Disable TLS 1.0 and TLS 1.1 on NSIP
To disable TLS 1.0 and TLS 1.1 on NSIP by using the GUI
-
Navigate to Traffic Management > Load Balancing > Services.
-
On the Services page, click the Internal Services tab, select the check box next to the internal service for NSIP to be edited, and click Edit.Note: There might be different services for NSIP for different secure ports. Make the required changes on all the applicable ports individually.
-
Click the pencil icon under SSL Parameters section to disable the required TLS.
-
Finally click OK and click Done.Note: If the NetScaler appliance is in a high availability setup, the TLS must be disabled on both the nodes individually.