following tables list the bugs fixed in Command Center release 4.0. Bug Fixes in Release 4.0 Build 23.11 Issue ID Issue Description 74409 An out of memory error occurs when the Command Center server polls large number of performance counters. 77961 The correlated events for alarms are not displayed when you click View Events (Fault > Alarms > View Events). 82654 In an HA environment, the email action is not triggered when the threshold is crossed though the event for the threshold is generated. 82651 If you rediscover a NAT Repeater that is configured as an HA pair by clicking Rediscover on Citrix Network, the HA pair breaks. Bug Fixes in Release 4.0 Build 23.10 Issue ID Issue Description 80249 While upgrading the Command Center server to 4.0.23.8, if the first device in the list of NetScaler devices is a secondary device, the update of SNMP OID fails. 80491 If you specify a pattern in the Alarm Message field to filter the incoming messages, the alarm trigger does not work. Bug Fixes in Release 4.0 Build 23.8 Issue ID Issue Description 77866 If you have installed Command Center on a Linux server, and if you are using either internal Postgre SQL database or an external My SQL database installed on the same system as your Command Center server, then Command Center server may fail to start up. 25

Bug Fixes in Release 4.0 76778 If you are using Command Center to manage NetScaler release 9.1 build 103 or later and NetScaler release 9.2 build 45 or later, features such as entity monitoring, fault management, and performance reporting will not work because the SNMP OIDs have been changed on these versions of the NetScaler and Command Center is unable to query the changed OIDs. For information on the list of updated OIDs on NetScaler release 9.2 build 45, see Updated SNMP OIDs For information on the list of updated OIDs on NetScaler release 9.1 build 103, see Updated SNMP OIDs 76508 For Repeater devices, for counters under the group Repeater Service Classes +, the instance priority has been changed to Service Class Name. 76762 If you are using MS SQL or Oracle database, after upgrading to Command Center release 4.0, the Events and Alarm tables are not indexed. This results in a hang on clicking the Fault tab. 76959 When the number of data points plotted in a chart exceeds the default value (6000), the following error message is displayed: NO DATA TO CHART. 76968 The syslog dashboard for system syslog messages (Fault > Syslog > Complete View) and the application firewall recent log messages pane(reporting > AppFirewall > Recent Logs) do not display the event ID. 76999 If your event filter name contains space in the beginning or end of the filter name, you cannot modify or delete this filter. 77968 You cannot download SSL certificate file names if the certificate file name and the key file name are the same. Bug Fixes in Release 4.0 Build 23.4 Issue ID Issue Description 26

Bug Fixes in Release 4.0 74182 If the string "$" is present the SNMP community of discovered devices, the database migration of newly introduced counters for existing devices fails. As a result, while running performance reports on these counters, the message "No Data to chart" is shown. 74614 Command Center server running with internal PostgreSQL database does not start on non-english locale systems. 75072 For Repeater and Branch Repeater devices, the system name does not get displayed in the Sys Name column on the Device Inventory page. 75631 After you upgrade your Command Center server from release 3.2 build 34.5 to release 4.0 using a service pack, the Command Center high availability pair does not work. 75711 Command Center high availability fails to work if a firewall is configured on the system. 74886 While upgrading the Command Center server to release 4.0, upgrade failed during data migration for Oracle 10g database. Bug Fixes in Release 4.0 Build 23.1 Issue ID Issue Description 66098 If you are using Google Chrome version 3.0.195.21, and click the >>> icon next to the device on the Citrix Network or Network Database tab, the menu options are not displayed. Note that this works fine in earlier versions of Google Chrome and also in beta version 4.0.211.4. 61283 If you have started the Command Center server in a standalone mode by running startncc.bat, and if you have configured thresholds for scalar counters, Command Center stops collecting performance data. Note: For a list of issues fixed in Command Center release 3.x, see Finding Archived Product Documentation. 27

