Legacy configuration

Configure NetScaler to disable cipher redirect

With cipher redirection, you can configure an SSL virtual server to deliver accurate, meaningful error messages when an SSL handshake fails. When an SSL handshake fails, NetScaler redirects the user to a previously configured URL. If no URL is configured, NetScaler displays an internally generated error page.

At the command prompt, run the following commands to configure cipher redirection and verify the configuration:

set ssl vserver <vServerName> -cipherRedirect DISABLED
show ssl vserver <vServerName>
<!--NeedCopy-->

When you bind the default SSL profile to a virtual server in NetScaler, the SSL parameters for that virtual server are inherited from the bound profile. As a result, you cannot directly modify SSL parameters on the virtual server because the SSL profile controls these settings.

set ssl profile <ssl Profile name> -cipherredirect DISABLED
<!--NeedCopy-->

For more information, see Cipher redirection.

Configure NetScaler to disable SSL renegotiation

We recommend you to disable SSL renegotiation:

set ssl parameter -denySSLReneg ALL
<!--NeedCopy-->

If the profile is enabled, we also recommend you to set this parameter on front end and backend profiles.

set ssl profile <frontend ssl profile name> -denySSLReneg ALL

set ssl profile <backend ssl profile name> -denySSLReneg ALL
<!--NeedCopy-->

For more information, see How to Configure and Use the -denySSLReneg Parameter.

Legacy configuration