Category: EUC Weekly Digest

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Download Citrix Virtual Apps and Desktops 7 2203 LTSR, Cumulative Update 4
• Citrix CVAD 2203 requires CU4 for support of SQL 2022 – Citrix Knowledgebase article

Citrix Workspace app

• The Global App Config Service is now available even for on-prem Citrix CVAD customers without a cloud entitlement – Citrix Blog Post

NetScaler ADC

• NetScaler WAF Signatures Update v118 – The most critical is CVE-2023-22518, an improper authorization vulnerability in the setup-restore endpoints of Atlassian Confluence Data Center and Server – NetScaler Article

Citrix Cloud

• Citrix DaaS and Azure Hibernation – Overview and Benefits – YouTube video
• If custom domain in Citrix Cloud Workspace, need a pair of SAML applications – Citrix Docs

Microsoft

• Nerdio for AVD Upcoming Release v5.5.0 – remove aged FSLogix profiles within a specified time window; different auto-scaling schedules for Peak and Off-peak

Other

• Zoom VDI vulnerabilities Nov 14
• EUC Performance impact analysis – includes: Impact of optimizing the golden image; Windows 10 vs Windows 11; Increasing vCPUs per virtual desktop; Impact of enabling Credential Guard – Nutanix Tech Note

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Citrix License Server 11.17.2.0 44000 does not contain the affected modules: mod_macro and does not use HTTP/2 and is therefore not affected by Apache vulnerabilities – Citrix Knowledgebase article

Citrix Workspace app

• Citrix Workspace app for Mac versions 2301 or earlier can’t update to the latest versions through the auto-update service. Instead, manually install versions 2304 or later by downloading the .dmg file available on the Downloads page – Citrix Docs
• Download Citrix Enterprise Browser v119 for Citrix Workspace app 2309

NetScaler ADM

• Citrix NetScaler ADM: Use Security Dashboard to Configure protections for unsecured applications – Citrix Docs
• Citrix Intelligent Traffic Management is integrated with Citrix NetScaler ADM – Citrix Docs

Citrix Cloud

• What’s new in Citrix DaaS November 2023 – Citrix Docs
• Citrix DaaS Monitor Session Topology provides a visual representation of the in-session path for connected HDX sessions – Citrix Docs
• Citrix Session Recording Event trigger templates – Citrix Docs

VMware

• Only VMware Horizon version 2309 supports Windows 11 version 23H2 – VMware Knowledgebase article

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix WEM and Profile Management

• What’s new in Citrix WEM Cloud Service November 2023 – Automatic agent upgrade enhancements; Windows Logon analysis; Application security log reports – Citrix Docs

Citrix Provisioning

• Download Citrix Provisioning 1912 LTSR, Cumulative update 8

Citrix Workspace app

• Download Citrix Workspace app 2309.1 for Windows
• Download Citrix Workspace app 22.03.5000 for Windows, LTSR 2203.1 Cumulative Update 5
• Use the Citrix Cloud Global App Configuration service UI to configure settings for on-premises stores – claim your StoreFront URL – Citrix Docs

NetScaler ADC

• NetScaler has released Web App Firewall signatures to help customers mitigate the maximum severity CVSS 10 zero-day vulnerability in Cisco IOS XE (CVE-2023-20198) which has been exploited in the wild – NetScaler Article
• NetScaler with Azure “accelerated networking”: some TCP connections can be RESET by NetScaler unexpectedly – upgrade to 13.1 Build 50.23 or 14.1 Build 8.50 – NetScaler Knowledgebase article

Citrix Gateway

• Multiple lines EULA is a basic requirement. Latest NetScaler builds (14.1, 13.1 build 50.23, 13.0 build 92.18) add `\n` to replace `<br>` – Citrix Knowledgebase article

Citrix Cloud

• Citrix Gateway Service supports the latest version of the reducer for HDX – Citrix Docs
• How to connect PowerBI with Citrix DaaS Monitor – Citrix Tech Zone

