Managing the SSL client on the ProxySG

Products

• ProxySG Software - SGOS

Issue/Introduction

You want  set up the SSL client configuration so that you can use the ProxySG as an SSL client.

Resolution

Only one SSL client can be created on a ProxySG. The creation of the SSL client means that for every HTTPS connection to the destination server, the ProxySG picks the parameters needed for negotiating the SSL connection from the SSL-client configuration. Thus, multiple SSL connections to different HTTPS destination servers can be supported with a single SSL-client configuration. This is similar to a browser, where one configuration is used to negotiate multiple connections with different hosts.

If you need to create a new SSL client, you can only do this through the CLI, and the existing SSL client must be deleted first.

You do not need to recreate the SSL client if you just need to change the protocol, cipher suites, or keyring associated with it.

Please note that the items discussed below are contained in the SGOS  Administration Guide for the version of SGOS you are running in your environment.  The document can be downloaded from https://support.broadcom.com

For SGOS 6. x, if you wish to change the cipher suites and keyring on an SSL client, please see: Managing SSL Traffic Blue Coat ProxySG in the SGOS 6.x Administration Guide.

For SGOS 7.3.x, if you wish to change the cipher suites and keyring on an SSL client, please see: Managing SSL Traffic Blue Coat ProxySG in the SGOS 7.x Administration Guide.

For SGOS 7.4.x, if you wish to change the cipher suites and keyring on an SSL client, please see: Managing SSL Traffic Blue Coat ProxySG in the SGOS 7.x Administration Guide.