Johannes Norz

Citrix NetScaler Professional, technical evangelist and blogger, CTA (Citrix Technology Advocate). Living in Austria, enthusiastic about networking and cycling

[Johannes Norz @Citrix_ADC]

Moving to Mastodon. Don't feel good here anymore.

[Johannes Norz @Citrix_ADC]

@endi24 @jantytgat @citrixguyblog @cstalhood @Deyda84 @ThomasPreischl @ThorstenRood I have to do a correction. This action won't work with all browsers. So you would change the expression to "HTTP/1.1 200 Ok\r\n\r\nContact ..." That's a proper http response because of security settings in newer browsers

[Johannes Norz @Citrix_ADC]

@endi24 @jantytgat @citrixguyblog @cstalhood @Deyda84 @ThomasPreischl @ThorstenRood Well, yes and no. Like @jantytgat already said, you might bind a responder policy globally. This will do the job for all vServers, but not for the NetScaler GUI itself.

[Johannes Norz @Citrix_ADC]

@endi24 @jantytgat @citrixguyblog @cstalhood @Deyda84 @ThomasPreischl @ThorstenRood I didn't do much research, but if you need to bind it to the NS GUI, you might find some ideas here: https://t.co/QLb54hjV3Y

[Johannes Norz @Citrix_ADC]

@endi24 @jantytgat @citrixguyblog @cstalhood @Deyda84 @ThomasPreischl @ThorstenRood add responder action rs_act_security.txt respondwith "\"Contact: https://t.co/22ocxOUZLF\""
add responder policy rs_pol_security.txt "HTTP.REQ.URL.EQ(\"/.well-known/security.txt\")" rs_act_security.txt
bind responder global rs_pol_security.txt 65000 END -type REQ_OVERRIDE

[Johannes Norz @Citrix_ADC]

Speaking about how to secure Citrix Gateway later today (3 PM UTC, 5 PM EST)

[Citrix User Group Community (CUGC) @myCUGC]

Good morning, #Triad #myCUGC! Excited to welcome @Citrix_ADC & @Liquidware to today's meetup & discussion on #netscaler and #Citrix public cloud! Register: https://t.co/6SfJM4WjQR

[Citrix User Group Community (CUGC) @myCUGC]

#Triad #myCUGC welcomes @Citrix_ADC & @Liquidware next week to discuss #netscaler and #Citrix public cloud! Register: https://t.co/6SfJM4WRGp

[Johannes Norz @Citrix_ADC]

I had trouble moving Citrix NetScaler WAF profiles from test to production (and renaming objects at the same time), as I had to rename objects - which is not possible. That's how I did it https://t.co/Bs9PAgJsiH

[Johannes Norz @Citrix_ADC]

@sagelikebrian @ik_ufukkocak Sure. That would be possible. I have written about rate-limiting with Gateway some month ago. It would be pretty much the same

[Johannes Norz @Citrix_ADC]

A customer asked me about a naming convention for Citrix NetScaler-based deployments. I documented my personal naming convention and published it to the internet. What do you think?
https://t.co/BjNN1GoRse

[Johannes Norz @Citrix_ADC]

I had to publish a WordPress-based website using Citrix NetScaler ADC. And it had to be as secure as possible. That's the way I did it!
https://t.co/ZXTGoC1gGU

[Johannes Norz @Citrix_ADC]

I am @NetScaler there

[Johannes Norz @Citrix_ADC]

Moving to Mastodon. Don't feel good here anymore.

[Johannes Norz @Citrix_ADC]

A NetScaler security issue had been published today. It is possible to execute remote commands on a NetScaler, if it is either SAML IDP or SP.
https://t.co/juXWzu0e8G

[Johannes Norz @Citrix_ADC]

There are reasons for not using Twitter that much.

[Johannes Norz @Citrix_ADC]

@endi24 Unfortunately, it is.

[Johannes Norz @Citrix_ADC]

@endi24 Yes. No support for cha-cha sigs :'(

[Johannes Norz @Citrix_ADC]

@myCUGC @iMarkF Ok. Tomorrow until 5 PM UTC would be great

[Johannes Norz @Citrix_ADC]

@myCUGC @iMarkF Thank you. I loved the big audience. I wish, I could have spoken on a CUG event in person. Anytime again

[Johannes Norz @Citrix_ADC]

Probably you missed my presentation yesterday. It was about protecting a Citrix Gateway. It's been recorded. Many thanks to Stephanie and Leee. The recording is here
https://t.co/i6j2qXz4A8

[Citrix User Group Community (CUGC) @myCUGC]

Tomorrow: Don't miss @Citrix_ADC with Q&A moderator @leeejeffries for a live #myCUGC User Share webinar full of tips and advice on protecting your #Citrix Gateway! https://t.co/6ndlFxT7v4