What is the primary purpose of a TCP profile in SSL traffic handling on a Citrix ADC?

• A. Configure certificate renewal
• B. Control DNS resolution
• C. Optimize TCP performance for SSL connections
• D. Enforce SSL certificate pinning

Answer: (C)

TCP profiles define how the ADC manages TCP connections. For SSL traffic, the main goal is to move encrypted data efficiently between the client and the ADC (and then to backend servers) by tuning the TCP path. By adjusting parameters like segment size, initial window, delayed ACK, Nagle’s algorithm, retransmission behavior, and related flow-control settings, the ADC can reduce latency, increase throughput, and handle concurrent SSL sessions more reliably. This makes SSL traffic flow smoother and faster, which is why the primary purpose of a TCP profile in this context is to optimize TCP performance for SSL connections. The other topics—certificate renewal, DNS resolution, and certificate pinning—are separate functions outside the TCP transport path.