black
NetScaler web application firewall
Only NetScaler uses a one-pass architecture for traffic processing that enables it to perform web application firewall (WAF) inspection in a single pass. This significantly reduces the latency of each request for optimal application performance. And because advanced WAF capabilities come built in with NetScaler, there’s no need to purchase a separate WAF solution.
split-70-30

NetScaler WAF hybrid security model

NetScaler application threat index screenshot
desktop-padding-top-md,desktop-content-width,desktop-padding-left-2xl

For the most comprehensive protection from OWASP Top 10 attacks to zero-day exploits, NetScaler WAF employs a hybrid security model that incorporates policies, profiles, and signatures to protect against known and unknown web application attacks.

To save you time, NetScaler WAF uses automated learning, called dynamic profiling, to understand how a protected application works. By using a repetitive-pattern filter, NetScaler WAF adapts to the application even as developers continue to develop and deploy it, so it is always protected.

One WAF, multiple deployment options

NetScaler WAF provides operational consistency and the same comprehensive protection no matter where your application is hosted:

two-col-text,grid-cards
  • On hardware
  • As a VM on hardware
  • As a VM on-premises or in the cloud
  • On bare metal
  • In a container
  • In the cloud and fully managed by NetScaler
  • As-a-service with DDoS included

KEY CAPABILITIES

What you can do with NetScaler web application firewall

3
transparent
Red brick wall with a lock inside a shield icon
large
Detect attacks early by using pre-configured and customized signature rules for pattern matching to block attacks
h3
transparent
Blue screen with checkmark inside a cogwheel icon
large
Defend against application-layer attacks with built-in security checks
h3
transparent
Wrench and screwdriver making a cross icon
large
Patch vulnerabilities on the fly with signature protections for known vulnerabilities
h3
transparent
Red and green robot head icon
large
Manage and secure north-south and east-west traffic
h3
transparent
Red circle with IP inside behind a hexagon with a hand icon
large
Prevent spam requests from known bad IPs by restricting traffic into your network
h3
transparent
Purple sheet behind a shield with a checkmark icon
large
Get security recommendations
h3

KEY FEATURE

Detecting attacks early with NetScaler WAF

NetScaler WAF screenshot

NetScaler WAF at a glance

3
transparent
WAF protection at massive scale
h3
Attack matching to unique application flows helps enterprises with hundreds or thousands of applications to detect and mitigate threats, so SecOps teams can focus on strategic initiatives or vulnerabilities elsewhere in their infrastructure
transparent
One-pass architecture
h3
One-pass architecture provides the most efficient traffic inspection without compromising application performance
transparent
Hybrid security model
h3
Hybrid security model uses both signatures to block unwanted traffic and positive security checks to enforce what is allowed
transparent
Dynamic profiling
h3
Dynamic profiling applies automated security checks even as the application is continuously developed and deployed
transparent
Operational consistency
h3
Hosted on-premises or in the cloud with operational consistency across both
transparent
Comprehensive protection
h3
Protects against known and unknown attacks, including OWASP Top 10 and zero-day threats, using multiple threat research sources
transparent
Always-on protection
h3
Automates protection against internet-based attacks and keeps traffic in the cloud or on-premises at the edge

Resources

3
white
How attackers bypass commonly used web application firewalls
h3
text-link
Read article
https://thenewstack.io/how-attackers-bypass-commonly-used-web-application-firewalls/
auto
Read article how attackers bypass commonly used web application firewalls - Opens link in a new window
white
PoC guide: Web application firewall deployment
h3
text-link
Read article
https://community.citrix.com/tech-zone/learn/poc-guides/citrix-waf-deployment
auto
Read article PoC guide: Web application firewall deployment - Opens link in a new window