Scoring an A+ on SSL Labs using a Citrix ADC / NetScaler version 12.1

There are serious changes in 12.1. I’m currently investigating these changes and will update this article as soon as any possible

 

This will be my shortest blog about the subject ever. Citrix finally did it! They created a “Built-in secure front-end SSL profile” called ns_default_ssl_profile_secure_frontend.

What do you need to do? Just bind this profile to your vServer. That’s it. Isn’t it great? Compare this to my last blog about the subject!

That’s the way it should be done. Hey, Citrix ADC guys, you’re doing great!

2 thoughts on “Scoring an A+ on SSL Labs using a Citrix ADC / NetScaler version 12.1

  1. Salim Hurjuk

    I applied mentioned SSL Profile. But I received “This server does not support Forward Secrecy with the reference browsers. Grade capped to B” error msg

    Reply
    1. Johannes Norz Post author

      Yes, I already wanted to delete this one. It’s wrong. Sorry for this.

      There are serious changes in 12.1, and I’m still digging into it. I will delete this one and rewrite it as soon as I understand all settings.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *