Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Does anyone know if these products will support Secure FTP. I need a product that will decrypt the SFTP on the front end then load balance the unsecure FTP to an FTP server farm on the backend.ThanksTom
Hi, How does one disable plaintext http access to the VIP of the 11501. In other words, is it possible to have the device listen _only_ on 443 and not on port 80 for incoming requests? We are do not want to provide plain http access to the VIP which ...
Hi all, Being a neophite to CSSs and content switching in general, I'm looking for the best practice to access backend servers. I have two frontend servers on a 11501 bridged over to my internal network. All my rules are set and appear to be working ...
I have a one-armed CSS balancing 9 web sites in production & am adding a redundant CSS & a pair of one armed SCA2. The servers currently see the clients addresses. Are there any sample CSS /SCA configs using the transparent local-listen? Is there a r...
Hi, Is it possible to dynamically throttleapplication specific traffic with the QOS and or ACL capabilities of the6500 CSM? More general question might be is if there exists devices that allow application traffic to be throttledup/down at near real-t...
In our network, the GSS replies to the url queries with an A-record. It returns IP addresses hosted by active/backup CSS boxes located at 2 different sites. GSS monitors the health of the sites/CSS using KAL-AP.The CSS are configured in a 'Routing' t...
Hello,I am having a problem with the CSS. When I "Show ip-fragment-stats", the "Collection Timeout" count keep increasing and clients failed. However, I cannot find any command to adjust the time for collection. I think the timeout in the CSS is too ...
Hi,In a global load balancing project, I need to report more accurate load information to the GSS as the CSS can report natively via KAL-AP (load based on response time). The new protocol SASP, developped by IBM and Cisco should allow to inform the C...
Okay all you CSS gurus, riddle me this one. I have a CSS11503 with SSL mod. This is a testing configuration very soon to become production sitting in a DMZ. We tried to get SNTP to sync to a known working NTP server inside the FW and couldn't. We fin...
I can see from the threads in the forum that it is a bit of a struggle to get servers behind the CSS to successfully hit time (NTP) servers out in the real world. I want the four servers behind the CSS to each hit an outside server independantly.I di...
We have layer 2 connectivity between to core sites and are implementing two new CSS11501's. Is it possable to implement these in a active/backup configuration and stateful?
Hi Giles,In the event a certificate needs to be renewed, is it possible to generate a new CSR using the same RSA key pairs?From the testing i've been doing, it appears that a new CSR can only be obtained when the RSA key pair is regenerated.thanks,Sh...
Hi,I'm new to implementing SSLM module and I need help on the following:- Importing and exporting of key and certificate (PKCS12 and PEM)- Duplicating keys and certificates on standby SSL Services Module using the key and certificate import and expor...
IS their a way to have logs on end user activity with a one arm design using source IP NAT.On the end systems all connections comes from this NAT address.
