Citrix SD-WAN

Advanced firewall settings

March 12, 2021

Contributed by:

S C

You can configure the advanced firewall settings for every site individually. This will override the global settings.

To configure advanced firewall settings:

In the Configuration Editor, navigate to Connections > View Site > Firewall > Settings.
In the Policy Template section, click Add. Enter values for the following parameters.
- Priority - The order in which the policy is applied at the site.
- Name - The name of the Policy Template to use at the Site.
Click Advanced. Enter values for the following parameters:
- Default Firewall Action - Select one of the following options.
  - Use Global Setting- Use the Global setting configured in NetScaler SD-WAN settings
  - Allow- Packets not matching any filter policy is permitted.
  - Drop- Packets not matching any filter policy is dropped.
- Default Connection State Tracking – Select one of the following options.
  - Use Global Setting - Use the Global setting configured in NetScaler SD-WAN settings
  - No Tracking - Bidirectional connection state tracking will not be performed on packets not matching any filter policy
  - Track - Bidirectional connection state tracking will be performed on TCP, UDP and ICMP packets not matching any filter policy or NAT rule. This blocks asymmetric flow, even when there are no firewall policies defined.
- Source Route Validation: If enabled, packets will be dropped when received on an interface that differs from the packet’s route, as determined by the Source IP Address. Only the route the packet would currently match is considered.
- Max New Connections per Source: The maximum number of non-established Connections to allow per Source IP Address. 0 means unlimited. Use this setting to help prevent Denial of Service Attacks on the firewall.
- Max Connections per Source: The maximum number of connections to allow per Source IP Address. 0 means unlimited. Use this setting to help prevent Denial of Service Attacks on the firewall.
Configure the various timeout settings and click Apply.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Advanced firewall settings

March 12, 2021

Contributed by:

S C

March 12, 2021

Contributed by:

S C

Advanced firewall settings

In this article