An organization must disable SSLv3 and TLS 1.0/1.1 and enforce only strong ciphers across many SSL vServers consistently. What is the recommended NetScaler approach?

1. Manually edit each vServer's protocol list every time
2. Bind an ACL to each VIP
3. Disable the SSL feature entirely
4. Create and bind a default or custom SSL profile that packages the protocol and cipher settings