Aug 22 14:35:48 <local0.warn> 10.107.98.70 CEF:0|Citrix|NetScaler|NS12.0|APPFW|APPFW_XML_WSI_ERR_BODY_ENV_NAMESPACE|4|src=10.100.34.90 spt=50728 method=POST request=http://10.107.98.72/abc msg=WSI check failed: BP1201: The envelope does not use SOAP 1.1 or SOAP 1.2, i.e. does not have a document element named "Envelope" or a namespace value of http://schemas.xmlsoap.org/soap/envelope/ or http://www.w3.org/2003/05/soap-envelope. We got namespace 'http://schemas.xmlsoap.org/wsdl/'.  Offset:38 cn1=293004 cn2=123717 cs1=Xml-Protection cs2=PPE0 cs4=ERROR cs5=2017 act=blocked

There are 2 solutions right now to fix this problem.

a) Either Disable this Security Check.
b) Work on your Applications to change the namespace to above mentioned values.

As with WSI Security Check Enabled BP1201 Protection is enabled by Default and cannot be disabled.
We don't support Relaxations for WSI BP1201 as of now.

---

Problem Cause

Netscaler configured with APPFW Profile for XML Protection with Blocking Enabled for Web Service Interoperatibility blocks Requests or Responses which do not adhere to Namespace values.

Log message BP1201 validates that "Message body should be a soap:envelope with namespace".
https://docs.citrix.com/en-us/netscaler/11-1/application-firewall/xml-protections/xml-webservice-interoperability-check.html

Netscaler allows only 2 type of namespace values with XML Protection.
http://schemas.xmlsoap.org/soap/envelope/
http://www.w3.org/2003/05/soap-envelope