Technical data

110 ServerIron ADX Graphical User Interface Guide
53-1002412-01
SSL profiles
8
• Select the cipher suites you want in the Available Ciphers list and click Add to add to the
Selected Ciphers list, to control the security strength of the SSL handshakes.
5. Click Certificates tab to specify additional options under the SSL profile.
The Certificates page is displayed, as shown in Figure 90.
FIGURE 90 Certificates configuration
6. Provide the following information:
• Verify Client Certificate: Select the Enable check box to configure the device to verify the
signed certificates of the connecting client. By default, client certificate verification is
disabled. After enabling the certificate verification, select one of the following options:
 Per New Connection: To request a client certificate for every new SSL connection.
 Per SSL Handshake: To request a client certificate for every SSL handshake.
 Certificate Optional: To indicate the client certificate is optional.
 Require Certificate for Connection: To indicate the requirement of certificate for the
new connection.
• Disable Certificate checking: Selected the check box to configure the device to not check
for the SSL certificate during client connection. This is applicable only in SSL proxy mode.
• CA Certificates for SSL Proxy Mode: Select the CA certificates from the Available list and
click Add to move them to the Selected list, which can be used by the device in SSL proxy
mode. In SSL proxy mode, the device acts as a client to the real server and requires a valid
client certificate to connect to the real server.
7. Cl ick Advanced tab to configure advanced parameters for the SSL profile.