We use Citrix Web APP API Protection as a Firewall solution. Many ransomware attacks are happening and it is important to protect your entire data center.
Citrix Consultant at Alphadata.LLC
Is stable, protects data, and is affordable
Pros and Cons
- "Citrix Web App API Protection allows you to enable a blocking mode"
- "Citrix Web App and API Protection could improve in the area of licensing"
What is our primary use case?
How has it helped my organization?
Citrix Web App API Protection allows you to enable a blocking mode. The hackers who choose to upload any unwanted data on your application, Citrix Web App will date it. A notification will be sent to you and your administrator, and that notification will include the IP address that is trying to upload some unwanted data to your application. Now you can identify and can block it, or you can block that application from that particular space in a particular country.
We blocked that application for particular countries. We send the report to the government and they checked everything. And after a few months, we reviewed the policy.
What needs improvement?
Citrix Web App and API Protection could improve in the area of licensing.
Some customers have an enterprise license and some customers have an advanced license. If you have an enterprise and advanced license, the Web Application Server, will not work. If you want to upgrade or if you want to use that Web Application Firewall, you have to have a premium license. I think they should enable the feature for an advanced license because small customers, cannot buy the premium license, which is a little bit expensive for them.
For how long have I used the solution?
I have been working with Citrix Web App and API Protection for the past three years.
Buyer's Guide
NetScaler
February 2025

Learn what your peers think about NetScaler. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
What do I think about the stability of the solution?
The stability of the Citrix Web App and API Protection is excellent.
What do I think about the scalability of the solution?
The scalability is not a problem.
How are customer service and support?
Technical support is good when you are not able to find the Citrix documentation. They have a good resource for the Web Application Firewall.
How would you rate customer service and support?
Positive
What was our ROI?
Citrix Web App and API Protection are definitely worth the money. You are protecting your entire application as well as your data center. If you are investing in your Web Application Firewall and API Protection, it's worth it.
What's my experience with pricing, setup cost, and licensing?
The setup is very easy. The only thing is you need to understand the backend application functionality. Whether it's IES based, or whether it is some other vendors and what kind of database and authentication method they are using. This kind of information you should know before implementing the Citrix Web App and API Protection.
When talking about pricing and licensing, Citrix Web App and API Protection are in the middle.
What other advice do I have?
I would rate Citrix Web App and API Protection an eight out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner

IT Manager at a manufacturing company with 1,001-5,000 employees
Easy to deploy and setup with good stability
Pros and Cons
- "It's very easy to configure."
- "The solution could be more secure."
What is our primary use case?
We have published our applications via Citrix and then given access to the business users to access those specific applications via Citrix. We have many applications where multiple users need access - whether it's an EVS or a CRM, all these have been published to Citrix. We also use the solution for the ADC. ADC is a front end, wherein I get queries, and we'll get all the requests from internal and external users as well.
What is most valuable?
The solution is easy to use. It's very easy to configure. The solution is not very difficult.
Performance-wise it's okay. The solution is stable.
The solution is easy to set up and the deployment process is quite fast.
What needs improvement?
The solution could be more secure.
For how long have I used the solution?
I've used the solution for four or maybe five years.
What do I think about the stability of the solution?
The solution is quite stable and the performance is good. There are no bugs or glitches. It doesn't crash or freeze. It's reliable. The stability is good.
What do I think about the scalability of the solution?
We have about 3,000 users on this solution. The product can scale.
How are customer service and support?
We are in constant touch with Citrix support. We get a good resolution from them. I'd say that we are quite satisfied with the level of support they provide.
Which solution did I use previously and why did I switch?
I also worked with F5. We used it for a couple of years.
How was the initial setup?
The setup process is not overly complex or difficult. The installation should not take more than three to five hours so long as you have the right information on hand.
Since the solution is straightforward and stable, we only need three or four engineers to handle deployment and maintenance.
What about the implementation team?
We handled the installation ourselves. We did not need outside help from consultants or integrators. We're capable of handling everything in-house.
What's my experience with pricing, setup cost, and licensing?
There is a licensing fee, and we pay it once a year.
What other advice do I have?
We're a customer and an end-user.
I'd rate the solution at a nine out of ten. I've been very happy with its capabilities.
I would recommend the solution to others.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
NetScaler
February 2025

Learn what your peers think about NetScaler. Get advice and tips from experienced pros sharing their opinions. Updated: February 2025.
838,713 professionals have used our research since 2012.
