Book Image

Mastering NetScaler VPX

By : Marius Sandbu, Andy Paul
Book Image

Mastering NetScaler VPX

By: Marius Sandbu, Andy Paul

Overview of this book

Citrix NetScaler is one of the best Application Delivery Controller products in the world. The Application Delivery Controllers are commonly used for load balancing purposes, to optimize traffic, and to perform extra security settings. This book will give you an insight into all the available features that the Citrix NetScaler appliance has to offer. The book will start with the commonly used NetScaler VPX features, such as load balancing and NetScaler Gateway functionality. Next, we cover features such as Responder, Rewrite, and the AppExpert templates, and how to configure these features. After that, you will learn more about the other available Citrix technologies that can interact with Citrix NetScaler. We also cover troubleshooting, optimizing traffic, caching, performing protection using Application Firewall, and denying HTTP DDoS attacks for web services. Finally, we will demonstrate the different configuration principles real-world Citrix NetScaler deployment scenarios.
Table of Contents (15 chapters)
Mastering NetScaler VPX™
Notice
Credits
About the Authors
About the Reviewer
www.PacktPub.com
Preface
Index

Setting up AAA – authentication and authorization


The AAA feature allows us to set up NetScaler as an authentication point in front of different Web-services. This might be Microsoft Exchange, Microsoft SharePoint, or any other load-balanced web service where we want to define NetScaler to do the initial authentication using an AAA vServer and then do an SSO backend to the resource, as shown in the next screenshot:

We can also define within NetScaler what the user is allowed to access on the backed resource using the authorization module, where we can restrict for instance access to PDF files based upon an expression.

Now we can create an AAA vServer that the users are redirected to. Go into the AAA – Application Traffic pane, click on Virtual Servers, and click Add.

Here under the settings we need to enter a name, IP-address, and port number. By default, it is set to SSL and 443. We also have an optional parameter: authentication domain. Here we need to enter the FQDN of the AAA vServer if...