The ssl-profile command creates an SSL uninstallation profile and displays the SSL uninstallation profile view.
The undo ssl-profile command deletes an SSL uninstallation profile.
ssl-profile [ ssl-profile-id ] ssl-profile-name
undo ssl-profile { ssl-profile-id | ssl-profile-name }
| Parameter | Description | Value |
|---|---|---|
| ssl-profile-id | Specifies the ID of an SSL uninstallation profile. | The value is an integer ranging from 0 to 127. |
| ssl-profile-name | Specifies the name of an SSL uninstallation profile. | The value is a string of 1 to 32 case-sensitive characters, spaces not supported. The name must start with a letter and cannot be all, vsys or all-systems. |
An SSL uninstallation profile is created to enable SSL uninstallation. For SSL uninstallation, the server imposes SSL negotiation and encryption/decryption of HTTPS services on the FW and the server focuses on HTTP services only. The service between the client and the FW is HTTPS service, the service between the FWand the physical server is HTTP service, and SSL negotiation and encryption/decryption are performed on the FW. This helps to reduce the CPU payload for processing SSL negotiation and encryption/decryption by the server, and enhance the server performance.
If the ID is not specified when creating an SSL uninstallation profile, the system assigns the smallest unused integer in the range from 0 to 127 as the ID of the profile.