6500 CSM with SSL, gw on real servers.

[marcin.mazurek]

I've got a CSM with SSL module. Is it necessary on real serversto point the gateway on CSM VIP or can I pass by the 6500 with CSM and SSL and point the gatway to the router in the network before 6500?

It's not clear to me from docs if the connections going through the SSL must be going back through CSM.

any hints?

tia

[Gilles Dufour · Accepted solution]

The CSM must see both side of a connection or it will close the connection with a RESET.

So, yes, the traffic from the real server must go back to the CSM.

There is a way to avoid this called 'Direct Server Return' but I would not recommend it unless you are an expert with CSM.

Gilles.