Category: Netscaler
-
Configuring NetScaler for audit logging

In today’s security-conscious environment, maintaining comprehensive audit logs and integrating them with Security Information and Event Management (SIEM) systems is crucial. Citrix NetScaler (formerly known as Citrix ADC) provides robust syslog capabilities that can be leveraged to enhance your organization’s security posture and compliance efforts. Understanding NetScaler’s Audit Logging Capabilities NetScaler generates various types of…
-
Advanced Session Policies for NetScaler Gateway (Works for SAML Auth too)
Thought I will document this as it may come in handy for others looking to do a similar thing using Advanced policies in NetScaler. I recently rolled out a project for enabling SAML authentication for Azure MFA using Citrix FAS (for Single Sign ON). There were a few key findings from that piece that I…
-
Upgrading a Standalone NetScaler and HA enabled NetScalers
Firstly, Standalone NetScaler isn’t the ideal NetScaler setup. Not having a resilient NetScaler configuration is considered almost criminal these days. But, hey it doesn’t always work like that in the real world. Does it? There will be an outage when upgrading a standalone appliance, and there is no other way around it. Prep Login to…
-
Implement Rate Limiting on NetScalers (Citrix ADCs)

Ever wondered about securing your Citrix ADC (formerly NetScaler) or Gateway implementation further with all the DDoS news going around of late. If you already have a NetScaler/ADC implementation, you can easily leverage it and configure Rate Limiting feature which is a fantastic weapon to stop such threats and keep the malicious actors at bay.…
-
Integrate Azure MFA with NetScaler Gateway for Two-Factor Authentication (Using NPS Plug-ins)

The Network Policy Server (NPS) extension for Azure MFA adds cloud-based MFA capabilities to your authentication infrastructure using your existing servers. With the NPS extension, you can add phone call, text message, or phone app verification to your existing authentication flow without having to install, configure, and maintain new servers. This extension was created for…
