NetScaler Gateway

Configuring Server Name Indication Extension

A NetScaler Gateway appliance can now be configured to include a server name indication (SNI) extension in the SSL “client hello” packet sent to the backend server. The SNI extension helps the backend server identify the FQDN being requested during the SSL handshake and respond with the respective certificates.


Enable SNI support when multiple SSL domains are hosted on same server.

To configure NetScaler Gateway to support SNI using GUI:

  1. In the NetScaler GUI, navigate to Configuration> Citrix NetScaler> Global Settings.

  2. Click the Change Global Settings link and from the Backend Server SNI drop-down, select Enabled.

To configure NetScaler Gateway to support SNI using command line interface, at the command prompt, type:

set vpn parameter backendServerSni <ENABLED><DISABLED>
Configuring Server Name Indication Extension

In this article