Enable SSL DefaultProfile ?

[Jerome GUINCHARD]

Hello

To make my Exchange load balancing work, I need to apply a SSL backend profile to my service groups.

So i created a SSL profile, but when I try to add ECC Curves and SSL Ciphers, I have a message : Operation not permitted. To do this Enable default ssl profile by setting 'set ssl parameter -defaultProfile Enable'

I understand that I need to enable default SSL Profile but I would like to know if there is a risk to enable it. I have other applications in production, so I don't want to take any risk

Where can I found the default SSL Profile settings ?

Thanks for your help

 

 

Edited October 10 by Jerome GUINCHARD

[Michael Adam]

Hello @Jerome GUINCHARD

 

you can see the profiles in "System", "Profiles", "SSL Profile"

Here you can define new profiles with your parameters for your frontend and also backend connections. This you should do for preparation before activate enable default ssl profile via "set ssl parameter -defaultProfile Enable".

Best regards,
Michael 

[Jerome GUINCHARD]

Thanks @Michael Adam - ITCMA for your answer.

If I understand correctly, I will create new SSL profiles that I will apply to my VServer and ServiceGroups (FrontEnd and BackEnd) before running the command "set ssl parameter -defaultProfile Enable". As long as my profiles are applied, the command will have no impact, is that right?

 

[Michael Adam]

Hello @Jerome GUINCHARD

 

there is a tool that can help you for doing it right. You can find it here: https://github.com/netscaler/default-ssl-profile-script

And here is the information from Citrix about that: 

 

Regards,
Michael 

[Jerome GUINCHARD]

beautiful ! 

thanks a lot @Michael Adam - ITCMA

I will work on it quickly. Thanks again

 

[Michael Adam]

Feel welcome @Jerome GUINCHARD 🖖

Please mark the topic as solved. 

Regards,
Michael