Product Documentation

Configuring SSL Policy Labels

Aug 20, 2013
Policy labels are holders for policies. A policy label helps in managing a group of policies, called a policy bank, which can be invoked from another policy. SSL policy labels can be control labels or data labels, depending on the type of policies that are included in the policy label. You can add only data policies in a data policy label and only control policies in a control policy label. To create the policy bank, you bind policies to the label and specify the order of evaluation of each policy relative to others in the bank of policies for the policy label. At the NetScaler command line, you enter two commands to create a policy label and bind policies to the policy label. In the configuration utility, you select options from a dialog box.

To create an SSL policy label and bind policies to the label by using the command line interface

At the command prompt, type:

  • add ssl policylabel <labelName> -type ( CONTROL | DATA )
  • bind ssl policylabel <labelName> <policyName> <priority> [<gotoPriorityExpression>] [-invoke (<labelType> <labelName>) ]


add ssl policylabel cpl1 -type CONTROL 
add ssl policylabel dpl1 -type DATA 
bind ssl policylabel cpl1 -policyName ctrlpol -priority 1 
bind ssl policylabel dpl1 -policyName datapol -priority 1 

To configure an SSL policy label and bind policies to the label by using the configuration utility

Navigate to Traffic Management > SSL > Policy Labels, and configure an SSL policy label.