7.2.53

New Features

  • Network Telemetry
  • Let's Encrypt Support
  • Bandwidth Rate Limiting & QoS
  • StoreFront Pre-Authentication (ESP) for Citrix Workspace/Receiver
  • Kemp Ingress Controller for Kubernetes
  • OpenID Connect Support
  • Increase strength of DHE key exchange keys for SSL/TLS to 4096
  • HA: Interface Reboot Feature
  • GEO: Additional Record Types Supported
  • GEO: Layer 7 HTTP/HTTPS Site Health Checks
  • Client Certificate Authentication with No Server Side Authentication

Change Notices

  • Enhanced ESP Client Session Logging
  • Changes Affecting Long-Lived UDP Connections
  • LoadMaster Change of Ownership - Improve existing workflow
  • Content Rules and 512-byte Response Limit
  • Cavium III SSL Accelerator Performance Switch
  • IRQ Pinning Default for LoadMaster MT VNFs
  • Certificate Signing Request (CSR) Generation Permissions
  • LoadMaster Licensing FQDN Change
  • GEO: Option to Prevent a Disabled GEO Cluster from Responding
  • Updated RSA Root Certificate for Self-Signed Certificates

Security Updates

  • NTLM Proxy Mode
  • Elliptical Curve CA Certificate Regenerated
  • OpenSSH Update
  • Updated Certificate PIV Support (Smartcard) for SSO & WUI
  • X.509 Certificate Format Updated
  • Outbound Connection Certificate Validation

7.2.52

New Features

  • Rate Limiting / Quality of Service (QoS) for Incoming Connections
  • SSL Information in Client Request Headers
  • DHCPv6 Support
  • Radius 2 Factor + LDAP Enhancement
  • Content Rule Page Updates
  • Ability to use SNI in SubVS, as well as SNI-Hostname Pass Through
  • Permitted Groups in Multi-Domain Environment
  • HTTP/HTTPS Health Check OPTIONS Method Support
  • Quality of Service DSCP Pass Through Support
  • GEO: TXT Record Support

Change Notices

Best Practices Cipher Set Updated

Adjustable Timeout for KCD Connections

Per-VS Health Check Settings

Disabling SSL Master Secret Extension Handling

Modified EC Curves in LoadMaster Client Hello

Enhanced HA Sync Parameters

Security Updates

  • Best Practices Cipher Set Updated
  • Adjustable Timeout for KCD Connections
  • Per-VS Health Check Settings
  • Disabling SSL Master Secret Extension Handling
  • Modified EC Curves in LoadMaster Client Hello
  • Enhanced HA Sync Parameters

7.2.51

New Features

  • Citrix StoreFront Gateway for External Virtual Apps and Desktops
  • Rate Limiting of Real Servers
  • Redundant Key Distribution Center for KCD Authentication
  • UI Login Integration with Cisco ACS / ISE

Change Notices

  • Configurable KCD Authentication Request Wait Time
  • Specifying the Protocol for Remote Logging
  • Port Following on Generic Virtual Services in UI
  • Enhanced Single Sign On Log Messages

Security Updates

  • Updated NIST FIPS Cryptographic Module Certification
  • Assigning Intermediate Certificates to Virtual Services
  • Regeneration of SSH Host Key

7.2.50

New Features

  • JSON Web Token Support
  • UI Access Control
  • Factory Reset Secure Delete
  • ESP Logging Common Event Format (CEF) Option
  • Minimum Password Length
  • Securing Outbound Connections
  • OCSP Stapling for Outbound Connections
  • Elliptic Curve Cipher Sets
  • Elliptic Curve Self-Signed Certificates
  • Elliptic Curve Certificate Signing Requests
  • IRQ Pinning
  • Azure Support for 10 Gb Interfaces
  • API Support for Adding and Removing Non-Local Sorry Servers
  • Console Logging Enhancements

Change Notices

  • Signature Verification of Updates and Add-Ons Enabled By Default
  • URL Hash Scheduling Mechanism Optimization
  • GEO Limit for IP Addresses in an FQDN Increased from 16 to 64
  • GEO HA Configuration Issues in AWS and Azure Cloud Platforms
  • VMware Hardware Compatibility Level
  • LDAP: Username Only Authentication to Real Server
  • Log Format Enhancements
  • Azure Agent Version Upgrade
  • Backup Includes Custom HTML Files for Redirection Handling
  • Improved Metered Licensing Transitions
  • API Version 2 Enhancements (Beta)

7.2.49.1

New Features

  • Digital Verification of Upgrade Patches and Add-On Packages
  • CAPTCHA V2 for Forms Based Authentication
  • SNMP: Real Server Statistics Values
  • Content Rules Enhancement: Flag Negation Logic for Conditional Rule Execution
  • WAF Support for Chunked Transfer Encoded POST/PUT Requests
  • High Availability Broadcast Support

Change Notices

  • Reduced Frequency of License Expiry Notifications
  • IPv6 Address Handling Enhancements
  • UI Safe Edit Mode (Beta)
  • Call Home Transitions to Kemp Analytics
  • Relicensing SPLA LoadMasters