TagWAF

Securing Citrix Gateway using Citrix ADC Bot Management, Citrix Web Application Firewall and DOS-Protection

By Johannes Norz
28 October 2021
20 Min read
4 comments
S

last update: February 21st 2022 Recently, I had been asked, how to protect a gateway from threads. It’s easy, I thought, Citrix ADC has everything needed in good quality: A Bot Management, Web Application Firewall (WAF), and AppQoE (Application quality of experience, a DOS protection feature). So nothing easier than that: Create the policies desired and bind them to the gateway. Shortly...

Read onRead later4 comments

How to start a Citrix ADC / NetScaler WAF Project, Part 5: Field Formats

By Johannes Norz
28 December 2020
7 Min read
2 comments
H

This is the fifth part of this blog. Part Part 1 2 3 4 5 Form-fields are a major gate to send malicious data to a web-server. It’s obvious, a website programmer does not want to do input validation twice, on the user and on the server-side. What could happen? If everything is tested on the client-side, data arriving on the server-side has to be good. Even worse: If an input field does not...

Read onRead later2 comments

How to start a Citrix ADC / NetScaler WAF Project, Part 4: Start URLs

By Johannes Norz
23 January 2020
12 Min read
5 comments
H

This is the forth part of this blog. Part Part 1 2 3 4 5 Click here to see how to start your WAF project StartURLs are a powerful tool to protect a web server. Probably, creating StartURLs will be the first thing you need to do. There are two ways to deal with it: Learning or doing. Learning Learning does not mean, you learn, instead Citrix ADC / NetScaler learns about the application. There is...

Read onRead later5 comments

How to start a Citrix ADC / NetScaler WAF Project Part 2: Signatures

By Johannes Norz
22 January 2020
4 Min read
Add comment
H

This is the second part of this blog. Part 1 2 3 4 5 Click here to see how to start your WAF project Signatures Make sure, signatures get updated automatically. Today (January 22 2020) we have version 40. Check the auto update settings. Check, if Signatures Auto Update is enabled and Click on “Check URL”. This will connect to the update server and see the current version of signatures...

Read onRead laterAdd comment

How to start a Citrix ADC / NetScaler WAF Project, Part 1: General

By Johannes Norz
22 January 2020
6 Min read
Add comment
H

This is the forth part of this blog. Part Part 1 2 3 4 5 I am currently working on a Citrix ADC (NetScaler) WAF project. It’s a big international enterprise, security is of some concern to them. So everything hould be pretty much straight forward? Well, it never is. So, how to begin? Well, I almost forgot to mention: I have to introduce myself to the customer. “Hi, I’m Johannes...

Read onRead laterAdd comment

Protecting a URL using Citrix ADC responder policies

By Johannes Norz
10 January 2020
2 Min read
Add comment
P

Recently a friend asked a question: How is it possible to bypass a responder policy. They knew it happened, but they could not reproduce. HTML- Encoding HTML Encoding is a stupid trick, used by hackers ever since. Any character may get encoded using a encoding table. So instead of using you might use something like . This is strictly following standards. No one does, as it is huge overhead, but...

Read onRead laterAdd comment

statistical data from Citrix ADC / NetScaler APPFW logs

By Johannes Norz
13 October 2019
5 Min read
2 comments
s

Sometimes, people want to know, how to extract data from APPFW logs. That’s easy, it is in /var/log/ns.log (and it’s predecessors, these ns.log.XX.gz). grep APPFW ns.log will extract all application firewall logs. zcat ns.log.*.gz |grep APPFW will do the same to the old logs. Unfortunately this will give you a terrible mess of output. It’s hardly possible to find false positives...

Read onRead later2 comments

NetScaler WAF profile types

By Johannes Norz
22 March 2019
4 Min read
Add comment
N

One of the first things you do if you need to secure a web appication using Citrix NetScaler ADC WAF (Web paalication Firewall), is setting the correct profile type. Even though the profile type may bet changed later on, it is a serious decision you have to do. There are two settings: The Profile Type Web Application (HTML) XML Application (XML, SOAP) Web 2.0 Application (HTML, XML, REST)...

Read onRead laterAdd comment

How will a Citrix ADC (NetScaler) Web-application Firewall (WAF) change your ADC’s behaviour?

By Johannes Norz
11 February 2019
13 Min read
Add comment
H

There is one thing different about a Citrix ADC WAF (Web Application Firewall) compared to most other features in Citrix ADC: It will affect your whole ADC deployment as soon as you turn it on. It you would, for example, turn on rewriting feature (enable feature RW), it would probably add a microsecond or two to packet processing, but apart from this not affect anything, as there are no policies...

Read onRead laterAdd comment

Concerns about Citrix NetScaler Web Application Firewall (WAF)

By Johannes Norz
14 May 2018
5 Min read
Add comment
C

Let’s talk about a WAF, a Web Application Firewall on a Citrix NetScaler. What’s to be concerned off? Is it worth while considering a NetScaler to be your WAF? I do work for several companies, including Citrix Consulting Services. Recently I worked on some Web Application Firewall projects, so I have some experience on it. Usual concerns will a Citrix NetScaler be really safe WAF? How...

Read onRead laterAdd comment

Recent Posts

Recent Comments