DUO configuration errors - Citrix ADC Netscaler version 13.1 Build 24.38

Hello Everyone,

We currently have DUO enabled on a Citrix Netscaler (version NS13.0: Build 58.32) and all is running well.

When we attempt to upgrade the Netscaler to version 13.1 Build 24.38 (released on 06/07/22), we receive the following errors related to DUO:

The following configuration lines will get errors in 13.1 and both they and dependent configuration will be removed from the configuration:

add rewrite action rw_act_insert_var_DUO_ENABLED insert_before_all “HTTP.RES.BODY(120000).SET_TEXT_MODE(IGNORECASE)” “"var DUO_ENABLED = true;"” -pattern “if (pwc ==2”

add rewrite action rw_act_insert_DUO_ENABLED insert_after_all “HTTP.RES.BODY(120000).SET_TEXT_MODE(IGNORECASE)” “" && !DUO_ENABLED"” -pattern “if (pwc ==2”

We verified that the configuration lines above are the exact lines mentioned in the DUO Netscaler configuration doc. All is running well using that configuration on Netscaler version 13.0.

Do these lines need to be rewritten/reformated for compatibility with Netscaler 13.1 Build 24.38? Or any other suggestions regarding these errors?

We are unable to upgrade until the rewrite policy commands are formatted properly.

Thank you,

AM

Hi @am_cumc, welcome to the Duo Community!

Since you have questions about specific error messages and already tried using the Duo Docs on Netscaler configuration, I recommend that you contact Duo Support. They can give you guidance on how to resolve those error messages and any additional information on Duo and Netscaler based on compatibility.

Hope this helps! For future reference, you can also read How to contact support and get help for Duo for more tips on getting support from Duo.

1 Like

Good morning @am_cumc , glad to have you with us! In addition to @jenrj suggestion about contacting Support, I wanted to also mention that we recommend nfactor for firmwares 12.1-51.16 or later, which does not require you to rewrite any rules for compatibility. You can learn more in our Duo for Citrix Gateway: nFactor Instructions | Duo Security

Have a wonderful day!

1 Like