In this blog post from begining 2020 I created a black and white list for IPv4. Here is an update to achieve the same but then for IPv6. If you dont have IPv6 running already read this post 😉 Note 1: The defaults are just for example and you need…
Enabling IPv6 on Citrix ADC and create simple IPv6 to IPv4 proxy
I’m seeing more and more IPv6 implementations in the wild. And even IPv6 only Citrix ADC gateways. I decided to write this blog post to get a head start how-to enable IPv6 and create a simple IPv6 load balancer (with IPv4 backend service) on the Citrix ADC. First we need…
Warn Users They Are Using a Legacy Browser
Microsoft announced that Internet Explorer will be out of supported starting 15 July 2022 for certain Windows 10 versions. (more info here). Here is a responder policy for the Citrix ADC which you can bind to a gateway, lb, cs, etc to alert users they need to use a different…
Rewrite StoreFront Logo Based On Group MemberShip
Some service providers are hosting environments for different customers. So they all just stick to the default StoreFront logo (top left). After some branding and customisation the StoreFront page can look like this: Now I want that logo to be different for the member of ad group: “Microsoft Employees”. My…
Add Link or Comment to Citrix ADC Logon Page
Update 05-04-2021: Changed the loginschema to show the link above login button and changed script.js to match css. Update 23-12-2021: Removed typo in the login schema, thanks Sander Bierman 😉 You are probably reading this as you found out the hard way that rewriting the logon page (AAA virtual server /…
Random background in StoreFront and NetScaler logon pages
Perform the following steps to get a random background picture on the StoreFront and NetScaler logon page. For a demo visit https://portal.tyl.nl and refresh the page a couple of times. StoreFront: First we start by gathering all the background pictures you want (dont forget copyrights) ; Upload the pictures to…
Citrix ADC / NetScaler update to LDAPS
Microsoft is going to release an update which will turn off unsigned LDAP requests on Domain Controllers. This update will be released in March this year (2020). More information here: ADV190023 Although I assume everyone is already using LDAPS instead of LDAP like everyone already mitigated the ADC’s back in…
Citrix ADC / NetScaler Client IP or Subnet Black and Whitelist
Because all the commotion about the NetScaler vulrenability I decided to share my Client IP black and white list. This script will create a pattern set which you can fill with ip’s or subnets. This pattern set is used in a policy expression which is used in a responder policy.…