| SSL FIPS |
No |
No |
No |
No |
No |
No |
No |
| SSL Certificate Bundle |
No |
No |
No |
No |
No |
No |
No |
| SSL interception |
No |
No |
No |
No |
No |
No |
No |
| Content switching actions |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Policy-based logging for content switching policies |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Rate limiting |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Action analytics |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| GSLB |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RTSP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DNSSEC |
No |
No |
No |
No |
No |
No |
No |
| DNS64 |
No |
No |
No |
No |
No |
No |
No |
| FTP |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| TFTP |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Connection mirroring |
No |
No |
No |
No |
No |
No |
No |
| Integrated caching |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| Large shared cache |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| Front end optimization |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| Application firewall |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| HTTP Denial-of-Service Protection (HDOSP) |
Deprecated |
Deprecated |
Deprecated |
Removed |
Deprecated |
Removed |
Deprecated |
| Priority queuing (PQ) |
Node-Level |
Node-Level |
Deprecated |
Removed |
Deprecated |
Removed |
Deprecated |
| Sure connect (SC) |
Node-Level |
Node-Level |
Deprecated |
Removed |
Deprecated |
Removed |
Deprecated |
| AppQoE |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Surge protection |
Node-Level |
Node-Level |
Yes |
Node-Level |
Yes |
Node-Level |
Yes |
| MPTCP |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Striped SNIPs |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
| MSR |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
| IS-IS (IPv4 and IPv6) |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Jumbo Frames |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
No |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
No |
Yes; Note: Supported in L2 clusters. Supported in L3 clusters over UDP tunnel. |
No |
| IP-IP tunneling |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Link load balancing |
Yes |
Yes |
Yes |
Yes |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
| FIS (Failover Interface Set) |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Link redundancy (LR) |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| NAT46 |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| NAT64 |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| RNAT6 |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| LSN/CGNAT |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| IPv6 ReadyLogo |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Traffic domains |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
No |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
No |
Yes; Note: Supported in L2 clusters. Not supported in L3 clusters. |
No |
| Route monitor |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| GRE tunneling (CB) |
No |
No |
No |
No |
No |
No |
No |
| Layer 2 mode |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Net profiles |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| HTTPS callout |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| AAA-TM |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| AppFlow |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| Web Insight |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| HDX Insight |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| VMAC/VRRP |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| NetScaler Push |
No |
No |
No |
No |
No |
No |
No |
| Stateful Connection Failover |
No |
No |
No |
No |
No |
No |
No |
| Graceful Shutdown |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DBS Autoscale |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| DSR using TOS |
No |
No |
Yes |
Yes |
Yes |
Yes |
Yes |
| Finer Startup-RR Control |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| XML XSM |
No |
No |
No |
No |
No |
No |
No |
| DHCP RA |
No |
No |
No |
Yes |
No |
Yes |
No |
| Bridge Group |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Network Bridge |
No |
No |
No |
No |
No |
No |
No |
| Web Interface on NetScaler (WIonNS) |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| EdgeSight Monitoring |
Deprecated |
Deprecated |
No |
Deprecated |
No |
Deprecated |
No |
| Metrics tables - Local |
No |
No |
No |
No |
No |
No |
No |
| DNS Caching |
Node-Level |
Node-Level |
Node-Level |
Node-Level |
Node-Level |
Node-Level |
Node-Level |
| Call Home |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| NetScaler Gateway ICA Proxy mode |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| NetScaler Gateway (SSL VPN / full VPN and clientless VPN) |
Node-Level |
Node-Level |
No |
Node-Level |
No |
Node-Level |
No |
| Citrix CloudBridge Connector |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| Policy Based Routing (PBR/PBR6) |
Yes |
Yes |
No |
Yes |
No |
Yes |
No |
| IPv4 Policy Based Routing (PBR) with LLB virtual server as next hop |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| IPv6 Policy Based Routing (PBR6) with LLB virtual server as next hop |
No |
No |
No |
No |
No |
No |
No |
| Subscriber awareness |
No |
No |
No |
No |
No |
No |
No |
| Dynamic Routing |
Yes with v6 protocols (ospfv3, RIPng, ISIS6, BGP6) support |
Yes with v6 protocols (ospfv3,RIPng, ISIS6, BGP6) support |
Yes |
Yes with v6 protocols (ospfv3, RIPng, ISIS6, BGP6) support |
Yes |
Yes with v6 protocols (ospfv3, RIPng, ISIS6, BGP6) support |
Yes |
| SYSLOG-TCP, load balancing of syslog servers, SNIP support, and FQDN support for syslog |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
Yes |
| Bot management |
No |
Yes |
No |
Yes |
No |
Yes |
No |
| VXLAN |
No |
No |
No |
No |
No |
No |
No |
| NSVLAN |
Yes |
Yes |
No |
Yes |
Yes |
Yes |
Yes |