Yes these days we apply best practice SSL profile to the management interfaces as well as public facing VIPs - including HSTS and no issues that I've seen. Just make sure you apply the same settings to all NetScalers that talk to each other via RPC for HA/GSLB etc, so you don't break that communication.