Jump to content
Welcome to our new Citrix community!

Automating Block URLs on Reverse Proxy Web Servers


Recommended Posts

Callouts are best for this scenario, as you can keep the ADC policy in place and just worry about keeping the callout agent up todate.  You can use alongside IPReputation and a custom exemption/whitelist as needed.

 

We demo this in the advanced class; callout agent can be any structure you want a file or a database with some sort of we request/response interface.

 

The admin guide has an example script querying a database:  https://docs.citrix.com/en-us/netscaler/12/appexpert/http-callout/use-case-filtering-clients-ip-blacklist.html

Its straightforward and flexible.

 

Just be sure to have a lb vserver for the callout server so you can scale and avoid single points of failure.

  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...