Limitations Issue ID Issue Description The following table describes the limitations and known issues in Command Center 4.0. 66810 If you want to use the pre-packaged Postgre SQL database with Command Center 4.0, you must have the.net framew 3.5 installed on your system. 74426 If you are upgrading from Command Center release 3.x, and if you are using user-defined SSL certificates for HTTPS communication between the Command Center server and the client, your SSL certificates will no longer be applicable Command Center release 4.0. Please create new SSL certificates as described in Installing Certificates for Secure Communication. 71885 You cannot modify or delete NetScaler Pool maps. 71489 The built-in task SoftwareUpgrade fails on Branch Repeater devices running on Windows platform. 73256 If you have created custom view scopes in Command Center release 3.3 and have now upgraded to release 4.0, the custom view scopes will no longer be available. This is because of the enhancements in the authorization mode. See "Enhancements in Authorization Interface" in New in This Release. 73004 If you are running Command Center as a virtual machine (VM), when Live Update process of Symantec Endpoint Protection runs, the Command Center server may lose connection to the database or may shut down. 29388 Event Severity configuration changes roll back to their default configurations after a service pack installation. 67415 On a Windows system, if you have upgraded to Command Center release 3.3 from an earlier version using the service pack, you may not be able to uninstall Command Center using the Add/Remove option of Windows. 70863 If you are using Internet Explorer version 8, when you try to execute the built-in task InstallSSLCert, in the Preview pa the actual file path is replaced with a fakepath, for example, c:\fakepath\filename. This is due to a security feature o Internet Explorer version 8. For more information, see http://www.telerik.com/community/forums/aspnet-ajax/upload/ie8-upload-control-shows-quot-c-fakepath-quot.asp 28737 On the Linux platform, if you install Command Center from the GUI, after accepting the license agreement, the installation wizard changes to the console mode and prompts for the license file. 69558 The built-in task SoftwareUpgrade-Within9.x fails on NetScaler high availability (HA) devices running release 9.2. 61545 If the hostname of the Command Center server contains an underscore ('_'), you may encounter a java exception. 56200 For Repeater devices running 5.0 release, Command Center discovers an high availability (HA) pair only if you provide IP address of the primary device. 29323 Command Center displays only the latest 1000 events in the client. - - If an alarm is in the Clear state and a new event correlating to this alarm is not generated within 24 hours, the alarm removed from display. 36908 The wildcard/regex support in the Change Management feature does not function properly. 28

Known Issues and Workarounds The following table describes the known issues with their workarounds in Command Center Release 4.0. Issue ID Issue Description Workaround 64455 Show Running Configuration and Difference between Running and Saved Configuration fails if the SSH password contains single quote (') or double quote (") characters. 56303 If you have McAfee On-Demand scan running, and if you are using external MySQL database, a few device operations, such as Invoke NS CLI and Rediscover may not work, and you may encounter an error message, such as java.sql.sqlexception: General error message from server: Can't create/write to file 'c:\windows\temp\#sql_5ac_0.myi' (Errcode: 13) 73004 If you are running Command Center as a virtual machine (VM), while taking the snapshot of the VM, the Command Center server may lose connection to the database or may shut down. Do not use single quote (') or double quote (") characters in your password. Configure the McAfee On-Demand scan such that it does not protect write operations on the following directory: c:\windows\temp For more information, see http://forums.mysql.com/read.php?34,33544,233949#msg-233949 Shut down Command Center before taking the VM snapshot. 29

Known Issues and Workarounds 27411 The restore facility does not restore thresholds and event/alarm filters. Copy the following files located in the /cc_home/conf/ directory on the backup system to the same location in the restored system: Threshold.conf event.filters alert.filters NonPolledVariables.properties Authentication.xml monitoringcertseverity.xml logging_parameters.conf DistributedPoller.xml FailOver.xml Polling.conf securitydbdata.xml SMTPSettings.properties 27411 The restore facility does not restore thresholds and event/alarm filters. Copy the following files located in the /cc_home/conf/ directory on the backup system to the same location in the restored system: Threshold.conf event.filters alert.filters NonPolledVariables.properties Authentication.xml monitoringcertseverity.xml logging_parameters.conf DistributedPoller.xml FailOver.xml Polling.conf securitydbdata.xml SMTPSettings.properties 30

