SSLv2/SSLv3 Shows as Disabled on SSL Checker Despite Being Enabled on NetScaler Virtual Server

SSLv2/SSLv3 Shows as Disabled on SSL Checker Despite Being Enabled on NetScaler Virtual Server

book

Article ID: CTX215026

calendar_today

Updated On:

Description

The SSLv2/SSLv3 protocol is enabled on the NetScaler virtual server, however the SSL checker shows it as disabled.

Resolution

To resolve this issue, disable SNI on NetScaler, as SNI is a TLS extension.
Note: According to RFC6176 from Internet Engineering Task Force (ITEF), TLS servers must not support SSLv2. The NetScaler appliance does not support SSLv2 from release 12.1.

Issue/Introduction

The SSLv2/SSLv3 protocol is enabled on the NetScaler virtual server, however the SSL checker shows it as disabled.