Beskrivelse
This course is designed for students with previous experience NetScaler experience, and best suited for individuals who will be deploying and/or managing Citrix NetScaler Application Firewall (AppFirewall) to secure application access in a Citrix NetScaler environment, as well as NetScaler Management and Analytics System (MAS) to administer a Citrix NetScaler environment or optimize NetScaler-managed application delivery traffic. Students will learn the skills required to deploy and manage AppFirewall including types of web attacks, protections and signatures, the adaptive learning engine, AppFirewall policies and profiles, troubleshooting, and additional pertinent NetScaler security features. Students will learn the skills required for deploying and utilizing the NetScaler Management and Analytics System including the ability to manage multiple NetScaler platforms centrally, orchestrate configuration changes, report on transactions passing through the NetScaler environment, visualize infrastructure, and plan expansions. Students will also learn how to implement features including Caching, Frontend Optimization, NetScaler Web logging, and TCP/HTTP optimization to optimize traffic managed by a NetScaler environment.
Indhold
Application Firewall Overview
- AppFirewall solution Security Model (include signature)
- Overview of types of attacks
- PCIDSS
- Adaptive Learning Engine
- Packet Processing and Inspection
- Log Files - view violations Policies and Profiles
- Profiles
- Policies
- Engine Settings Regular Expressions
- Forms of Regular Expressions
- Using Regular Expressions
- Metacharacters and Literal Characters
- Escapes
- Quantifiers
- Back Referencing
- Lookaheads
- Regular Expression Scope Attacks and Protections
- Data Flow with AppFirewall
- Security Checks
- AppFirewall Actions
- Adaptive Learning
- Signatures
- Code Quality (HTML Comment Striping)
- Buffer Overflow
- SQL injection
- Cross-Site Scripting
- Cookie Tampering
- Cookie Protection
- Parameter Tampering
- Server Misconfiguration • Form Protections
- Identity Theft - CC - Safe Object
- URL Protections - Start URL and Deny URL
- CSRF Application Firewall Troubleshooting and Monitoring
- Security Insight
- HTTP Callout
- Rate-Limit
- AppQOE
- IP Reputation
