How to Disable Default SSL Profile

How to Disable Default SSL Profile

book

Article ID: CTX227225

calendar_today

Updated On:

Description

While troubleshooting an issue with xenmobile vpn I enabled the default ssl profile under Traffic Management -> ssl-> change advanced ssl settings  . This brokes xenmobile, secure hub is unable to connect. I therefore restored the netscaler to a point in time prior to the change however this did not revert the sefault ssl profile setting. 

Instructions

The Default SSL Profile under "Traffic Management ->SSL-> Change advanced SSl settings" cannot be disabled using the GUI or the CMD line.

Amendments need to be made to the ns.conf file and a reboot of the Netscaler needs to be done.

Follow these steps to achieve this
 
  1. Connect to the Netscaler using an SFTP program like WINSCP.
  2. Navigate to the nsconfig folder on the Netscaler.
  3. Copy the ns.conf file to your desktop and open with either Notepad or Notepad ++
  4. Search for the line: "set ssl parameter -defaultProfile ENABLED"
  5. Delete the line.
  6. Save the file.
  7. Remove or rename the existing ns.conf that is in the nsconfig folder on the Netscaler
  8. Then copy back to the Netscaler nsconfig folder the amended ns.conf file.
  9. Restart the Netscaler making sure not to save the running configuration.
  10. This should disable the Default profile.

Issue/Introduction

How to disable the default ssl profile on netscaler
Powered by Wolken Software