Duration
5 days
Overview
Designed for experienced IT professionals, this course is best suited for individuals who will be deploying and/or managing Application Firewall, AAA for Application Traffic, and NetScaler Console (ADM) in their NetScaler environments.
You will leave this course with the skills required to deploy and manage NetScaler Web Application Firewall including types of web attacks, protections and signatures, the Adaptive learning engine, App Firewall policies and profiles, troubleshooting, and additional pertinent NetScaler security Features. You will be able to deploy AAA for Application Traffic with nFactor and understand concepts related to Login Schemas, Policy Labels, and customizations. You will also be able to deploy the NetScaler Console to manage a NetScaler environment.
Product Versions Covered: NetScaler VPX v14.1 and NetScaler Console v14.1
Learning Objectives
- Configure NetScaler Web Application Firewall including policies, profiles, signatures and error pages
- Mitigate various types of attacks using the NetScaler Web Application Firewall
- Utilize additional security features of the NetScaler such as Bot Management, Rate Limiting, HTTP Callout, IP Reputation, and AppQoE.
- Deploy AAA for Application Traffic and nFactor to control access to resources behind the NetScaler.
- Use NetScaler console to monitor and manage a NetScaler environment
Prerequisite Knowledge/Training
Strong foundational knowledge of NetScaler ADC administration and traffic management
Recommended Training:
- CNS-225: Deploy and Manage Citrix ADC 13.x with Traffic Management
- CNS-227: Deploy and Manage Citrix ADC 13.x with Citrix Gateway
Module 1: Introduction to WAF
The Business Problem
Industry Standards
Protection Methodologies
Introducing NetScaler Web App Firewall
Module 2: WAF Profiles, Policies, Monitoring
NetScaler Web App Firewall Policies, Profiles, and Learning
Logging and Reporting
Customizing Errors
Signatures and Comment Stripping
Module 3: Implementing Protections
Security Checks and Data Flow
URL Protections
Top-Level Protections
Advanced Form Protection Checks
Rules and Adaptive Learning
Credit Card Check
Safe Object
Module 4: Advanced Security Features
Bot Protection
API Protection
Responder Logging
Content Inspection
Module 5: Security and Filtering
IP Reputation
HTTP Callout
IP Rate Limiting
Application Quality of Experience (AppQoE)
Module 6: Intorduction to AAA and nFactor Overview
Authentication, Authorization, and Auditing
Intro to nFactor
Policy Label
Login Schemas
Authentication Policy and Action
Supported Protocol
Module 7: nFactor Use Cases
Single Sign-On Overview
Traffic Policies
Security Assertion Markup Language (SAML)
Certificate Authentication
OAuth
Module 8: AAA Customizations
Portal Theme Customizations
End User License Agreement (EULA)
Custom Error Messages
Module 9: Intro to NetScaler Console
Introducing NetScaler Console
NetScaler Console Service
Getting Started with NetScaler Console
Initial Configuration
Instance Management
Module 10: Managing and Monitoring NetScaler Console
User Management
Instance Management
Event Management
SSL Certificate Management
Unified Security Dashboard
Insights
Module 11: Managing Apps and Configs using NetScaler Console
Stylebooks
Config Management
Configuration Audit
Actionable Tasks & Recommendations
Module 12: Tuning and Performance Optimizations
Connection Profiles
SSL Profiles
Net Profiles
SSL Certificate Management
RPC Nodes
Programme scope, delivery arrangements and suitability are confirmed during enquiry.