Which feature can a Citrix Administrator use to create a consistent set of front-end SSL parameters across multiple SSL virtual servers?

• A. SSL Policy
• B. SSL Profile
• C. SSL Bridge
• D. SSL Offload

Answer: (B)

Centralizing front-end TLS parameters in an SSL Profile lets you apply the same secure settings to many SSL virtual servers consistently. By creating one SSL Profile with the desired TLS versions, ciphers, ECC curves, and other front-end options, and then binding that profile to each SSL virtual server, every server uses the identical configuration. This reduces configuration drift and makes maintenance easier because updates are done in one place and automatically propagate to all bound virtual servers.

Other options don’t provide this centralized, reusable set of front-end TLS parameters. An SSL Policy governs traffic behavior based on rules rather than TLS termination settings. SSL Bridge is used when SSL traffic is passed through without terminating at the appliance. SSL Offload concerns offloading TLS processing for performance, but it doesn’t by itself enforce a uniform parameter set across multiple SSL virtual servers.