This script will configure an Always Up Service on your NetScaler. This can be used to bind to Virtual Servers on Port 80 with a Redirect to ensure all traffic passes to port 443. Please note that this will alter the configuration on your Citrix NetScaler and should be tested before implementing into your production environment.
This post will walk you through securing lateral movement in your EUC environment.
This will help with security as it will prevent your users moving from one system to the next in your production environment.
This post will walk you through securing your local drive access on your end points.
This will help with security as it will prevent your users browsing the local system and ‘testing’ out access.
This post will outline the ways in which you can secure PowerShell in your EUC environment.
Please note that this is not specific to Citrix and will work on any remote desktop technology stack
[Environment]::SetEnvironmentVariable(‘__PSLockdownPolicy’, 4, ‘Machine’)
This script will configure a Citrix StoreFront Load Balancer on your NetScaler. Please note that this will alter the configuration on your Citrix NetScaler and should be tested before implementing into your production environment.
This is based from the Citrix StoreFront Load Balancing guide found here
This script will set the approved IIS File Extensions and Verbs for a Citrix StoreFront deployment. Please note that this will alter the default IIS configuration and should be tested before implementing into your production environment.
This is based from the Citrix StoreFront Security guide found here
This script will set an environment variable on the system to enable PowerShell Constrained Language Mode. It will alter your servers ability to operate PowerShell and should be tested before implementing into your production environment.
[Environment]::SetEnvironmentVariable(‘__PSLockdownPolicy’, 4, ‘Machine’)
This script will disable PowerShell Version 2 on your system. It will alter your servers ability to operate PowerShell and should be tested before implementing into your production environment.
This post will walk you through a common flaw with service paths and quoting.
Being able to inject an executable into a service path can cause you all sorts of issues with your security teams.
