I. Overview:

Learn how to configure your Citrix networking environment to address application services security requirements with Citrix Web App Firewall; automate and manage network services for scale-out of application architectures with Citrix Application Delivery Management; and optimize Citrix ADC-managed application delivery traffic. This fiveday course for experienced Citrix networking architects, engineers and administrators will teach you to deploy and manage Web App Firewall to protect web applications against different types of attacks. It will also give you a practical understanding of Citrix Application Delivery Management capabilities for centralized management of multiple Citrix ADC platforms, orchestration of changes, transaction reporting, infrastructure visualization and planning.

II. Certification: CCP-N

III. Duration:  05 days

IV. Objectives:

What you’ll learn:

• Identify common web attacks and vulnerabilities 
• Write PERL compatible regular expressions 
• Understand how to operate the adaptive learning engine 
• Configure Citrix Web App Firewall to protect web applications
• Utilize ADC 12.x Secure Insight to monitor, manage, and report on Application Services security

V. Intended Audience:

Students interested in learning the skills required to deploy and manage Citrix Web App Firewall to secure application access in their Citrix Networking environment, as well as Citrix Application Delivery Management to administer a Citrix Networking environment, or optimize Citrix ADC - managed application delivery traffic. Specifically for administrators, implementers, engineers, and architects.

VI. Prerequisites:

Citrix recommends students prepare for this course by taking the following course/courses: CNS-220 Citrix ADC 12.x Essentials and Traffic Management or CNS-222 Citrix ADC 12.x Essentials and Citrix Gateway.

VII. Course outlines:

1.  Module 1: Citrix Web App Firewall Overview

• Web App Firewall solution Security Model
• Common Attacks Overview
• PCI-DSS Compliance

2.  Module 2: Citrix Web App Firewall Policies and Profiles

• Profiles
• Policies 
• Engine Settings
• Citrix Web App Firewall Learning

3.  Module 3: Regular Expressions

•  Forms of Regular Expressions
• Using Regular Expressions 
• Meta/Literal Characters
• PCRE
• RegEx Tools
•  Regular Expression Scope

4.  Module 4: Attacks and Protections

• Data Flow with Citrix Web App Firewall
• Security Checks
• Web App Firewall Actions
• Adaptive Learning
• Signatures 
• Cookie Protection 
• Advanced Form Protection Checks 
• URL Protections

5.  Module 5: Web App Firewall Monitoring and Troubleshooting

• Citrix Web App Firewall and Web Applications
• Logging and Reporting
• Customizing Errors
• Troubleshooting
• ADC 12.x Security Insight

6.  Module 6: Security and Filtering

• IP Reputation
• Rate Limiting
• AppQoE
• HTTP Callout

7.  Module 7: Application Delivery Management Introduction

• An introduction to Application Delivery Management
• Application Delivery Management Deployment and Configuration
• Deploying Citrix Application Delivery Management in High Availability
• Citrix Application Delivery Management Instance Management

8.  Module 8: Managing and Monitoring Application Delivery Management

• Inventory Management
• User Management
• Analytics and Automation
• SSL Certificate Management

9.  Module 9: Managing Citrix ADC Configuration

• Application Management
• StyleBooks
• Configuration Management

10.  Module 10: Citrix ADC Web Logging

• Understanding Web Traffic
• Installing and configuring ADC 12.x Web Logging
• Troubleshooting ADC 12.x Web Logging

11.  Module 11: Integrated Caching

• Introduction to Integrated Caching
• Static and Dynamic Content
• Request and Response Process Flow
• Understanding Cache Policies
• Identifying Content Group Settings

12.  Module 12: Front End Optimization

• Improving Content Delivery
• Front-End Optimization Use Cases
• Understanding Minification
• CSS Optimizations

13.  Module 13: Tuning and Optimization

• Connections on the Citrix ADC
• Connection Profiles
• Queuing on the Citrix ADC
• Connection Tuning Practices