Customize Page title & favicon on Citrix Access Gateway Enterprise Edition

Posted on July 13th, 2010

Shown here:

It is possible to replace the logo with your own one and change the text to be more appropriate.

Logo

The logo is:  /netscaler/ns_gui/vpn/images/AccessGateway.ico

replace with your own .ico file but keep the same file name

Browser title text

The title text is in two places

First: /netscaler/ns_gui/vpn/index.html

Search for the section:

<TITLE>Citrix Access Gateway</TITLE>

and change to your text

<TITLE>My CAG Text</TITLE>

Second: /netscaler/ns_gui/vpn/resources/en.xml

Search for the multiple sections:

<Title>Citrix Access Gateway</Title>

and change all of them to your text

<Title>My CAG Text</Title>

Keep changes after reboot

Copy the modified files to /var/mods and add the following lines to the /nsconfig/rc.netscaler file

cp /var/mods/images/AccessGateway.ico /netscaler/ns_gui/vpn/images/AccessGateway.ico
cp /var/mods/index.html /netscaler/ns_gui/vpn/index.html
cp /var/mods/en.xml /netscaler/ns_gui/vpn/resources/en.xml

New look and feel

Now it will look how you want.

Tags: CAG, CAG EE, CAG Enterprise, CAG Enterprise Edition, CAGEE, Citrix Netscaler, customisation, favicon.ico, modification, title
Filed under Citrix Access Gateway, Citrix Netscaler | 1 Comment »

Customize logos on Citrix Access Gateway Enterprise Edition Logon Screen

Posted on July 12th, 2010

Change to a white theme

This is detailed in several places but most notably here: CTX123607

This gives the default logon screen in white.

Identify the images used

Here is a screen shot of the default view and list of the associated images & resolutions

There are five main images used in this page and they are:

I have found it better to stick to the same dimensions when replacing these images as sometimes the style sheets need to be modified to allow larger image sizes. If you can, stick to the same dimensions.

The background for image 1 & 2 is in the image itself. If you want to keep the same shading and blue bar, then edit the existing image and keep the background.The same applies for the logon logo (image 3) as the shading is part of the image.

To modify the border glow it is best to open up the existing image and use the dropper tool to fill the line in the desired colour.

File locations

These image files need to be copied to the /netscaler/ns_gui/vpn_images location on the Netscaler device. However, when the netscaler is rebooted the changes are lost so they must be copied here at every startup.

Copy all the images to a folder under the /var/ folder (I use /var/mods/) and this can be the store for all modifications.

Startup script

The /nsconfig/rc.netscaler file runs at every boot, so add entries to this file to copy the modified files from the /var/mods/ folder to the correct location. For example,

tar -zxvf /var/mods/AGEEwhite.gz -C /netscaler/ns_gui/vpn/images
cp /var/mods/images/ctxHeader01.gif /netscaler/ns_gui/vpn/images/ctxHeader01.gif
cp /var/mods/images/ctxHeader02.gif /netscaler/ns_gui/vpn/images/ctxHeader02.gif
cp /var/mods/images/CitrixWatermark.gif /netscaler/ns_gui/vpn/images/CitrixWatermark.gif
cp /var/mods/images/LoginIcon.png /netscaler/ns_gui/vpn/images/LoginIcon.png
cp /var/mods/images/LoginPaneCenterLeftBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneCenterLeftBorderGlow.png
cp /var/mods/images/LoginPaneCenterRightBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneCenterRightBorderGlow.png
cp /var/mods/images/LoginPaneFooterLeftBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneFooterLeftBorderGlow.png
cp /var/mods/images/LoginPaneFooterMidBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneFooterMidBorderGlow.png
cp /var/mods/images/LoginPaneFooterRightBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneFooterRightBorderGlow.png
cp /var/mods/images/LoginPaneTopLeftBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneTopLeftBorderGlow.png
cp /var/mods/images/LoginPaneTopMidBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneTopMidBorderGlow.png
cp /var/mods/images/LoginPaneTopRightBorderGlow.png /netscaler/ns_gui/vpn/images/LoginPaneTopRightBorderGlow.png

Final steps

Ensure you boot the netscaler device to confirm the start up script is running correctly and make the same changes to the secondary device if running in an HS pair.

