• Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • Skip to footer

Mister PKI

SSL Certificates * SSL Tools * Certificate Decoder

  • PKI Training
  • OpenSSL
  • Keytool
  • PKI Tools
    • Apereo CAS
    • SAML
    • OpenID Connect
  • Get expert help

Netscaler SSL Redirect

March 17, 2023 by Mister PKI Leave a Comment

This article will demonstrate how to configure a Citrix Netscaler ssl redirect as well as how to configure a redirect from a port and rewrite action.

Netscaler SSL Redirect

This example will assume you already have a Virtual Server configured in your ADC VPX appliance and it’s listening on port 443. Rather than having an additional Virtual Server configured listening on port 80, you can leverage the Redirect From Port and HTTPS Redirect URL fields in the Basic Settings of the Virtual Server.

  1. Navigate to your Virtual Server. Configuration -> Traffic Management -> Load Balancing -> Virtual Servers
  2. Select the Virtual Server you are configuring the SSL redirect for.
  3. Click Edit on Basic Settings.
  4. Click More.
  5. In the Redirect From Port, enter 80 (or the non-ssl port your application is listening on).
  6. In the HTTPS Redirect URL, enter the FQDN of the application.
  7. Click Continue. That’s it. Test the configuration and save the running config if successful.
Netscaler Redirect From Port

Netscaler Rewrite Action

On occasion you may have a requirement to rewrite or redirect a url based on a url path, host, etc. The Netscaler uses what is known as Responder Actions and Policies to perform such functionality. For example, if you are redirecting all traffic to a new url for a given Virtual Server, you can do this with Actions and Policies.

To create a Responder Action perform the following steps.

  1. Navigate to Configuration -> AppExpert -> Responder -> Actions
  2. Click Add
  3. Give the Action a Name, Type, and Expression.
  4. This example is for a simple redirect, so enter the url in quotations in the Expression text area.
  5. Enter the Response Status Code. For a redirect, it should be either a 301 (permanent) or 302 (temporary).
  6. Provide a Reason Phrase (optional)
  7. Provide any comments documenting the purpose of the Action.
  8. Click OK.

To create a Responder Policy perform the following steps.

  1. Navigate to Configuration -> AppExpert -> Responder -> Policies
  2. Click Add
  3. Give the Responder a Name, Action (select the Action created in the previous step), and Expression. Other fields are optional.
  4. In this example, the Expression should be http.REQ.HOSTNAME.EQ(“example.com”)
  5. Click OK.

To attach the policy to your Virtual Server perform the following steps.

  1. Navigate to Configuration -> Traffic Management -> Load Balancing -> Virtual Servers
  2. Select the Virtual Server to attach the policy to.
  3. Find policies and click Add Binding.
  4. Select the Policy created in the previous step.
  5. Click Bind

Make sure to save your running configuration.

Conclusion

This article has demonstrated how to configure a Citrix Netscaler to perform an SSL redirect from port 80 to port 443. Let us know in the comments if you have any questions. If this article was helpful, please read more of our content.

Uncategorized

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Popular Posts

PKCS12

openssl s_client

Keytool

Keytool list

ECDSA vs RSA

OpenSSL

PKCS7

Certificate Decoder

PKI for DevOps Engineers – Free Training Series

PKI for DevOps Training Hub

Lesson 1 – How TLS and PKI Work

Lesson 2 – Understanding X.509 Certificates

Lesson 3 – Certificate Chains Explained

Lesson 4 – Debug TLS with OpenSSL

Lesson 5 – Verify Certificate Chains

Lesson 6 – Creating CSRs with OpenSSL

Lesson 7 – Working with PKCS12 Certificates

Lesson 8 – Java Keystores and keytool

Lesson 9 – Certificate Expiration Monitoring

Lesson 10 – Automating Certificate Renewal

Lesson 11 – Common TLS Errors

Lesson 12 – PKI Architecture for DevOps

Recent Posts

  • Apache mod_auth_cas: Protect Web Applications with Apereo CAS and Docker
  • Apache mod_auth_mellon: Configure SAML SSO & Docker
  • Configure OpenID Connect (OIDC) in Apereo CAS 7.3 and 8
  • Certificate Ownership Is an Operating Model Problem, Not a Tooling Problem
  • OpenSSL dgst: Create Checksums and Verify Digital Signatures

Footer

  • Twitter
  • YouTube
Mister PKI

Practical security engineering for the systems that establish trust.

Learn OpenSSL Keytool Free training
Work together PKI consulting CAS consulting Sponsored contributions
Site About Support Mister PKI Cookie policy Search
© 2026 Mister PKI Secure systems. Clear guidance.