Trouble shooting Citrix NetScaler Gateway connection issues
One of the most annoying issues in Citrix NetScaler are ICA / HDX connection issues. The reason for this is the way connection issues are reported. There are two potential sources of trouble: Citrix...
View ArticleRedirecting a user to a SSL page (preserving the URL)
I’m just setting up a Web Application Firewall on a Citrix NetScaler 11.1 for a costumer’s shop. My costumer mandated: most of the website has to be available via HTTP. However we don’t want to expose...
View ArticleReading matter for a Citrix Pro
This is multi langage: a mix of German and English. Look for the flag you prefer .. Kürzlich haben mich Kollegen gefragt, welche Bücher es im Citrix Umfeld gibt. Ich persönlich gehe lieber in einen...
View ArticleIt’s all cloudy, now ;-)
Citrix had been cloud computing ever since. In fact, Citrix started doing professional Cloud Computing in 1995. They improved their private cloud approach in 2002 by launching Secure Gateway (and all...
View ArticleSelecting the correct language based on Accept-Language HTTP header using...
I recently was hired to create a web application firewall (WAF) using Citrix NetScaler to protect a SAP Hybris based e-shop. This shop has content for several languages, so we had to select the right...
View ArticleWhat’s in a WAF (Web application firewall)
This article is a very first answer to a question I recently received. The question was: You’re talking about web application firewalls. I’d like to know how to use the WAF for reverse proxying. … I...
View ArticleDDOS protection using Citrix NetScaler, 1st part
How to protect a website using Citrix NetScaler? Well it seems to be easy. A nonsense question. We may use AppQoE (Application level Quality of Experience), a feature introduced with NetScaler version...
View ArticleDDOS protection using Citrix NetScaler, 2nd part
Yesterday I published a blog about DDOS- protection. I used the Citrix NetScaler AppQoE feature to do so. That’s nice, but not enough. I still could beat my server to a pulp easily. Just 10 clients...
View ArticleWhy do I love HDX on UDP in Citrix XenDesktop and XenApp?
Why do I love HDX on UDP in Citrix XenDesktop and XenApp? (HDX Enlightened Data Transport EDT) Well, I’m mainly a network guy. So I’ll take a look at this brand new feature from networking...
View ArticleCitrix NetScaler Logging and policy trouble shooting
Citrix NetScaler Logging and policy trouble shooting Some times it’s quite hard to understand what’s going on. There is so much mystics about policies. And it’s even harder to understand what went on...
View ArticleCitrix NetScalerVPX out of disk space
My NetScaler VPX ran out of disk space. I did several tricks like adding a second disk and mounting ít into the update directors, to be able to upgrade my NetScaler. Today I found time to investigate...
View ArticleCreating a Citrix NetScaler Test environment
Creating a Citrix NetScaler Test environment Being a Citrix Certified Instructor I am very much aware of the Red/Green/Blue website used during official Citrix NetScaler training (CNS-220, CNS-222). I...
View ArticleScheduling NetScaler commands for a specific time on Citrix NetScaler
Sometimes we have to schedule commands in a Citrix NetScaler. A good example would be: force HA failover It’s obvious, we don’t want to fail over during day time to not disconnect TCP connections, to...
View ArticleCitrix NetScaler as a SAML IDP and SAML SP
I needed to use a Citrix NetScaler both, as a SAML identity provider (IDP) and service provider (SP). So I set up my test environment accordingly. What my test environment looked like: You see, I...
View ArticleConcerns about Citrix NetScaler Web Application Firewall (WAF)
Let’s talk about a WAF, a Web Application Firewall on a Citrix NetScaler. What’s to be concerned off? Is it worth while considering a NetScaler to be your WAF? I do work for several companies,...
View ArticleCitrix NetScaler is dead. Long live the Citrix ADC
All of us are always a bit shy looking at Citrix Synergy: What will it bring? Well, this time, Citrix comes up with brand new names for all products. It’s the first time Citrix is renaming the product....
View ArticleDetecting Slowloris with Citrix NetScaler (Citrix ADC)
If you read about slowloris, you always read about NetScaler doing a great job. Tests in our lab environment show: NetScaler will successfully block these attacks. Ad there is hardly anything we have...
View ArticleHow can Citrix NetScaler ADC protect cookies from being stolen?
How to protect your cookies using Citrix NetScaler I recently did a web application firewall (WAF) project for a big company owning and hosting hundreds of websites. They did several penetration tests....
View ArticleCitrix NetScaler ADC: Having fun with Nitro
Recently I had several requests related to NITRO. NITRO is Citrix NetScaler’s API. Any device may communicate to a NetScaler using NITRO. Even a browser! Citrix exposes several settings and counters...
View ArticleScoring an A+ on SSL Labs using a Citrix ADC / NetScaler version 12.1
This will be my shortest blog about the subject ever. Citrix finally did it! They created a “Built-in secure front-end SSL profile” called ns_default_ssl_profile_secure_frontend. What do you need to...
View Article