Citrix-NetScaler

Disable Drop Invalid Requests in the HTTP Profile settings. ✘ Set Default profile in application firewall settings as APPFW_BYPASS. ✘ Set Undefined Action in application firewall settings as APPFW_BYPASS. ✘ Enable Drop Invalid Requests in the HTTP Profile settings. ✔

http.req.url.endswith (".jpeg) & & http.req.method.eq (POST) ✘ http.req.url.contains (".jpeg) & & http.req.method.eq (GET) ✘ http.req.url.endswith (".jpeg) || http.req.method.eq (GET) ✘ http.req.header ("Content-Type").contains ("image/jpeg") || http.req.method.eq(POST) ✔

HTTP and HTTPS active connections on the NetScaler ✘ HTTP and HTTPS requests processed by the NetScaler ✘ statistics of the HTTP and HTTPS web sites load balanced on NetScaler ✘ status of all the HTTP and HTTPS backend web servers ✔

FIN+ACK packet with a window size set to 9845 ✘ RST packet with a window size set to 9845 ✘ RST +ACK packet with a window size set to 0 ✘ FIN packet with a window size set to 0 ✔

Field Formats ✘ Form Field Consistency ✘ HTML Cross-Site Scripting ✘ CSRF Form Tagging ✔

Move to Head Tag ✘ Shrink to Attributes ✘ Lazy Load ✘ Convert to WebP ✔

Buffer Overflow ✘ Start URL ✘ Cross-site Scripting ✘ Cookie Consistency ✔

Web 2.0 Application Profile ✘ Web Application Profile ✘ XML Application Profile ✘ Advanced Profile ✔

A-Z ✘ a-z, A-Z ✘ a-z, A-Z, 0-9 ✘ 0-9 ✔

A forward slash (/) ✘ A period (.) ✘ An asterisk (*) ✘ A dollar Sign ($) ✔