CVE-2017-17382

Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.5 before build 67.13, 11.0 before build 71.22, 11.1 before build 56.19, and 12.0 before build 53.22 might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a...

The vulnerability of the micro-programming software of the access control system for the virtual environment NetScaler Gateway, as well as the micro-programming software of the application delivery controller Citrix NetScaler Application Delivery Controller, allows a intruder to gain access to the NetScaler management interface.

The vulnerability of the microprogramming software of the access control system for the virtual environment NetScaler Gateway and the microprogramming software of the application delivery controller Citrix NetScaler Application Delivery Controller is related to deficiencies in access control...

Various Connection Method Behaviours of Mobile Citrix Receiver with StoreFront and NetScaler Gateway

The following scenarios provide an understanding of when to use the StoreFront server FQDN and/or NetScaler Gateway FQDN in an App Controller solution when connecting from a mobile device: Internal Users Connecting to StoreFront Server Scenario 1 – Legacy PNA Site and No Store Available Scenario ...

How to Configure Authentication at StoreFront using NetScaler Gateway - NetScaler Configuration

This article describes how to configure authentication at StoreFront using NetScaler Gateway - NetScaler Configuration...

How to Configure Storefront for Authentication using NetScaler Gateway

This article describes how to configure authentication at StoreFront using NetScaler Gateway - StoreFront Configuration...

Citrix NetScaler ADC/NetScaler Gateway Authentication Bypass Vulnerability

Citrix NetScaler ADCs are application delivery controllers that optimize enterprise service delivery. A security vulnerability in Citrix NetScaler ADC/NetScaler Gateway management interface authentication allows remote attackers to bypass security restrictions and gain unauthorized access by...

CVE-2017-14602

A vulnerability has been identified in the management interface of Citrix NetScaler Application Delivery Controller ADC and NetScaler Gateway 10.1 before build 135.18, 10.5 before build 66.9, 10.5e before build 60.7010.e, 11.0 before build 70.16, 11.1 before build 55.13, and 12.0 before build 53....

How to Remove the "Skip Check" Option from Post-Authentication and nfactor EPA Scans

This article describes how to remove the "Skip Check" option from EPA.HTML on post-authentication NetScaler Gateway EPA scan. The solution in this article is meant for X1, Default, GreenBubble and RfWebUI portal themes...

NetScaler Gateway 11.0 VPN Client and EPA Plug-in Does Not Work With Chrome Version 42 and Later

The Client and EPA Plug-ins don't work with the latest Chrome versions as support for NPAPI is disabled by default. The support will be deprecated entirely in Chrome version 45 in September 2015. From Chrome version 42, all NPAPI plugins will appear as if they are not installed. This will affect...

MDM/MAM Enrollment flow for Secure Hub Android devices-On Cloud Setup.

This article explains the MDM/MAM Enrollment flow for Android devices for-On Cloud Setup Where XMS Load Balance on cloud and Netscaler Gateway is on Premise...

How to block MAM URL access through Browser

Accessing the MAM URL directly through browser prompts the users to enter their AD Credentials. It acts as a tool for users to validate their credentials Username/Password. Some might treat this as a Security Violation. This article helps you to restrict the Browser access to MAM URL NetScaler...

Netscaler Gateway Authorization.

After the client login to the Netscaler gateway web, there is an error message when Ping Test on the screen. Error: . If you set the global setting or session policy to allow default authorization, you have successfully pinged. 1. What is the scope of blocking when the default Authorization is...

Limitations of NetScaler Gateway OPSWAT EPA Scan

NetScaler Gateway as such does not have a whitelist or blacklist of products and relies on the OPSWAT for this. If a particular product is not present in the NetScaler predefined expressions then this product is not supported for EPA scans. When using a generic scan OPSWAT scans all the supported...

Smart Access Guide for NetScaler Gateway, StoreFront and XenDesktop

NetScaler Smart Access is an advanced feature of NetScaler Gateway. Usually, it needs to be used in the following 2 scenarios. 1. NetScaler End Point Analysis EPA is used. 2. Restrict user’s app/desktop visibility if the session is from NetScaler Gateway. In this document, I will focus on scenari...

NetScaler Gateway, StoreFront and XenDesktop Integration Communication Workflow

Topics 1. Introduction 2. Detailed Workflow 2.1 SSL Connection 2.2. Authentication 2.3. Get the App/Desktop List 2.4. Get the ica file 1. Introduction In this article, we will talk about NetScaler Gateway+StoreFront+XenDesktop workflow. I will separate the workflow into 5 steps. 1. SSL...

How to Implement NetScaler Gateway EPA Only for Windows Clients

This article provides provides information on how to implement NetScaler Gateway EPA only for Windows clients not mobile devices connecting from the Internet. Mobile devices cannot run the EPA scan. So, they need to bypass it using either a policy or a different virtual server...

FAQ: XenMobile Derived Credentials

What are Derived Credentials? Derived credentials provide strong authentication for mobile devices. The credentials, derived from a smart card, reside in a mobile device instead of the card. The smart card is either a Personal Identity Verification PIV card or Common Access Card CAC. The derived...

What is the Order of XenMobile Timeouts

Question: What is the order of XenMobile Timeouts? Answer: Forced Time Out under NetScaler gateway Session policies Background Service Ticket Session Timeout NetScaler gateway OS session policies Max Offline PeriodMDX app Inactivity Timerclient properties on XMS. Setting| Component| Default...

Secure Hub Error: Request Failed on iOS devices

This article explains how to troubleshoot the errorRequest Failed on iOS devices when we have cert+LDAP policy on Netscaler Gateway Below error in the iOS Secure Hub logs indicates that the issue is because two factors Authentication is disabled. ,,ERROR...

Citrix NetScaler Gateway Heap Buffer Overflow Vulnerability

Citrix NetScaler Gateway formerly Citrix Access Gateway Enterprise Edition is a secure remote access solution from Citrix Systems. The solution provides administrators with application-level and data-level controls to enable users to remotely access applications and data from any location. A heap...