Netscaler Knowledgebase

I am using netscaler just for load balancing http traffic.

Recently a flaw detected in the application and i was wondering to confirm from the Guru's here if cross site scripting can be blocked using Netscaler Application firewall. The major portion of the flaw is abusing the variables in the URI part of the URL. I will be getting few examples from our security department and will post it here once available.

I am running Netscaler version 8.0.

Any comments / suggestions highly appreciate.

Thank you,

We've been using the cross-site scripting protections in application firewall since it was a standalone appliance made by Teros. We have it enabled as one of the default protections on our web environments. The nice thing about it is that it gives you the option to block all scripting (URL and in fields) or allow specific exemptions to the policy.