Automation
The jobs that go wrong at 2 a.m., as workflows with a preview before anything is sent and a report after. Certificate deployment takes renewed files from a share and Renew and deploy obtains them over ACME; both read every binding on the appliance first, install the new certificate dated or in place, move every binding and read the result back, with a rollback plan. SSH commands is a job the way the Citrix Console builds one: commands from a template or typed, a value per appliance for each $variable$, a rollback typed if a command is refused after one was accepted, drafts, and a report of every run or only of the ones that failed. Appliance analysis reads each NetScaler live and runs the support bundle analysis on a schedule. Certificate cleanup removes what expired and is bound to nothing, Reporting builds any of the dashboard’s reports on a schedule and e-mails it or writes it to a folder, and File copy copies files from one NetScaler to others on a schedule, with the Webroot IP Reputation database preselected, to give an appliance whose own updates fail a copy from one whose updates work; each target’s iprep.log is read after the swap and quoted in the run. Every run is kept, and every kind is licensed with the module it acts on.
- Four questions per workflow: where from, where to, when, and what will change
- A certificate shared outside your selection waits for you to acknowledge it
- Commands checked before they are sent: a pipe the appliance’s CLI would split, or a verb that restarts it, is refused unless you allow it
- Run history with Succeeded, Partially completed, Failed and Preview said apart; the reports kept here to download
- File copy reads the source’s log so a copy is never taken in the middle of an update, checks the Webroot database as a whole before any target is touched, and keeps each target’s own file beside it to put back if anything fails; for other files under /var or /nsconfig you name the files, the log rule and the conditions (never ns.conf)
- Schedules down to every 5 minutes
- Reports e-mailed through your own mail server (Resend, Office 365 or a relay), the password encrypted and never shown
