Citrix ADC

Citrix ADC is an application delivery and load balancing solution for monolithic and microservices-based applications.

Asset Types Fetched

• Devices, Load Balancers, Network Routes

Data Retrieved through the Adapter

Devices - Fields such as IP Address, MAC Address, Hostname, Type, Current State, Version, Authentication Profile, Deployment Type, User Domains

Load Balancers - Fields such as Name, Host IP, Load Balancer Type, Service Type, Ports, Service Group Name, DNS and Persistence Settings

NAT Rules - Fields such as NAT Type, Source Range, Destination Range, Protocols, Is Static, Target Resource Name and Type

Before You Begin

APIs

Axonius uses the Citrix NITRO API. The following endpoints are called:

Devices

• GET /nitro/v1/config/Interface- Retrieves Network Interfaces
• GET /nitro/v1/config/vpnvserver`- Retrieves VPN Virtual Servers
• `GET /nitro/v1/Servers/config/server`- Retrieves Servers
• GET /nitro/v1/config/nshardware, GET /nitro/v1/config/nsversion, GET /nitro/v1/config/nslicense - Retrieves Appliance (composite)

Load Balancers

• GET /nitro/v1/config/lbvserver - Retrieves Load Balancer Virtual Servers
• GET /nitro/v1/config/lbvserver_servicegroupmember_binding - Retrieves Load Balancer service group member bindings
• GET /nitro/v1/config/lbvserver_service_binding - Retrieves Load Balancer service bindings
• GET /nitro/v1/config/lbvserver_servicegroup_binding - Retrieves Load Balancer service group bindings
• GET /nitro/v1/config/gslbvserver - Retrieves Global Server Load Balancers
• GET /nitro/v1/config/gslbvserver_gslbservicegroupmember_binding - Retrieves Global Server Load Balancer service group member bindings
• GET /nitro/v1/config/gslbvserver_gslbservice_binding - Retrieves Global Server Load Balancer service bindings
• GET /nitro/v1/config/gslbvserver_gslbservicegroup_binding - Retrieves Global Server Load Balancer service group bindings

NAT Rules (Network Routes)

• GET /nitro/v1/config/inat - Retrieves inbound (DNAT) NAT rules
• GET /nitro/v1/config/rnat - Retrieves reverse (SNAT) NAT rules

Required Permissions

When connecting the adapter, the value supplied for User Name must have administrator permissions for the NetScaler appliance to fetch assets. Refer to Citrix NetScaler 12.0 NITRO API Reference for more information.

Connecting the Adapter in Axonius

Required Parameters

1. Host Name or IP Address - The hostname or IP address of the Citrix ADC server.

2. User Name and Password - The credentials for a user account that has the Required Permissions to fetch assets.

Optional Parameters

1. Verify SSL - Select to verify the SSL certificate offered by the value supplied in Host Name or IP Address. For more details, see SSL Trust & CA Settings.

2. HTTPS Proxy - A proxy to use when connecting to the value supplied in Host Name or IP Address.

3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

4. HTTPS Proxy Password - The password to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

1. Optional items to fetch - From the dropdown, select one or more of the following:
   1. Load Balancer Virtual Server fields - Select this to fetch lbvs_fields.
   2. Version fields - Select this to fetch nsversion_fields.
   3. License fields - Select this to fetch nslicense_fields.
   4. Hardware fields - Select this to fetch nshardware_fields.
2. Fetch Interfaces (default: true) - Select this option to fetch interfaces.
3. Fetch VPN Servers (default: true) - Select this option to fetch VPN servers.
4. Fetch Servers - Select this option to fetch servers.
5. Fetch Appliance (Connection) as Device - Select this option to fetch NetScaler appliance (connection) as a device asset.
6. Fetch NAT Rules - Select this option to fetch inbound (DNAT) and reverse (SNAT) NAT rules as Network Route assets. Use this when you need visibility into your network traffic flow analysis, compliance reports and validation, and troubleshooting connectivity issues.

Version Matrix

This adapter has only been tested with the versions marked as supported, but may work with lower versions. Please contact Axonius Support if you have a version that is not listed and it is not functioning as expected.