Glossary
DTLS (Datagram Transport Layer Security)
The UDP version of TLS. DTLS provides encrypted transport over a connectionless protocol — the case for VPNs (NetScaler DTLS), IPsec, and real-time traffic. Since UDP guarantees neither ordering nor delivery, DTLS handles retransmission, sequencing, and reassembly itself. Security is equivalent to TLS — but it is a separate code path: a DTLS flaw is not a TLS flaw (see NetScaler CVE-2026-88772, which only applies when DTLS is enabled).
Why it appears in a VPN gateway
NetScaler ADC/Gateway uses DTLS to encrypt part of the VPN traffic. DTLS is enabled by default on VPN virtual servers — a DTLS flaw is therefore not an edge case: it is the default configuration. That is why the impact of CVE-2026-88772 is conditioned on DTLS being enabled.