Legacy configuration

Configure NetScaler to disable cipher redirect

With cipher redirection, you can configure an SSL virtual server to deliver accurate, meaningful error messages when an SSL handshake fails. When an SSL handshake fails, NetScaler redirects the user to a previously configured URL. If no URL is configured, NetScaler displays an internally generated error page.

At the command prompt, run the following commands to configure cipher redirection and verify the configuration:

set ssl vserver <vServerName> -cipherRedirect DISABLED
show ssl vserver <vServerName>
<!--NeedCopy-->

When you bind the default SSL profile to a virtual server in NetScaler, the SSL parameters for that virtual server are inherited from the bound profile. As a result, you cannot directly modify SSL parameters on the virtual server because the SSL profile controls these settings.

set ssl profile <ssl Profile name> -cipherredirect DISABLED
<!--NeedCopy-->

For more information, see Cipher redirection.

Configure NetScaler to prevent non-secure SSL renegotiation

Run the following command to disable SSL renegotiation:

set ssl parameter -denySSLReneg ALL
<!--NeedCopy-->

The following command allows renegotiation for secure clients and servers only:

set ssl parameter -denySSLReneg NONSECURE
<!--NeedCopy-->

For more information, see How to Configure and Use the -denySSLReneg Parameter.

Legacy configuration