<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ACE Load Balancer With ActiveX problem in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/ace-load-balancer-with-activex-problem/m-p/1790090#M532877</link>
    <description>&lt;P&gt;&lt;STRONG&gt;Hi All&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;I am facing issue with ACE load Balancer, &lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;SERVER-------------(http)-------------ACE----------------(https)---------------Client&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Here If I removed https configuration I m able to work with Server but If put ssl configuration in ACE, client is not getting any prompt for dowload active x control and not able to work with application. He received only white blank page. This issue with Virtual IP (z.z.z.z)&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt; &lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;If I access real server IPs it work smooth for me.!!&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;resource-class STICKY&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource all minimum 0.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource rate connections minimum 10.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource sticky minimum 10.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;probe http HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; interval 20&lt;/P&gt;&lt;P&gt;&amp;nbsp; passdetect interval 40&lt;/P&gt;&lt;P&gt;&amp;nbsp; receive 3&lt;/P&gt;&lt;P&gt;&amp;nbsp; expect status 0 499&lt;/P&gt;&lt;P&gt;&amp;nbsp; connection term forced&lt;/P&gt;&lt;P&gt;&amp;nbsp; open 1&lt;/P&gt;&lt;P&gt;parameter-map type ssl PARAMMAP_SSL_TERMINATION&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_3DES_EDE_CBC_SHA&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_AES_128_CBC_SHA priority 2&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_AES_256_CBC_SHA priority 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;rserver host Ser1&lt;/P&gt;&lt;P&gt;&amp;nbsp; ip address x.x.x.x1&lt;/P&gt;&lt;P&gt;&amp;nbsp; probe HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;rserver host Ser2&lt;/P&gt;&lt;P&gt;&amp;nbsp; ip address x.x.x.x2&lt;/P&gt;&lt;P&gt;&amp;nbsp; probe HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;serverfarm host HTTP&lt;/P&gt;&lt;P&gt;&amp;nbsp; rserver Ser1 80&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&amp;nbsp; rserver Ser2 80&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ssl-proxy service SSL_PSERVICE_SERVER&lt;/P&gt;&lt;P&gt;&amp;nbsp; key MYKEY.PEM&lt;/P&gt;&lt;P&gt;&amp;nbsp; cert MYCERT.PEM&lt;/P&gt;&lt;P&gt;&amp;nbsp; ssl advanced-options PARAMMAP_SSL_TERMINATION&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;sticky ip-netmask 255.255.255.255 address source STICKY&lt;/P&gt;&lt;P&gt;&amp;nbsp; replicate sticky&lt;/P&gt;&lt;P&gt;&amp;nbsp; serverfarm HTTP&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;class-map match-all L4_SSL-TERM_CLASS&lt;/P&gt;&lt;P&gt;&amp;nbsp; 2 match virtual-address z.z.z.z tcp any&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;policy-map type loadbalance http first-match PM&lt;/P&gt;&lt;P&gt;&amp;nbsp; class class-default&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; sticky-serverfarm STICKY&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;policy-map multi-match PM-MULTI-MATCH&lt;/P&gt;&lt;P&gt;&amp;nbsp; class L4_SSL-TERM_CLASS&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance vip inservice&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance policy PM&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance vip icmp-reply&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Service-Policy Is already applied, please let me know if you have any idea for this case?&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 21:15:08 GMT</pubDate>
    <dc:creator>jignesh.darji</dc:creator>
    <dc:date>2019-03-11T21:15:08Z</dc:date>
    <item>
      <title>ACE Load Balancer With ActiveX problem</title>
      <link>https://community.cisco.com/t5/network-security/ace-load-balancer-with-activex-problem/m-p/1790090#M532877</link>
