-={ The Nutanix and Citrix GURU }=-
In this blog post from begining 2020 I created a black and white list for IPv4. Here is an update to achieve the same but then for IPv6. If you dont have IPv6 running already read this post 😉 Note 1: The defaults are just for example and you need…
I’m seeing more and more IPv6 implementations in the wild. And even IPv6 only Citrix ADC gateways. I decided to write this blog post to get a head start how-to enable IPv6 and create a simple IPv6 load balancer (with IPv4 backend service) on the Citrix ADC. First we need…
Microsoft announced that Internet Explorer will be out of supported starting 15 July 2022 for certain Windows 10 versions. (more info here). Here is a responder policy for the Citrix ADC which you can bind to a gateway, lb, cs, etc to alert users they need to use a different…
Some service providers are hosting environments for different customers. So they all just stick to the default StoreFront logo (top left). After some branding and customisation the StoreFront page can look like this: Now I want that logo to be different for the member of ad group: “Microsoft Employees”. My…
Update 05-04-2021: Changed the loginschema to show the link above login button and changed script.js to match css. Update 23-12-2021: Removed typo in the login schema, thanks Sander Bierman 😉 You are probably reading this as you found out the hard way that rewriting the logon page (AAA virtual server /…
I’m running my lab for years now. And it is always a changing thing. But last week I got my hands on an very old Citrix NetScaler MPX5550. It’s way past his warranty and I saved it from getting shredded 😉 In my home I have a small 19″ rack…
Perform the following steps to get a random background picture on the StoreFront and NetScaler logon page. For a demo visit https://portal.tyl.nl and refresh the page a couple of times. StoreFront: First we start by gathering all the background pictures you want (dont forget copyrights) ; Upload the pictures to…
Microsoft is going to release an update which will turn off unsigned LDAP requests on Domain Controllers. This update will be released in March this year (2020). More information here: ADV190023 Although I assume everyone is already using LDAPS instead of LDAP like everyone already mitigated the ADC’s back in…
Because all the commotion about the NetScaler vulrenability I decided to share my Client IP black and white list. This script will create a pattern set which you can fill with ip’s or subnets. This pattern set is used in a policy expression which is used in a responder policy.…
At the moment we all know how to score an A+ in ssllabs.com for our NetScaler Gateway but can we also score an A+ on securityheaders.io? My test environment currently has this score on ssllabs.com And this score on securityheaders.io As you can see I already did some preparations before…
Begin typing your search term above and press enter to search. Press ESC to cancel.
