Overview TLS 1.3 is a common since 2020, and established in a common point during the last years as a constant default for SSL Frontend communications across LoadBalancers or ADC’s. But in return, using TLS
Continue reading
Category: NetScaler
NetScaler – Performance Impact for Post-Quantum Cryptography (PQC)
Overview Post-Quantum Cryptography (PQC) involves new public-key security algorithms designed to protect digital data from future quantum computers. NetScaler supports it since 14.1 51.72 – I’ve written about that and the configuration here last year.
Continue reading
NetScaler – Zero Touch Certificate Management (ZTCM)
Overview NetScaler Console’s (NSC) / Console Service Zero Touch Certificate Management now exists a while, but after talking to several customers, I think there are some misunderstandings what’s behind the Feature ZTCM and Manual /
Continue reading
NetScaler – TLS Citrix VDA with TLS 1.3
Overview This Quickpost contains informations about deploying a secure frontend to backend communication with NetScaler, using TLS 1.3 to achieve a continues 443 TCP (UDP with EDT / DTLS) connection from NetScaler Frontend (HDX Gateway)
Continue reading
NetScaler – Session Hijack Protection X-Forwarded-For
Overview Protecting an authenticated User’s Session is very important in todays world. Hijacking an active Session is nothing new, taking over an existing session is the golden ticket for unwanted access, regardless of the MFA
Continue reading
NetScaler – The missing Reporting Tab
Overview Since NetScaler Firmware 14.1 build 56.x the Reporting-Tool is deprecated. With 13.1 you can still use it. What does that mean and what’s the Reporting Tool for? Do you recognize the GUI-design of the
Continue reading
NetScaler Console – Painpoints with LAS-Connect
Overview Customers need to connect their OnPrem NetScaler Console (if you don’t want to use the free NetScaler Console Service) to Citrix Cloud for LAS-Licensing before the 15th of April 2026. Issue When using a
Continue reading
NetScaler – Common WAF blocks for own Products
Introduction As you might know I’m a big fan of the integrated WAF for Gateway an AAA (With newer 14.1 – also for WebGUI MGMT) – I’ve stumbled across some issues where that WAF is
Continue reading
NetScaler – Negotiate SSO and WAF
Overview Recently I’ve stumbled across two identical issues in different environments. One with 13.1 60.29 and the other with 14.1 51.72 (did the same tests with 14.1 56.71, too) A negotiate Auth-Policy, linked to an
Continue reading
NetScaler – Testing new Post-Quantum Cryptography (PQC)
Overview In the recent released NetScaler Firmware 14.1 51.72 they’ve added first Support for the new NIST standard (hybrid) Post-Quantum Cryptography Key Exchange (PQC KX). Let’s have a first look on how to configure the
Continue reading