Has anyone experienced issues with wrong SSL versions after the update to 14.1-66.59? We have an SSL Profile and Cipher Group setup according to this article: https://community.citrix.com/tech-zone/build/tech-papers/networking-tls-best-practices-2025/ Both are linked to the NetScaler Gateway VIP. If I access the Gateway I get SSL_ERROR_NO_CYPHER_OVERLAP (Firefox) and ERR_SSL_VERSION_OR_CIPHE_MISMATCH (Chrome). After disabling TLS1.3 in the linked SSL Profile everything is fine again. The cipher group itself has not changed and all ciphers are still there. Did something else change with this update in regards to SSL?

Chris, I had issues with Ciphers as well when I tried to upgrade one of the prod NS last night. Had to roll back as I could not find immediate answer.

So logging into the gateway from your browser all went ok?

yes that part worked. so the issue may not be identical to your but since you mentioned SSL I wanted to chime in as well.

Ah, just updated a second set of NetScalers (different datacenter) and that went all ok. Without any SSL hassle.

I am in a similar boat too. I have newer Netscalers that use cipher groups and work fine. Its the legacy ones with inherited settings from long ago

We are using custom SSL profiles with a custom cipher group bound to them, and found after the upgrade to 14.1 66.59 the "DEFAULT" cipher group was inserted into the SSL Ciphers list in the custom SSL profile in addition to the custom cipher group we've had in place for a long time.