      <description>&lt;P&gt;&lt;STRONG&gt;Hi All&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;I am facing issue with ACE load Balancer, &lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;SERVER-------------(http)-------------ACE----------------(https)---------------Client&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;Here If I removed https configuration I m able to work with Server but If put ssl configuration in ACE, client is not getting any prompt for dowload active x control and not able to work with application. He received only white blank page. This issue with Virtual IP (z.z.z.z)&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt; &lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;If I access real server IPs it work smooth for me.!!&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;resource-class STICKY&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource all minimum 0.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource rate connections minimum 10.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&amp;nbsp; limit-resource sticky minimum 10.00 maximum unlimited&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;probe http HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; interval 20&lt;/P&gt;&lt;P&gt;&amp;nbsp; passdetect interval 40&lt;/P&gt;&lt;P&gt;&amp;nbsp; receive 3&lt;/P&gt;&lt;P&gt;&amp;nbsp; expect status 0 499&lt;/P&gt;&lt;P&gt;&amp;nbsp; connection term forced&lt;/P&gt;&lt;P&gt;&amp;nbsp; open 1&lt;/P&gt;&lt;P&gt;parameter-map type ssl PARAMMAP_SSL_TERMINATION&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_3DES_EDE_CBC_SHA&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_AES_128_CBC_SHA priority 2&lt;/P&gt;&lt;P&gt;&amp;nbsp; cipher RSA_WITH_AES_256_CBC_SHA priority 3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;rserver host Ser1&lt;/P&gt;&lt;P&gt;&amp;nbsp; ip address x.x.x.x1&lt;/P&gt;&lt;P&gt;&amp;nbsp; probe HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;rserver host Ser2&lt;/P&gt;&lt;P&gt;&amp;nbsp; ip address x.x.x.x2&lt;/P&gt;&lt;P&gt;&amp;nbsp; probe HTTP_PROBE&lt;/P&gt;&lt;P&gt;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;serverfarm host HTTP&lt;/P&gt;&lt;P&gt;&amp;nbsp; rserver Ser1 80&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&amp;nbsp; rserver Ser2 80&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; inservice&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;ssl-proxy service SSL_PSERVICE_SERVER&lt;/P&gt;&lt;P&gt;&amp;nbsp; key MYKEY.PEM&lt;/P&gt;&lt;P&gt;&amp;nbsp; cert MYCERT.PEM&lt;/P&gt;&lt;P&gt;&amp;nbsp; ssl advanced-options PARAMMAP_SSL_TERMINATION&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;sticky ip-netmask 255.255.255.255 address source STICKY&lt;/P&gt;&lt;P&gt;&amp;nbsp; replicate sticky&lt;/P&gt;&lt;P&gt;&amp;nbsp; serverfarm HTTP&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;class-map match-all L4_SSL-TERM_CLASS&lt;/P&gt;&lt;P&gt;&amp;nbsp; 2 match virtual-address z.z.z.z tcp any&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;policy-map type loadbalance http first-match PM&lt;/P&gt;&lt;P&gt;&amp;nbsp; class class-default&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; sticky-serverfarm STICKY&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;policy-map multi-match PM-MULTI-MATCH&lt;/P&gt;&lt;P&gt;&amp;nbsp; class L4_SSL-TERM_CLASS&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance vip inservice&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance policy PM&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; loadbalance vip icmp-reply&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Service-Policy Is already applied, please let me know if you have any idea for this case?&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 21:15:08 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/ace-load-balancer-with-activex-problem/m-p/1790090#M532877</guid>
      <dc:creator>jignesh.darji</dc:creator>
      <dc:date>2019-03-11T21:15:08Z</dc:date>
    </item>
    <item>
      <title>ACE Load Balancer With ActiveX problem</title>
      <link>https://community.cisco.com/t5/network-security/ace-load-balancer-with-activex-problem/m-p/1790091#M532880</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi Jignesh,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;You might want to move this question to the application networking community as it is to do wit ACE:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;A class="jive-link-external-small" href="https://community.cisco.com/community/netpro/data-center/application-network"&gt;https://supportforums.cisco.com/community/netpro/data-center/application-network&lt;/A&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks and Regards,&lt;/P&gt;&lt;P&gt;Prapanch&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Thu, 08 Sep 2011 17:52:50 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/ace-load-balancer-with-activex-problem/m-p/1790091#M532880</guid>
      <dc:creator>praprama</dc:creator>
      <dc:date>2011-09-08T17:52:50Z</dc:date>
    </item>
  </channel>
</rss>

