How to block connections to NetScaler coming with empty User-Agent ?

How to block connections to NetScaler coming with empty User-Agent ?

book

Article ID: CTX230709

calendar_today

Updated On:

Description

Blocking requests without a "User-Agent" header is a simple step to reduce web abuse. With NetScaler Responder policy, one can achieve this in simple fashion.


Instructions

Create a "Responder Policy" with Action as RESET and Expression as follows:

HTTP.REQ.HEADER("User-Agent").VALUE(0).LENGTH.EQ(0)
 

Additional Information

https://docs.citrix.com/ja-jp/netscaler/11/appexpert/responder.html