ADC

Managing CSRF form tagging check relaxations

September 27, 2025

Contributed by:

C S

You configure an exception (or relaxation) to the CSRF Form Tagging security check in the Add Cross-Site Request Forgery Tagging Check Relaxation dialog box or the Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box.

To configure a CSRF form tagging check relaxation by using the GUI

Navigate to Security > NetScaler Web App Firewall > Profiles.
In the Profiles pane, select the profile you want to configure, and then click Open.
In the Configure Web App Firewall Profile dialog box, click the Security Checks tab. The Security Checks tab contains the list of Web App Firewall security checks.
To add or modify a CSRF relaxation, do one of the following:
- To add a new relaxation, click Add.
- To modify an existing relaxation, select the relaxation that you want to modify, and then click Open.
The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box is displayed. Except for the title, these dialog boxes are identical.
Fill in the dialog box as described below.
- Enabled check box—Select to place this relaxation or rule in active use; clear to deactivate it.
- Form Origin URL—In the text area, enter a PCRE-format regular expression that defines the URL that hosts the form.
- Form Action URL—In the text area, enter a PCRE-format regular expression that defines the URL to which data entered into the form is delivered.
- Comments—In the text area, type a comment. Optional.
Note:

For any element that requires a regular expression, you can type the regular expression, use the Regex Tokens menu to insert regular expression elements and symbols directly into the text box, or click Regex Editor to open the Add Regular Expression dialog box, and use it to construct the expression.
Click OK. The Add Cross-Site Request Forgery Tagging Check Relaxation or Modify Cross-Site Request Forgery Tagging Check Relaxation dialog box closes and you return to the Modify Cross-Site Request Forgery Tagging Check dialog box.
To remove a relaxation or rule, select it, and then click Remove.
To enable a relaxation or rule, select it, and then click Enable.
To disable a relaxation or rule, select it, and then click Disable.
To configure the settings and relationships of all existing relaxations in an integrated interactive graphic display, click Visualizer, and use the display tools.
To review and configure learned rules for the CSRF check, click Learning and perform the steps in To configure and use the Learning feature.
Click OK.

The official version of this product documentation is in English. Any non-English version is solely provided for your convenience and may include machine-translated content. For more information, please refer to the Machine Translation Disclaimer on Cloud Software Group home.

NetScaler Secure Deployment Guide

Managing CSRF form tagging check relaxations

September 27, 2025

Contributed by:

C S

September 27, 2025

Contributed by:

C S

Managing CSRF form tagging check relaxations

To configure a CSRF form tagging check relaxation by using the GUI

In this article