Gateway

Prompt users to upgrade older or unsupported browsers by creating a custom page

January 8, 2024

Contributed by:

If a client connects to a Citrix ADC VIP address using an insecure cipher such as SSLv3, they can be redirected to a custom page prompting them to upgrade to the latest version of Internet Explorer, Firefox, Chrome, or Safari.

Note: According to RFC6176 from the Internet Engineering Task Force (ITEF), TLS servers must not support SSLv2. Therefore, the Citrix ADC appliance does not support SSLv2 from release 12.1 and later.

How to create a custom page to prompt users to upgrade older unsupported browsers based on SSL

Create a Citrix ADC responder policy with the rule client.ssl.version.eq(). The version returns the SSL protocol version.
- Returns 0 if the transaction is not SSL based.
- Returns 0x002 if the transaction is SSLv2.
- Returns 0x300 if the transaction is SSLv3.
- Returns 0x301 if the transaction is TLSv1.
You must enable SSLv3 (or other earlier version) to trigger the responder policy.

For example, if SSLv3 is disabled on the Citrix ADC appliance and a client with an older browser using SSLv3 tries to connect, then the access is denied.
If your deployment requires SSLv3 or an earlier version for a specified period (a month or two), configure the following:
- Enable the SSLv3 protocol.
- Update the custom page to include information that after the specified period, the browser cannot connect to the appliance.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Prompt users to upgrade older or unsupported browsers by creating a custom page

January 8, 2024

Contributed by:

January 8, 2024

Contributed by:

Prompt users to upgrade older or unsupported browsers by creating a custom page

How to create a custom page to prompt users to upgrade older unsupported browsers based on SSL

In this article