ssl-client-features

This command specifies the features to add in the SSL client profile.

Syntax

ssl-client-features feature

Parameters

feature
Identifies the feature. Separate multiple features with the plus sign (+) character. The default value is use-sni.
use-sni
Allows the client to send the Server Name Indication (SNI) extension in the ClientHello message to the server that the client attempts to connect to.
permit-insecure-servers
Allows connections to SSL servers that do not support RFC 5746.
compression
Enables SSL compression. Compression in HTTPS is dangerous because the HTTPS connection becomes vulnerable to the CRIME (Compression Ratio Info-leak Made Easy) attack.

Guidelines

The ssl-client-features command specifies the features to add in the SSL client profile that secures connections between the appliance and its targets.