What is the upgrade procedure for an HA pair?

For a high-availability pair, the secondary node is upgraded first and validated. A controlled failover is then performed, and the previously primary node is upgraded. This approach maintains traffic availability throughout the process.

What firmware version do you upgrade to?

The target version is agreed during the intake call based on your current version, any constraints from dependent systems, and the Citrix recommended build at the time of the engagement.

What if something goes wrong?

A rollback plan is prepared before any change is made. For hardware appliances, a configuration backup is taken. For virtual appliances, a snapshot is created. Rollback can be executed immediately if needed.

Enterprise Specialist

NetScaler
Firmware Upgrade

Controlled upgrade of your NetScaler appliance or HA pair to a current firmware release. Pre-upgrade review, rollback plan, upgrade execution, post-upgrade validation and full change documentation in a planned maintenance window.

💰 €1,920 fixed (excl. VAT)

⏱ 1–2 working days

💻 Remote

Request this engagement ← All packages

€1,920

Fixed price · excl. VAT

What's included

Pre-upgrade review: current firmware version, target build selection and compatibility check
Rollback plan prepared and shared before the maintenance window opens
Firmware upgrade of standalone appliance or HA pair (both nodes)
Post-upgrade validation: traffic, VPN, authentication and feature checks
Full change documentation as deliverable

Ideal for

Organisations running NetScaler on an older firmware release who need to update for security patches, bug fixes or feature availability. Also suitable as part of a broader infrastructure refresh or before adding new Citrix workloads.

Why upgrade with a specialist?

A structured upgrade reviews the release notes for your specific version jump, identifies relevant breaking changes and validates all key functions after the upgrade before the maintenance window is closed.

For HA pairs, the upgrade is sequenced: secondary node first, controlled failover, then the primary node. This keeps traffic available throughout the process.

What's included in the fixed price

The following work is covered by the fixed price of €1,920. Work outside this scope is available as additional work at €135/hr.

✓ In scope

Pre-upgrade assessment, supported upgrade path and HA pair planning
Configuration backup validation
Firmware upgrade in scheduled maintenance window
HA pair coordinated upgrade with controlled failover
Post-upgrade validation and functional checks
Rollback plan and change documentation
Troubleshooting buffer for unforeseen issues, no surprise invoices

* Package price is based on one standard HA pair (physical or VPX, approximately 2 working days) or a standalone appliance. Complex environments such as SDX platforms hosting multiple VPX instances, or environments with multiple appliances or HA pairs, are quoted separately.

// How it works

From preparation to validated upgrade

Intake and review

Current firmware version, appliance model and key configuration items (VPN, auth, load balancing) are reviewed. Target build is selected and breaking changes for the version jump are identified.

Preparation and rollback

Configuration backup is taken. For virtual appliances, a snapshot is created. Rollback procedure is documented and shared before the maintenance window opens.

Upgrade execution

For HA pairs: secondary node upgraded first, validated, then a controlled failover is performed before upgrading the primary. Standalone appliances follow a single maintenance window.

Validation and documentation

Traffic, VPN, authentication and HA state are tested after the upgrade. Full change document is delivered as part of the engagement, including before/after version and validation results.

Frequently asked questions

The secondary node is upgraded first and validated. A controlled failover is performed, then the previously primary node is upgraded. This keeps traffic availability throughout the process with minimal interruption.

For HA pairs, the controlled failover process keeps downtime to under a minute under normal conditions. For standalone appliances, a brief maintenance window is required. Exact impact is confirmed during the intake call.

The target version is agreed during the intake call, taking into account your current version, constraints from dependent systems, and the Citrix recommended build at the time of the engagement.

A rollback plan is prepared before any change is made. Configuration backups and snapshots are in place. If needed, rollback can be executed immediately without waiting for further analysis.

Yes. The combined CVAD and NetScaler firmware upgrade is available for €5,280 fixed, saving €560 versus running the two engagements separately.

Typically within one to two weeks of the intake call, depending on your change management process and the availability of suitable maintenance windows.

Ready to upgrade your NetScaler to a current firmware release?

Send a message or email directly. I'll respond within one business day and we can confirm your current version, target build and scheduling.

Request this engagement ← View all packages

NetScalerFirmware Upgrade