anyone had much joy with the WAF for gateway and AAA ? i enabled it on my lab netscaler for Auth+vpn (I use Nfactor with a AAA Auth profile/AAA Vserver with a advanced auth saml policy (Entra id) and once enabled i get a "cant reach this page connection reset error". As soon as i turn the WAF setting to disabled it works again. I checked stat aaa greping for WAF blocked hits and a tail -f on ns.log and it doesnt show anything to suggest WAF is blocking it https://www.julianjakob.com/netscaler-waf-for-gateway-and-aaa/

We had something similar with 13.1-53.24. It seems that WAF built-in was not aware about this path cgi/setclient?cvpn. Configure relaxation rule fixed it bind appfw profile ns-vpn-default-appfw-profile -restValidation "GET:/cgi/setclient"

cheers will try that

Make sure you are using nfactor for all your authentication. Basic auth isn't protected with this.

i am 100% using nfactor as i got a AAA Auth profile / AAA Vserver /Advanced saml auth policy / Login schema configured. Maybe its because its the freemium license ? latest firmware 14.1-38-53