Netscaler Gateway

We are asked to secure a Citrix gateway that uses MFA. Can I put that behind WAF or do I need another product such as Spectrum for this? Anyone any experience? Read some issues about this online.

Also seen this:

1 Like

so as an update-it works only as DNS only mode and applications break when configured as proxied. Thus I cannot implement and controls to secure the gateway portal.