VMware

• VMware Horizon Client for Mac 2303 and older versions cannot update via Auto-Upgrade to 2309 – VMware Knowledgebase article
• Download VMware Workspace ONE Access 23.09.0.0
• India has been added as a new region to the VMware Horizon Cloud Service Control Plane that you can select while onboarding to the service – VMware Docs
• Documentation for VMware Horizon Cloud Service next-gen for Microsoft Windows 365 PC (Preview) – VMware Docs

Microsoft

• Download Administrative Template files (ADMX/ADML) and Office Customization Tool for Microsoft 365 Apps for enterprise, Office 2019, and Office 2016 updated November 2
• Currently, the new Teams client in VDI is not compatible with FSLogix Profile containers and ODFC containers. Microsoft is working on a solution and plan to remove these limitations soon – Microsoft Docs

Other

• NVIDIA vGPU denial of service vulnerability – NVIDIA Security Bulletin October 2023
• NVIDIA GPU Manager for VMware vCenter 1.2 – security updates – NVIDIA Docs

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix HDX

• On January 31, 2024, Microsoft will retire the Microsoft Teams support for Single-window UI when using VDI optimization and support only the Multi-Window experience – Citrix Workspace app version requirement – Citrix Docs

NetScaler ADC

• NetScaler FAQ on CVE-2023-4966 – NetScaler Blog
• Download Citrix ADC NetScaler Release (Maintenance Phase) 13.1 Build 50.23

NetScaler ADM

• Download Citrix NetScaler ADM Release (Maintenance Phase) 13.1 Build 50.23

Citrix Cloud

• Changing the time zone on a Citrix DaaS delivery group might reboot the machines in that delivery group. To avoid this, ensure to change the time zone settings outside of production hours – Citrix Docs
• Citrix DaaS: Adaptive access based on the user’s network location is no longer preview – Citrix Docs
• Citrix DaaS now supports the local launch of MSIX packages on the VDA desktop if vPrefer is configured instead of performing a second hop – Citrix Cloud Updates

VMware

• VMware Tools vulnerability fixed in version 12.3.5 – VMware Security Advisory
• Download VMware Horizon 2309
• Implementation of VMware True SSO has not been tested in a Hybrid AAD based environment yet – VMware Knowledgebase article
• VMware Horizon Client 2309 includes a fix for Chromium CVE-2023-5217 security vulnerability – Chromium is used by HTML5MMR Redirection, Browser Content Redirection, Geolocation Redirection, and WebRTC (Teams) – VMware Release Notes

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix StoreFront

• Download Citrix Workspace app 2310 for HTML5

Citrix Workspace app

• Citrix CWA Mac unable to print after macOS Sonoma upgrade – An update for VDAs is being prepared; In VDA 2203+, add “PDF” to Universal driver preference policy ahead of “PS” – Citrix Knowledgebase article
• Download Citrix Enterprise Browser v118 for Citrix Workspace app 2309

NetScaler ADC

• Mandiant analysis of NetScaler CVE-2023-4966 – Due to the lack of available log records or other artifacts of exploitation activity, organizations should consider rotating credentials
• NetScaler Clustering: On-demand recording of 30 min technical hands-on Live Demo
• NetScaler Connect Recorded Webinar Sept 2023 – YouTube video

Citrix Gateway

• Unleashing RfWebUI Potential: JavaScript-Powered Citrix Gateway Login Page Customization – NetScaler Article
• Download Citrix Secure Access client and Citrix EPA client for Windows version 23.8.1.11 updated Oct 19

Citrix Cloud

• In Citrix DaaS Premium, override Horizontal or Vertical load balancing at Delivery Group level – Citrix Docs
• Citrix DaaS Autoscale Power policies – Action to take if no user logs on after machine is powered on by Autoscale – Citrix Docs

VMware

• Evaluation Guide for VMware Horizon Cloud Service – Next-Gen – 20 videos – VMware Tech Zone
• Download VMware Workspace ONE Access Connector 23.09
• Download VMware Aria Operations Management Pack for VMware Horizon 2.7 released 10/18/2023

