A Citrix Administrator is creating a new SSL vServer and notices the ns_default_ssl_profile frontend SSL profile is automatically bound to the SSL…

When the default SSL profile feature is enabled on a Citrix ADC, the nsdefaultsslprofilefrontend is automatically bound to all newly created SSL virtual servers. To customize the SSL parameters for a specific virtual server, an administrator must perform two key actions. First, a new, separate SSL profile must be created with the desired configuration (Action C). Second, this newly created profile must be bound to the SSL virtual server. The act of binding the new profile implicitly unbinds and replaces the default profile, thus changing the vServer's SSL configuration (Action B).

A. "Globally unbind" is not a valid Citrix ADC concept or command. Profiles are bound to specific entities, not managed through a global unbind action.

D. An SSL virtual server cannot function without an SSL profile. The system requires a profile to be bound to handle SSL/TLS negotiations.

E. Disabling the default profile feature globally prevents automatic binding to new vServers but does not remove the profile from existing ones.

1. Citrix ADC 13.1 Product Documentation

"SSL profiles": "The default SSL profile feature is enabled on the appliance. As a result

the ADC appliance automatically binds the default frontend profile

nsdefaultsslprofilefrontend

to all SSL virtual servers... To use settings other than the default

you can create a custom profile and bind it to the virtual servers." This statement directly supports the necessity of both creating a new profile (C) and binding it (B).

2. Citrix ADC 13.1 Command Reference

add ssl profile: This command reference details the procedure for creating a new SSL profile

which corresponds to option C.

3. Citrix ADC 13.1 Command Reference

bind ssl vserver: The documentation for this command explains how to bind an SSL profile to a virtual server. When a profile is already bound (like the default)

executing this command with a new profile name replaces the existing binding. This validates option B.

4. Citrix ADC 13.1 Command Reference

set ssl parameter: The documentation for the -defaultProfile parameter clarifies that disabling this global setting only affects virtual servers created after the change

confirming that option E is incorrect for an already-existing vServer.