Known Issues and Workarounds 26223 Command Center does not start on Windows XP Service Pack 2. 27636 A storage exception occurs during change management tasks. 19867 Traps from the discovered devices do not reach the Command Center server if it is behind a Network Address Translation (NAT) device. This is because the Command Center server configures its internal IP address as the trap destination on the discovered devices. 25125 Command Center does not enforce authorization rules at runtime. If a user is logged on to Command Center and the administrator changes operation permissions (add or remove maps, devices, and tasks) for that user, the changes do not get updated dynamically. 49107 In a Command Center HA setup, you cannot shut down the secondary server running the shutdown.bat or shutdown.sh script. If you have any firewall or antivirus software running on the system, either configure the software such that Citrix Command Center can run on localhost or disable the firewall or antivirus software while using Citrix Command Center. Packet size restrictions in MySQL cause this issue. Increase the value of the max_allowed_packet variable in the my.ini file to a higher number, such as 30 MB. For more information, see: http://dev.mysql.com/doc/refman/5.0/en/packet-too-large.html In the HTML client, on the Admin tab, click Server Configuration. Use the Trap Destination option to configure the trap destination. Log out and log on to Command Center. Use the Ctrl + C option to shut down the secondary server. 31

Citrix Products Supported The following versions of Citrix Products are supported by Command Center. NetScaler: 7.0 and later Note: The Entity Monitoring feature is supported on NetScaler versions 8.0 and later. Repeater and Branch Repeater: 4.5.0 and later Branch Repeater with Windows Server (2003 and 2008): 2.0.0 or later Branch Repeater VPX: 5.6.0 or later 32

Installing Command Center Software Command Center 4.0 offers new features and improved functionality of existing features. For more information, see New in This Release. You can install the Command Center server on either the Windows or Linux platform. You can download the installation package for both Windows and Linux from the Citrix portal Web site:http://mycitrix.com. There are two types of server installation: Evaluation and Typical. The installation type is specified at the start of the installation process. Evaluation installation type enables you to quickly install the Command Center server by installing the pre-packaged PostgreSQL database and by using predefined options. Typical installation type provides more flexibility and enables you to connect to an external database; this is recommended for use in production environment. For more information on the installation types and installation steps, see Installing the Command Center Server on Windows Installing the Command Center Server on Linux You can also configure Command Center in a distributed multi-tier architecture by installing Command Center agents that manage and monitor the Citrix devices. This architecture provides scalability and reduces the load on the server. For more information, see Installing Command Center Agents on Windows Installing Command Center Agents on Linux Licensing The following Citrix products and editions are supported by Command Center. A Citrix license is required for each edition you want to use on Command Center. NetScaler Enterprise and Platinum editions Access Gateway Enterprise edition Repeater and Branch Repeater, all editions In this section: Before You Begin Installing the Command Center Server on Windows 33

Installing Command Center Software Installing the Command Center Server as a Windows Service Installing the Command Center Server on Linux Installing the Command Center Server as a Linux Startup Service Setting the Command Center Communication Mode Installing the Command Center Server in High Availability Mode Installing Certificates for Secure Communication 34

Before You Begin Before you install your Command Center server, make sure that you have the minimum system requirements, such as hardware requirements, operating system requirements, and database requirements. You also need to ensure that the database settings are specified according to Command Center requirements. In this section: Hardware Requirements Disk Space for Performance Management Operating System Requirements Database Requirements Additional Linux Requirements Client Requirements Port Settings Database Settings 35