2016

With NetScaler build 51, Citrix introduced DNS Security Options which allows for simple defining security policies against DNS endpoints on NetScaler. The DNS Options are split into different options. Cache Poisioning Protection DNS DDoS Protection Manage Exception (whitelist / blacklist) servers Prevent random subdomain attacks Bypass the cache Enforce DNS transactions over TCP Provide root

Now even if the XenApp Express “Essentials” hasn’t been released yet, there are some tiny bits of information available, and the piece I’m going to talk about is remote access. So let us picture the regular Citrix Cloud setup where we have our management plane in Citrix Cloud and we have our NetScaler (or NetSCaler

With the latest release of NetScaler MAS 11.1 build 51, Citrix now has some cool new enhancements to the Insight Module which allows us for instance to monitor SSL Transactions/Ciphers/Protocol and such under Web Insight so we can see more in detail how SSL is behaving and such. We also have some new enhancements with

When setting up my internal Rancher Master Service I noticed that I was getting some wierd timeout values in the UI, the management console acted gray and it went extremly slow when accessing it externally. After starting up Developer mode in Google Chrome I noticed right away that I was getting some websockets timeouts. WebSockets

So with the upcoming release of the NetScaler 11.1  build 51, it will now finally support Intune integration which I have been waiting on for some time now. This new feature allows for Conditional access against on-premises web applications like SharePoint and such. So for instance the integration allows NetScaler to pull compliance data from

TCP Fast Open (TFO) is a TCP mechanism that enables speedy data exchange between a client and a server during TCP’s initial handshake. By using the TFO mechanism, you can reduce an application’s network latency by the time required for one full round trip, which significantly reduces the delay experienced in short TCP transfers. So

So this is something that I was tasked with a couple of weeks ago, where a customer was having issues with their network bandwidth to their website was exhausted because of a sophisticated DoS attach which seemed like a regular HTTP request, but it made the webserver exhaust its resources and comsume bandwidth upstream so