Are any of you using the new-ish feature that lets you put WAF on the gateway vservers? Just curious if there’s any caveats and if it’s been working well for you

Do you mean the integrated WAF profiles for NSGW and AAA? Yes, they are working pretty well, some Details from my side https://www.julianjakob.com/netscaler-waf-for-gateway-and-aaa/

Yes, that’s what I am referring to and yes I actually found your blog already 😂 nice write up!

I have not experienced nor heard of any issues from anyone who has enabled the feature. Julian's write up is very good.

nice. yeah, seems like been good so far with that. We are just starting to get more of these 14.1s stood up on the norm where we can entertain doing it. many switching to GaaS for us also eliminates some need there

It’s available on later builds of 13.1

Yes, they added into 13.1 because it was a good security capability and they could give out protections for CVEs right away without a firmware upgrade by creating a WAF rule

Nice!. Didn't even see that on the later 13.1s.

I’m not brave enough for 14.1 yet 😂 i still have to get rid of some basic policies, too. Ugh. One step at a time.