Head, Network Design at a financial services firm with 51-200 employees
A robust and easy-to-use solution for load balancing and context switching
Pros and Cons
- "The load balancing feature and the fact that you can do context switching in the WAF are the most valuable. We majorly use it for load balancing, but we also use it for context switching in the WAF. It is also robust and very easy to work with and manage."
- "They can improve the scalability and the multi-tenancy feature. We recently tried to configure an authentication, and we ran into some issues while using the web-based GUI. It was very slow when you log in with your credentials in the web-based GUI. Each time we clicked on the menu, it tried to do the authentication. It works properly in the console."
What is our primary use case?
We use it for load balancing.
What is most valuable?
The load balancing feature and the fact that you can do context switching in the WAF are the most valuable. We majorly use it for load balancing, but we also use it for context switching in the WAF. It is also robust and very easy to work with and manage.
What needs improvement?
They can improve the scalability and the multi-tenancy feature.
We recently tried to configure an authentication, and we ran into some issues while using the web-based GUI. It was very slow when you log in with your credentials in the web-based GUI. Each time we clicked on the menu, it tried to do the authentication. It works properly in the console.
For how long have I used the solution?
I have been working with Citrix ADC for six years.
What do I think about the scalability of the solution?
Its scalability is not good enough. We can't scale the model that we have to the one that is used for multi-tenancy. We need mobile multi-tenancy. Scalability is a big requirement for us. That's why we are looking at a different model.
How are customer service and technical support?
Their technical support has been okay. It is fine, but it can be improved.
Which solution did I use previously and why did I switch?
I have used an F5 solution. In F5, you have to do a lot of coding and scripting to be able to achieve certain things. Citrix is very straightforward because of the infrastructure that we run. It is very easy to spin up services. F5 is not straightforward.
How was the initial setup?
I wouldn't say that it was tedious. It was pretty much straightforward for us.
What about the implementation team?
We had a vendor who was experienced in deploying this solution. After the POC, it was easy for us to deploy this solution. We have less than 20 engineers to maintain this solution.
What's my experience with pricing, setup cost, and licensing?
We get value for money. Its price is fair. I don't think it is overpriced.
What other advice do I have?
I would recommend this solution. It is cloud-ready. It can be deployed on the cloud as well as on-premises.
I would rate Citrix ADC an eight out of ten. There are some flaws that need to be corrected.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Sr. Network Systems Engineer at a manufacturing company with 51-200 employees
GSLB allows me to do active/active or active/passive deployment of services
Pros and Cons
- "The GSLB feature allows us to move services between data centers. We can do this in either a planned or unplanned manner. We have experienced service provider outages at our primary data center and GSLB will kick in to automatically modify DNS records to point to a secondary data center (active/passive). We also make use of GeoIP information to point clients to the closest data center for accessing applications."
- "Unified Gateway allows me to provide secure external access to applications for suppliers and customers while requiring Multi-Factor Authentication."
- "The main areas for improvement would be around documentation and support. If a feature can be used in two or three ways, show that feature being used in all of those ways. Documentation seems to only cover the primary use case and leaves you to either run through trial and error or consult the user community. In terms of support, I have never actually had them solve any of my issues. I have always solved them myself and then provided the resolution to support."
What is our primary use case?
We use the NetScaler ADC in three primary use cases. The first is to provide load balancing services for our internal applications. The second is for Global Server Load Balancing (GSLB) to provide data center resiliency and failover of our externally accessible services, as well as proximity-based access. The third is for the Unified Gateway to securely provide external access to some of our key applications. We deploy VPX appliances running in our VMware environment.
How has it helped my organization?
The GSLB feature allows us to move services between data centers. We can do this in either a planned or unplanned manner. We have experienced service provider outages at our primary data center and GSLB will kick in to automatically modify DNS records to point to a secondary data center (active/passive). We also make use of GeoIP information to point clients to the closest data center for accessing applications.
What is most valuable?
The features I find most useful are
- Load Balancing
- GSLB
- Unified Gateway.
I love being able to terminate connections to the boxes and look at all of the packet headers to determine which way I want to send the traffic next. GSLB provides amazing ability to do active/active or active/passive deployment of services. Unified Gateway allows me to provide secure external access to applications for suppliers and customers while requiring Multi-Factor Authentication.
What needs improvement?
The main areas for improvement would be around documentation and support. If a feature can be used in two or three ways, show that feature being used in all of those ways. Documentation seems to only cover the primary use case and leaves you to either run through trial and error or consult the user community. In terms of support, I have never actually had them solve any of my issues. I have always solved them myself and then provided the resolution to support.
