Course Overview
Web apps and websites are shielded from known and unknown attacks by the Citrix Web App Firewall. You will learn how to use Web App Firewall to fulfil the security needs of application services during this three-day training. You will learn about a variety of web attacks and vulnerabilities, including SQL injection and cookie tampering, after studying Citrix Web App Firewall, as well as how to defend against them. The training also covers monitoring, management, and reporting; policies, profiles, and expressions; and troubleshooting methods. The Adaptive Learning Engine and Secure Insight are featured features. For IT professionals with prior Citrix Networking knowledge, this advanced course is created.
Prerequisites
Citrix recommends professionals prepare for this course by taking the following course/courses:
- CNS-220 Citrix ADC 12.x Essentials and Traffic Management,
or
- CNS-222 Citrix ADC 12. x Essentials and Citrix Gateway
Audience Profile
Designed for professionals with previous Citrix Networking experience, this course best suits individuals deploying and utilizing Citrix Web App Firewall with Citrix Networking environments.
Learning Objectives
- Recognize typical web attacks and weaknesses
- comprehend regular phrases that are PERL compatible
- Be familiar with how to use the adaptive learning engine.
- To safeguard web applications, set up Citrix Web App Firewall.
- Application Services security can be tracked, managed, and reported on using Citrix ADC Secure Insight.
- Citrix Web App Firewall troubleshooting
Version covered: This course is currently on Citrix ADC version 12. x, but it is still applicable for learners of previous product versions.
Content Outline
- The Business Problem
- Industry Standards
- Protection Methodologies
- Introducing Citrix Web App Firewall
- Citrix Web App Firewall Policies
- Citrix Web App Firewall Profiles
- Citrix Web App Firewall Learning
- Citrix Web App Firewall Engine Settings
- Security Checks and Data Flow
- Rules and Adaptive Learning
- Signatures and Comment Stripping
- Top-Level Protections
- Cookie Consistency
- Advanced Form Protection Checks
- URL Protections
- Protecting Sensitive Data
- Web App Firewall and Web Applications
- Logging and Reporting
- Customizing Errors
- Troubleshooting
- Application level Quality of Experience (AppQoE)
- IP Reputation
- Rate Limiting
- HTTP Callout
- What is SAML?
- Configuring SAML on Citrix ADC
- OAuth and OpenID
- Configuring OAuth on Citrix ADC
- Multi-Factor Authentication with nFactor
- Configuring nFactor
Image result for Citrix ADC 12.x Advanced Concepts – Secure Web Applications
Citrix Web App Firewall (WAF) protects your web applications from malevolent attacks such as SQL injection and cross-site scripting. To prevent data breaches and provide the proper security protection, you must monitor your traffic for threats and real-time actionable data on attacks.
The Citrix web app firewall solution contains a rich set of signatures to detect attacks against known application L7 and HTTP vulnerabilities quickly. It also utilizes a positive security model to mitigate unknown and zero-day attacks by catching malformed or non-compliant traffic.
The NetScaler ADC and Gateway
Citrix NetScaler refers to their Application Delivery Controller, or ADC, line of products. At the same time, the NetScaler Gateway, formerly known as the Citrix Access Gateway, or CAG, is primarily used for secure remote access to XenDesktop and XenApp environments.
A: To attend the training session, you should have operational Desktops or Laptops with the required specification and a good internet connection to access the labs.
A: We recommend you attend the live session to practice & clarify the doubts instantly and get more value from your investment. However, if, due to some contingency, you have to skip the class, Radiant Techlearning will help you with the recorded session of that particular day. However, those recorded sessions are not meant only for personal consumption and NOT for distribution or any commercial use.
A: Radiant Techlearning has a data center containing a Virtual Training environment for participants’ hand-on-practice. Participants can easily access these labs over Cloud with the help of a remote desktop connection. Radiant virtual labs allow you to learn from anywhere and in any time zone.
A: The learners will be enthralled as we engage them in the natural world and Oriented industry projects during the training program. These projects will improve your skills and knowledge and give you a better experience. These real-time projects will help you a lot in your future tasks and assignments.