Application Networking

Well, I got the CSS working fine with terminating all inbound SSL connections to a backend server port 7777However 1 problem has come up. When I have the oracle admins trying to upload a file to the backend webserver via the proxy and their webpage u...

Hi Guys,One of our clients wants to setup an SSL connection on a non-standard SSL port i.e. 4444 to begin with. Here the sever handles the SSL encryption / deccryption) instead of the SSL module. I've found the following config to work well:serverfa...

I have a requirement to send traffic to another server on the private side using the VIP address. I understand source groups need to be defined for this requirement to NAT the source ip address of server. There is also a requirement to send traffic t...

Hello all,I must configure our CSS to use a GeoTrust SSL wildcard cert covering 3 domain levels, i.e., "*.abc.com", "*.*.abc.com" and "*.*.*.abc.com".We generated the CSR from the CSS using "*.abc.com" for our domain name since you can only make one ...

We are having problems when the frontend SSL session times out, and browser reuses the same SSL-id and cookie, and we get routed to a different server (not sticking). Is there any way to debug the cookie content in the intermediate http flow ?Thanks ...

Hello,our customer has a problem with correct closing TCP connections on the ACE. TCP session (HTTP protocol) is closed _correctly_ (we can see it in the sniffer output), but 'sh conn' on the ACE shows it as 'established' (session is already closed)....

How to configure CSS load balancing, behind two Cisco ASA mode A/S with 2 DMZ's? 2 Fw ASA 5520 -> L2 Sw->2 CSS->2 L2 Sw->web servers and application servers DMZ-1 are web serversDMZ-2 are application servers Regards, Diego.

Hi there,i have configured within an ace context two vlans with a bridge group and one bvi interface.Here is the Config :access-list ALLOW_ALL_TRAFFIC line 7 extended permit icmp any any access-list ALLOW_ALL_TRAFFIC line 8 extended permit ip any any...

I was wondering if anyone knows if it is possible to implement stickyness across multiple VIPs. In other words, if a client hits a specific VIP on a specific TCP port, then hits a different VIP on a different tcp port, can stickyness be configured t...

Hi !We would like to configure server-initiated connections.Unfortunately the request isn`t ?natted? ? I made a trace behind the CSM ?And there the request has a SRC-IP of ?172.23.161.21? ? but it should be the "nated" IP - and not the internal one.T...

Hi ,I have some clarifications on CSS configurations. Can some one throw some lime might on these things.1. How many telnet sessions is permitted in a CSS2. Can telnet sessions can be restricted to single Ip address3. Can the Hostname of the CSS be c...

Is it possible to do https keepalives on a CSS11506 without the SSL module? In a nutshell, is it possible to initiate an SSL session from the CSS for a keepalive that requests a URL and succeeds only when the response includes a given text (essentia...