How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans

This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...

Limitations of NetScaler Gateway OPSWAT EPA Scan

NetScaler Gateway as such does not have a whitelist or blacklist of products and relies on the OPSWAT for this. If a particular product is not present in the NetScaler predefined expressions then this product is not supported for EPA scans. When using a generic scan OPSWAT scans all the supported...

How to Implement NetScaler Gateway EPA Only for Windows Clients

This article provides provides information on how to implement NetScaler Gateway EPA only for Windows clients not mobile devices connecting from the Internet. Mobile devices cannot run the EPA scan. So, they need to bypass it using either a policy or a different virtual server...

yosemite.epa.gov XSS vulnerability

Vulnerable URL: https://yosemite.epa.gov/oarm/igmsegf.nsf/allgrantsnarrow?SearchView= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 08.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| N...

Suing to See the Feds’ Encrypted Messages? Good Luck

Conservative watchdog Judicial Watch is suing the EPA for staffers' Signal messages. It may hit the encrypted limits of federal transparency. The post Suing to See the Feds' Encrypted Messages? Good Luck appeared first on WIRED...

How to Configure NetScaler Gateway EPA Scans to Detect Receiver on Clients

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. This article describes how to configure NetScaler Gateway EPA scans to detect clients without Receiv...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Domain Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for domain check...

Error: "The Gateway has EPA enabled, which is not supported on iOS devices" on iOS Receiver

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company’s Help Desk/IT support team and can refer to CTX297149 for more information. The following error is displayed when logging on to iOS Receiver: The Gateway has EPA enabled, which...

NetScaler Gateway EPA Scan Fails When Checking for "Windows Update" on Client Machine

When NetScaler Gateway EPA scan is configured to validate if the Windows update on client machine has been performed within X days, the scan fails on client machine...

edg.epa.gov XSS vulnerability

Vulnerable URL: https://edg.epa.gov/metadata/catalog/search/resource/review.page?uuid=%22-alert/OPENBUGBOUNTY/-%22 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

How to Configure NetScaler Gateway Preauthentication EPA Scan for Antivirus and Firewall Check

This article describes how to configure NetScaler Gateway preauthentication EPA scan for antivirus and firewall check...

blog.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-154089 Description| Value ---|--- Affected Website:| blog.epa.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

blog.epa.gov XSS vulnerability

Vulnerable URL: http://blog.epa.gov/trireportingtribalconsult/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclos...

Understanding and Configuring EPA Verbose Logging on Citrix Gateway

CLI Configuration Run the following command on NetScaler for PreAuth and PostAuth EPA logging: set vpn param –clientSecurityLog ON Note : For PreAuth and PostAuth logging, the vpn param MUST be used. If the clientSecurityLog is modified in a SessionAction whose Session Policy has a ClientSecurity...

cfpub.epa.gov XSS vulnerability

Vulnerable URL: http://cfpub.epa.gov/ncerabstracts/index.cfm/fuseaction/searchControlled.main?RequestTimeout=180 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:39 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

cfpub.epa.gov XSS vulnerability

Vulnerable URL: http://cfpub.epa.gov/roe/search.cfm Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated Google Pagerank| 4 VIP website...

Default Setting in Windows 7, 8.1 Could Allow Privilege Escalation

A default setting in both Windows 7 and 8.1 could allow local users to elevate privileges and in some situations, escape application sandboxes. The issue, something that leaves all current Windows client installations vulnerable, lies in the way the operating system handles authentication. In som...

nepis.epa.gov XSS vulnerability

Open Bug Bounty ID: OBB-47409 Description| Value ---|--- Affected Website:| nepis.epa.gov Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Shee...

CVE-2007-3679

The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...

Design/Logic Flaw

The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...