topic Re: ACE SSL Offload Advantage on End to End SSL in Application Networking

ACE SSL Offload Advantage on End to End SSL

wshuffman — Mon, 21 May 2012 13:51:29 GMT

Is there any advantages to doing SSL termination on ACE if you are doing End to End SSL? It seems as thought it's just another place to manage certs, when you could just pass the port 443 traffic to the server and let it do the SSL decription/encryption.

ACE SSL Offload Advantage on End to End SSL

ciscocsoc — Mon, 21 May 2012 15:41:48 GMT

Hi,

If you terminate on the ACE before re-encrypting you have an opportunity to look at the underlying plaintext and make decisions (e.g. cookie values).

HTH

Cathy

Re: ACE SSL Offload Advantage on End to End SSL

zhenningx — Mon, 21 May 2012 16:00:52 GMT

If you have multiple servers behind ace, you do not need to install multiple carts on each server.

Sent from Cisco Technical Support iPad App

Re: ACE SSL Offload Advantage on End to End SSL

Surya ARBY — Mon, 21 May 2012 18:35:15 GMT

centralized point of management of your certs
performances (hardware-based)
you can use strong ciphers on the client side and weaker ciphers on the server sides, reducing the load on the servers
use of SSL Reuse combined to TCP offload

There are some whitepapers available on cisco.com on this topic.