ssl-client-features
This command specifies the features to add in the SSL client profile.
Syntax
ssl-client-features feature
Parameters
- feature
-
Identifies the feature. Separate multiple features with the plus sign (+) character. The default value is use-sni.
- use-sni
- Allows the client to send the Server Name Indication (SNI) extension in the ClientHello message to the server that the client attempts to connect to.
- permit-insecure-servers
- Allows connections to SSL servers that do not support RFC 5746.
- compression
- Enables SSL compression. Compression in HTTPS is dangerous because the HTTPS connection becomes vulnerable to the CRIME (Compression Ratio Info-leak Made Easy) attack.
Guidelines
The ssl-client-features command specifies the features to add in the SSL client profile that secures connections between the appliance and its targets.