Managed service for operating a web application firewall on Citrix NetScaler in the banking sector, since 2020.

Background

The real effort involved in operating a WAF lies not in troubleshooting, but in managing the rules. Each release of the protected application can render rules invalid or require new ones. If this is maintained manually, adjustments take weeks, false positives are corrected during operation, and, when in doubt, security measures are relaxed to avoid blocking business processes.