Microsoft

• Support for Office 2016 and 2019 clients connecting to Microsoft 365 services (e.g., Exchange Online) has ended – upgrade to Office Long-Term Servicing Channel 2021 (LTSC) or Microsoft 365 Apps

Other

• NVIDIA License System release 3.2.0 – Security Updates – NVIDIA Docs

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Citrix Optimizations available in 2308 vs 2203 – Citrix Tech Zone

Citrix Workspace app

• Download Citrix Workspace app 2309 for Windows – requires admin privileges to install .NET Desktop Runtime 6.0 – offline installer option

Citrix Gateway

• (Update October 6, 2023) IBM: X-Force uncovers global NetScaler Gateway credential harvesting campaign – Security Intelligence

Citrix Cloud

• Citrix DaaS new app highlight – When an admin delivers a new app, it is highlighted on the end user’s workspace with a green dot – Citrix Docs

VMware

• Before January 31, 2024, upgrade VMware Horizon agents and client versions to version 2103 or later to continue to use Microsoft Teams optimized video calling and screen sharing – VMware Knowledgebase article
• Operating System Upgrade for a VMware Horizon Server – VMware does not support in-place upgrade of the OS – VMware Knowledgebase article
• VMware Horizon subscription expiration – customers with on-premises pods will have access to Horizon for a 90-day period after expiration – VMware Knowledgebase article
• End of Life (EOL) of the VMware Horizon Cloud First-Gen control plane is now extended to January 31, 2025 – VMware Knowledgebase article

Microsoft

• New Microsoft Teams for Virtualized Desktop Infrastructure – Windows Server 2016 is NOT supported; certified with Azure Virtual Desktops, Windows 365, Citrix, and VMware – Microsoft Docs
• Use Microsoft OneDrive with a RemoteApp in Azure Virtual Desktop (AVD) – requires Windows 11 Insider Preview Enterprise multi-session, version 22H2, build 25905 or later – Microsoft Docs

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Windows 2012 R2 is EOL on October 10, 2023 – I have OS replacement guidance for #Citrix components at https://carlstalhood.com/cvad-upgrades/#deliverycontrollers and the following sections. Citrix does not support in-place OS upgrades. StoreFront does not support mixed OS versions.
• Manage Local Host Cache (LHC) on your Citrix Delivery Controllers using PowerShell commands – Citrix Docs

Citrix App Layering

• Download Citrix App Layering 2309

Citrix HDX

• Microsoft Teams calls between endpoints with a future release of Citrix Workspace app and endpoints with Citrix Workspace app 2108 or older versions will not be supported – Citrix Docs

Citrix Provisioning

• Citrix Image Portability Service can automate reverse-imaging a PVS vDisk to a native VMware VMDK – Citrix Cloud Updates

Citrix Workspace app

• Download Citrix Workspace app 2309 for Mac – Support for macOS 14 Sonoma
• Download Citrix Workspace app 2309 for Linux

NetScaler ADC

• NetScaler WAF Signatures v113 includes mitigations for three CISA published vulnerabilities for Ignite Realtime Openfire, Adobe Commerce, and Ivanti MobileIron Sentry – NetScaler Community
• Download NetScaler firmware release 14.1 Build 8.50
• NetScaler Build 14.1-8.50 release notes – bind WAF policy to Gateway; new reducer for HDX; more SmartControl options; no more SSL settings on vServers (SSL Profiles required); no support for MPX 11500 series
• v0.3.0 of Let’s Encrypt integration for NetScaler – CoreLayer – Github

NetScaler ADM

• Download NetScaler ADM Release 14.1 Build 8.50
• NetScaler ADM Build 14.1-8.50 release notes – connect ADM On-Prem to ADM Cloud for Security Advisory feature; GUI rebranded to NetScaler ADM
• NetScaler ADM Agents Best practice deployment and monitoring – NetScaler Community

Citrix XenServer

• Citrix Hypervisor 8.2 CU1 now supports Red Hat Enterprise Linux 9, Rocky Linux 9, CentOS Stream 9, and Debian Bookworm 12 – XenServer Docs