For how long have I used the solution?
More than five years.
What other advice do I have?
I would rate the NetScaler a nine out of 10. It is a fantastic platform to work with and the features/functionality are top-notch. The only ding would be for the documentation, but the user community is fantastic.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Data Scientist at a consultancy with 10,001+ employees
Intuitive to use once you've familiarized yourself with it, but upgrade times are a bit long
Pros and Cons
- "We have good customer support."
- "Their upgrades are not very backward compatible, and sometimes they mess up."
What is our primary use case?
We provide the solution to customers on their premises. We use Citrix to provide their network infrastructure for their business solutions. We have an automated scenario implemented where we can deploy architectures with an automation script.
What is most valuable?
We have good customer support. And since we've been working on the solution for the last five years, it's intuitive to us, and we can provide new solutions, applications, and implementations.
What needs improvement?
One of the most glitchy things in NetScaler comes whenever they upgrade something. Their upgrades are not very backward compatible, and sometimes they mess up, and we'd have to speak to someone. Also, Citrix is limiting their support for the load balancer to their legacy customers only. They are not providing the services to new customers or clients. Citrix is changing its business model.
We also need more things on a DNS-based system. For some of the new DNS, the features that can be included would be good.
Moreover, the solution should be more user-friendly. If one implements it once, they will get all the dos and don'ts. But first-time users would not know. And the documentation has limits and gaps. First-time users need to go to the support team and get their expertise to get it done.
For how long have I used the solution?
We have a setup that's been running for the past six years.
What do I think about the stability of the solution?
I rate the solution's stability a six-and-a-half out of ten. Sometimes, we face issues with upgrading time.
What do I think about the scalability of the solution?
I rate the solution's scalability an eight out of ten.
Since we use quite a lot of electricity, we don't just scale up. We also scale down when we don't need it for cost-effectiveness. With scalability, we are not facing any issues, and the solution works quite well.
We have more than 2,500 individual customers daily. That is the smallest customer base we have on this solution.
How was the initial setup?
I rate the initial setup a six-point five or seven out of ten because it was difficult. Because we have lots of experience already on this product, we understand how to work with it. But people purchasing it and trying to implement it for the first time would need support from the support team. If first-time users mandatorily need support, it's not user-friendly.
Because we have automatic implementations enabled, the solution takes half a day to deploy. But it will take longer for new users. If I were doing a POC, I would probably take three to four business days to deploy the solution.
The deployment process is all automated. We prepare our environment using Ansible scripts.
What's my experience with pricing, setup cost, and licensing?
I rate the pricing an eight out of ten since it is expensive. The pricing can be a problem for smaller businesses.
There is a separate cost grade for the kind of support you get.
What other advice do I have?
I suggest everyone does their own POC because everyone has their requirements. They should do their research and see what fits better for them.
I rate Citrix Web App and API Protection a seven-and-a-half out of ten.
Disclosure: My company has a business relationship with this vendor other than being a customer: msp
Senior Server Administrator at a financial services firm with 501-1,000 employees
A flexible product with a good VPN and easy-to-use load balancing capabilities
Pros and Cons
- "I find all of it to be valuable, because of the flexibility that is built into this product."
- "There are certain features that are very useful and Citrix makes you pay a bit more for them."
What is our primary use case?
We are using Citrix ADC as a VPN appliance, and use it as a load balancer for a few different services.
How has it helped my organization?
We have a custom application that we use, and we were able to port it over from a legacy system into the ADC.
What is most valuable?
I find all of it to be valuable, because of the flexibility that is built into this product.
If we need an on-premises load balancer, it's easy enough to spin those up here an there and the VPN seems to be pretty solid as well.
What needs improvement?
The licensing model that Citrix employs need to be improved. There are specific features that we like but are not available at our licensing level.
There are certain features that are very useful and Citrix makes you pay a bit more for them. I think that they should be included as default features.
In the next release, I would like to have the ability to inspect the SSL payload. It should be included by default.
For how long have I used the solution?
I have been using Citrix ADC for almost a year.
What do I think about the stability of the solution?
It's a stable product and I haven't found any issues with it. It's been working well for us this entire time.
What do I think about the scalability of the solution?
Scalability is not really applicable in our case. We have moved towards the cloud.
I don't believe that we plan to scale on-premises any further.
We have approximately 500 users in the company who are using this solution.
How are customer service and technical support?
Technical support is good. We have reached out a couple of times and they were able to assist us quickly, even on the weekend.
