Secure Web and Authentication flow.

The following table notes whether Secure Web prompts a user for credentials, based on the configuration and site type: Connection mode| Site type| Password caching?| SSO configured for NetScaler Gateway?| Secure Web prompts for credentials? ---|---|---|---|--- On first access of a website| On...

SecureWeb 10.x: HTTP 1.1 Gateway timeout error while accessing external/internal websites from Secure Web.

While accessing any internal/external websites using Secure we get the following error in Secure web Error : Http/1.1 gateway timeout error Unable to find the requested server or DNS Error...

Unable to upload a file to an internal webpage using Secure Web

XenMobile 10.x Secure Web 10.x iOS 10.x User able to access the upload site, however, upload never completes successfully w/ no error or other notification. Behavior doesn't occur when attempting same on an Android device...

Cannot open PDF files downloaded from Secure Web

Issue: Error while opening a PDF file from Secure Web: "Invalid PDF format."...

NetScaler is forcing the SSL connection on sites browsed with Secure Web

Web Links for HTTP resources attempting to connect via Secure Web over HTTPs and failing as resource does not exist on HTTPs...

tomcat: Infinite loop in the processing of https requests

It was discovered that a programming error in the processing of HTTPS requests in the Apache Tomcat servlet and JSP engine may result in denial of service via an infinite loop...

UBUNTU-CVE-2015-2330

Late TLS certificate verification in WebKitGTK+ prior to 2.6.6 allows remote attackers to view a secure HTTP request, including, for example, secure cookies...

Citrix Secure Web - Customized SSL, Exported ContentProvider, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Citrix Secure Web published at the 'play' market has multiple vulnerabilities...

CVE-2016-9554

The Sophos Web Appliance Remote / Secure Web Gateway server version 4.2.1.3 is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php /controllers/MgrDiagnosticTools.php, in the component responsible for...

Secure Web unable to access Internal Links with Split Tunnel set to ON via NetScaler Gateway

While trying to access Internal Links or external links with Split Tunnel ON, gets error message as: 'Could not find hostname'...

Secure Web - Error: Cannot open the page - too many http redirections

After the NSG Session times out and the user attempts to start Secure Web, the following error message appears "Cannot open the page - too many http redirections " - then it disappears and a message "Check your credentials - Logon " appears. " 2016-11-11T08:02:45.345+0100 ",,INFO...

HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web

HTTP 1.1 Gateway timeout error while accessing internal websites from Secure Web when traffic is tunneled through the NetScaler. This issue occurs when the MDX Policy is set for Secure Browse. If the preferred VPN mode on the app is set to FULL VPN TUNNEL, then the issue will not occur...

Troubleshooting Checklist: Users Cannot Browse Internal Websites in Secure Web

Do the following: Collect Secure Web client logs. If you see the following message in the logs, add valid DNS SUFFIXES for the corresponding internal domains on NetScaler: AG policy: Not Intercepting Check if Split tunnel is On or Off on the Netscaler Gateway under session policies: If On - Make...

XenMobile POC Cheat Sheet

The purpose of this cheat sheet is to provide a detailed POC checklist to assist with the implementation of On-Premise POC implementations. This checklist includes a detailed diagram of your XenMobile POC implementation populated from the information included in the filled out checklist. Addition...

OpenNTPD Design Vulnerabilities

OpenNTPD is a network time protocol NTP for Unix systems that can synchronize a computer system's local clock with a remote NTP server. A security vulnerability exists in OpenNTPD that stems from a failure to validate the Common Name when the program is configured for HTTPS requests, which could ...

Getting Started with Citrix Secure Web

The purpose of this getting started guide is to provide a reference document with key information about Citrix Citrix Secure Web. Navigation: What is Citrix Secure Web? Citrix Secure Web MicroVPN Connection Modes Supported Web Technologies Configure Citrix Secure Web and Proxy Servers MicroVPN...

Threat Outbreak Alert RuleID22216: Email Messages Distributing Malicious Software on April 14, 2016

Medium Alert ID: 44658 First Published: 2016 April 14 13:46 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID22216 may contain the following files: Name | Si...

DEBIAN-CVE-2015-8400

The HTTPS fallback implementation in Shell In A Box aka shellinabox before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL...

IBM Security QRadar Incident Forensics Man-in-the-Middle Attack Vulnerability (CNVD-2015-07484)

IBM Security QRadar Incident Forensics is a suite of security forensic investigation software from IBM. The software supports in-depth forensic investigations of suspected malicious network security incidents, and repair network security vulnerabilities. IBM Security QRadar Incident Forensics 7.2...

Threat Outbreak Alert RuleID16358: Email Messages Distributing Malicious Software on July 1, 2015

Medium Alert ID: 39609 First Published: 2015 July 1 13:57 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16358 may contain the following files: Name | Size...