The web page can now look how you want it to!

enjoy

Tags: CAG, CAG EE, CAG Enterprise, CAG Enterprise Edition, CAGEE, Citrix Access Gateway, Citrix Netscaler, color, colour, header image, image, look and feel, modification, watermark
Filed under Citrix Access Gateway, Citrix Netscaler | No Comments »

Upgrading a Netscaler 7000 device from v7.0 to v9.1 build 101.5

Posted on April 9th, 2010

• Download Firmware from Citrix.com
• Download Firmware documentation from Citrix.com
• Use WinSCP or similar to connect to the Netscaler and create the following folders:
  • /var/nsinstall/nsinstall91/build1015/
• Copy the two downloaded updates into this folder
• Using puTTy or similar, connect to the Netscaler
• Uncompress the updates
  • shell
  • cd ..
  • cd var
  • cd nsinstall
  • cd nsinstall91
  • cd build1015
  • tar –zxvf build_9.1-101.5_cl.tgz
  • tar -zxvf ns-9.1-101.5-doc.tgz
• Run the update
  • ./installns
  • Reboot: Y

I updated a High Availability pair and did the secondary device first. Once the reboot was finished, I forced a failover to test the update and then repeated the same process on the other device.

Tags: 101.5, 7.0, Citrix Netscaler, firmware, installns, nsinstall, tar, update, upgrade
Filed under Citrix Access Gateway, Citrix Netscaler, Uncategorized | 2 Comments »

Citrix XML Service DNS Address Resolution & Access Gateway Enterprise SSL error 38

Posted on April 9th, 2010

It was set up in traditional ‘smart access’ configuration and the Web Interface site was configured for 3 seperate farms – XenApp4.5, XenDesktop 4 & Presentation Server 4.0.

Launching sessions through the CAG for the XenApp farm was fine, but I was getting an SSL error 38 – The proxy denied access to message for the other two farms.

In checking the settings I noticed that the farms that produced the error had the ‘XML Service DNS address resolution’ option selected in the farm properties.

Unselecting this option enabled remote connections to work as normal, however this option was required and needed to be re-enabled.

It turns out that the firewall rules had not been set up properly from the DMZ to the DNS servers, so the Netscaler devices were unable to perform DNS lookups. As soon as the Firewall settings were resolved, the Netscalers could perform DNS lookups and resolved the problem.

Tags: CAG Enterprise, Citrix Netscaler, DNS, ssl error 38, the proxy denied access to, XML Service DNS Address resolution
Filed under Citrix Access Gateway, Citrix Netscaler | No Comments »

Using Settings.sol to set Adobe Flash Settings

Posted on March 21st, 2010

When using Adobe Flash to access old content that was coded on previous versions, a message can appear stating that Flash has stopped a potentially unsafe operation. This message could also appear for content running from network shares. The message will be similar to:

If you select the ‘settings’ options the web based Adobe Global Setting panel appears. This actually connects via the internet to a macromedia.com site.

It seems strange that you must connect to an external web site to change settings for a locally installed version of flash – hopefully Adobe will remove this nonsense in the future and release an adm template or something instead. Anyway, each client can set options within this Global Security Settings screen. In this can either the “always allow” option can be selected or a location can be added to the trust list.

Select to Edit Locations | Add location and paste in the value prompted by the gui as this is what was just denied. Or add any other location you want to trust:

Close this web site, relaunch the content and it should now work as expected and display the content without the pop-up warning message.

However, in a situation where multiple clients need to run this content it is inconvenient to ask the users to set this themselves or manually set it on thousands of desktops.

Instead the settings.sol file can be used.

Any of the settings chosen from the web page GUI will be set in the following file (for a WinXP profile)

%userprofile%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol

So to resolve for everyone do the following:

• Logon as one user
• Set the relevant options in the web based GUI
• Copy the settings.sol file to a central location
• Set a logon scripts to copy this file into each users profile at logon

job done.

Tags: adobe, adobe flash player, always allow, flash, global security settings, potentially unsafe operation, settings manager, settings.sol, trust
Filed under Applications, Scripts/Reg | No Comments »