Legacy configuration

Configure NetScaler to disable SSLv2 redirect

If you enable the SSL v2 Redirect feature on NetScaler, it performs the SSL handshake and redirects the client to the configured URL. If this feature is disabled, NetScaler denies performing the SSL handshake process with SSL v2 clients.

Run the following command to disable SSLv2 redirect on the SSL virtual server:

set ssl vserver <vserver_name> -sslv2redirect DISABLED -cipherredirect DISABLED
<!--NeedCopy-->

When you bind the default SSL profile to a virtual server in NetScaler, the SSL parameters for that virtual server are inherited from the bound profile. As a result, you can’t directly modify SSL parameters on the virtual server because the settings are controlled by the SSL profile.

Run the following command to disable SSLv2 redirect in the SSL profile:

set ssl profile ns_default_ssl_profile_frontend -sslRedirect DISABLED -cipherredirect DISABLED
<!--NeedCopy-->

Configure NetScaler to prevent non-secure SSL renegotiation

Run the following command to disable SSL renegotiation:

set ssl parameter -denySSLReneg ALL
<!--NeedCopy-->

The following command allows renegotiation for secure clients and servers only:

set ssl parameter -denySSLReneg NONSECURE
<!--NeedCopy-->

For more information, see How to Configure and Use the -denySSLReneg Parameter.

Legacy configuration