Citrix SD-WAN

Configure SSL profiles

All SSL related configuration is available through the new configuration editor of the appliance for security and usability. On the SD-WAN Premium (Enterprise) Edition and two-box deployments, service classes are configured from the configuration editor and hence you cannot attach any SSL profiles. To accommodate the expression of SSL profile mapping to a service class, the work flow for SSL profiles is changed to allow for attaching Service classes in the profile node.

One of the limitations is that the SSL profile will get attached to all rules in a service class. If you need to attach the SSL profile selectively to a particular rule, the service class configuration is split into detailed rules for further selection.

Note

Only the service classes that have their filter rules direction set to unidirectional can be associated with SSL profiles.

localized image

To create SSL profile on new Premium (Enterprise) Edition appliance at the data center:

  1. In the SD-WAN web GUI, go to the Configuration > Secure Acceleration page. Click Add Profile. Create the SSL Profile.

    localized image

    localized image

  2. In the Create SSL Profile page, provide a profile name and select Service Classes that will be associated to this profile. Choose Proxy Type and provide relevant data and click Create.

    localized image

  3. After SSL Profile is created successfully and service class is associated, view the SSL profile information as shown below.

    localized image

Configure SSL profiles