Citrix Cloud

• Citrix DaaS Autoscale Insights

VMware

• VMware Horizon Cloud next-gen new features – fault tolerance for Horizon Edge; True SSO (Microsoft CA) support

Microsoft

• Azure Virtual Desktop (classic) will be retired on 30 September 2026 – Azure Updates
• On 30 September 2025, default outbound access connectivity for virtual machines in Azure will be retired – use explicit outbound connectivity methods such as Azure NAT Gateway – Azure Updates

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Citrix Web Studio and StoreFront must be installed on separate machines – Citrix Docs
• Download Citrix Virtual Apps and Desktops 2308 – Support for vSAN 8.0; Auto-expansion policies for profile containers
• Download Citrix Virtual Apps and Desktops 7 1912 LTSR, Cumulative Update 8

Citrix HDX

• On January 31, 2024, Microsoft will retire the Teams support for Single-window UI when using VDI Teams optimization and support only the Multi-Window experience – Customers must upgrade their Citrix VDA to 2203 and CWA to 2203 – Citrix Knowledgebase article
• Microsoft has enabled Teams Secondary Ringtone 100% for Citrix Workspace app release 2307.1 and greater – Citrix Knowledgebase article

Citrix WEM and Profile Management

• Download Citrix Workspace Environment Management 2308 – on-prem web console; Edge browser support for WEM Transformer
• What’s New in Citrix Workspace Environment Management (WEM) cloud service – web console supports registry entries and file system operations; review the privilege elevation logs in the web console – Citrix Docs

Citrix Provisioning

• Download Citrix Provisioning 2308 – Support for provisioning target devices in untrusted domain; Target Device wizard can provide login servers for UEFI target VMs when using BDM boot; Windows 11 on Nutanix AHV 6.5 Long Term Support (LTS)

Citrix StoreFront

• What’s new in Citrix StoreFront 2308 – Advanced Health Check enabled by default; App protection for hybrid launches; XenApp 6.5 removed from console – Citrix Docs

Citrix Workspace app

• Download Citrix Workspace app 2308 for Mac

Citrix Gateway

• Update Citrix Secure Access and SSO apps to 23.09.1 before upgrading OS on Mac and iOS devices – Citrix Knowledgebase article

Citrix Cloud

• Citrix Cloud Licensing domain name truncation:  allows unique users to be counted based on their account name alone, disregarding the domain name portion of the username – reduces license usage – Citrix Cloud Updates

Microsoft

• Nerdio for AVD Version v5.3 Release Notes – VM Right-Sizing for Dedicated Desktops; Scripted Actions can now be delegated to users to run on their own desktop

Other

• Zoom Security bulletin: Improper authentication in Zoom clients (including VDI clients)

For more immediate updates, follow me at http://twitter.com/cstalhood.

Interesting EUC items from last week:

Citrix Virtual Apps and Desktops

• Download Citrix Automated Configuration for Virtual Apps and Desktops 3.0.91 updated Sept 7 – Fixed issue with importing Admin Folders

Citrix HDX

• Download Citrix HDX Audio Diagnostic Tool 1.0

Citrix StoreFront

• Download Citrix Workspace app 2309 for HTML5

NetScaler ADC

• CISA’s article on NetScaler vulnerability CVE-2023-3519 has been updated
• Download Citrix ADC NetScaler Release 13.0 Build 92.18

Citrix Gateway

• Download Citrix NetScaler Gateway EPA Libraries for Windows updated Sept 8

Citrix Cloud

• Citrix support for creating MCS machine catalogs in a vSAN 8 environment is “Releasing” – Citrix Cloud Updates
• Citrix Session Recording service What’s new September 2023 – Audio recording for non-optimized HDX audio; Lossy screen recording; Fast seeking through ICA screen recording – Citrix Docs

VMware

• Download VMware App Volumes 4, version 2212.7 – bug fixes

Microsoft

• Download Microsoft AVD Remote Desktop WebRTC Redirector Service for Teams updated Sept 7

For more immediate updates, follow me at http://twitter.com/cstalhood.