I would rate technical support a nine out of ten.
It depends on who you get, there are some who want to redirect you to professional services. Once you get them on board, their service is good.
Which solution did I use previously and why did I switch?
Previously, we used Juniper VPN. The hardware was older.
How was the initial setup?
The initial setup was fairly complex. There is a bit of a learning curve.
What about the implementation team?
We worked with professional services during our deployment.
What's my experience with pricing, setup cost, and licensing?
It's an expensive product but it works well.
What other advice do I have?
My advice to anyone who is looking at implementing Citrix ADC is if they need flexibility, it's a stable product. It's one of the better appliances that I have used, even in a virtual environment, it's working great. I can recommend it.
I would rate Citrix ADC a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Workplace Virtualisation Senior Analyst at AXA
Allows the user to easily scale out application delivery, and provides secure remote access
Pros and Cons
- "This solution allows the user to easily scale out application delivery, and provides secure remote access."
- "Should offer more flexible cost-effective licensing for small to medium sized organizations."
What is our primary use case?
- Load balancing business web applications
- Load balancing core infrastructure services e.g. App-V, Ivanti UWM, Citrix Storefront and Director
- Application firewall features WAF for more secure application access
- XenApp/XenDesktop application gateway with two factor authentication
- Use of MAS for analytics and centralised management
How has it helped my organization?
- Allows the user to easily scale out application delivery.
- Provides secure remote access.
- Ease of management and business continuity support.
- Powerful, reliable, and feature rich solution all in one appliance.
What is most valuable?
NetScaler MAS centralised management and analytics makes it is easy to support, manage, monitor, and maintain a NetScaler solution.
What needs improvement?
It should offer more flexible cost-effective licensing for small to medium sized organizations i.e. a pooled licensing option on entry level MPXs like 5901s.
For how long have I used the solution?
Still implementing.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Programator at a computer software company with 11-50 employees
A highly stable tool that offers two-factor authentication
Pros and Cons
- "It is a very stable solution."
- "Currently, it is not easy to use the configuration capabilities of the product."
What is our primary use case?
I use Citrix NetScaler in my company for mostly two-factor authentication.
What is most valuable?
The most valuable feature of the solution is the two-factor authentication.
What needs improvement?
From an improvement perspective, the tool should be made easier in the area of the configuration capabilities that it provides to users. Currently, it is not easy to use the configuration capabilities of the product.
For how long have I used the solution?
I have been using Citrix NetScaler for a month. I use the solution's latest version.
What do I think about the stability of the solution?
It is a very stable solution. Stability-wise, I rate the solution a nine out of ten.
What do I think about the scalability of the solution?
It is a scalable solution. Scalability-wise, I rate the solution a nine out of ten.
Around 100 employees in my company use the product.
How was the initial setup?
The product's initial setup phase was easy.
I did not do the product's installation. My colleagues managed the product's installation phase.
The solution is deployed on an on-premises model.
What other advice do I have?
I don't know about the maintenance part of the solution since the server we use in our company is operated from some other location.
The global server load balancing feature of Citrix NetScaler has improved our company's application availability.
I can recommend the product to those who plan to use it.
I rate the overall tool a nine out of ten.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.

Buyer's Guide
Download our free NetScaler Report and get advice and tips from experienced pros
sharing their opinions.
Updated: February 2025
Product Categories
Application Delivery Controllers (ADC) Network Management Applications Web Application Firewall (WAF)Popular Comparisons
Microsoft Azure Application Gateway
F5 BIG-IP Local Traffic Manager (LTM)
HAProxy
NGINX Plus
Fortinet FortiADC
Kemp LoadMaster
Radware Alteon
A10 Networks Thunder ADC
VMWare Avi Load Balancer
Loadbalancer.org
Amazon Elastic Load Balancing
Barracuda Load Balancer ADC
Ivanti Virtual Web Application Firewall
Array APV Series
Akamai Ion
Buyer's Guide
Download our free NetScaler Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What's right for me? Fortinet or Citrix?
- Pulse vADC/vTM vs. Netscaler
- Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
- When evaluating Application Delivery Controllers, what aspect do you think is the most important to look for?
- Comparison Between Kemp LoadMaster and Load Balancer.org
- Is Citrix ADC (formerly Netscaler) the best ADC to use and if not why?
- What are your daily F5 BIG-IP LTM use cases?
- Why do I need an ADC solution?
- What is the best ADC solution?
- Why is Application Delivery Controllers (ADC) important for companies?