Application Networking

Am trying to set up a single CSM with 2 load balanced ISA firewalls. Have seen the CCO information on how to do this, but can't get it to work correctly.My setup is as follows:Outside Server (Vlan 10)IP 10.0.0.100------|IP 10.0.0.1Router (MSFC)IP 19...

Hi,Have been trying to configure Direct Server Return on CSM but without much success.Attached is the config, Hopefully somebody can enlighten me.In addition, on my server end (MS Win 2003), I have configure loopback adapter with the same address wit...

i have a big problem just appeared yesterday i am running content engine inproxy transperent mode ( CE running version CE 5.3.1 (b5) ) i notice that yesterdayinternet traffic on router reach its max bandwidth when i check router for wccp status i fou...

Gilles,is it possible to use the same server tcp port number in 2x ssl-proxy services that share the same vip address?e.g.vserver TEST_443virtual 1.1.1.1 tcp 443serverfarm SSL_MODULE persistent rebalanceinservicessl-proxy service TEST_443virtual ipad...

Hi, This Cisco whitepaper alludes to"Active Cookie Insert" or "Cookie Matching" which are ideal for our application.http://www.cisco.com/en/US/products/hw/contnetw/ps789/products_white_paper09186a0080108974.shtml However BEA servers also perform URLR...

Looking for help with a sticky setting on a CSS Content Switch. I have 3 (IIS 6.0) web servers which connect to a SQL2K application that clients connect to via the CSS using SSL. The CSS has a ssl module which decrypts the traffic and sends http to ...

Does anyone know if these products will support Secure FTP. I need a product that will decrypt the SFTP on the front end then load balance the unsecure FTP to an FTP server farm on the backend.ThanksTom

Hi, How does one disable plaintext http access to the VIP of the 11501. In other words, is it possible to have the device listen _only_ on 443 and not on port 80 for incoming requests? We are do not want to provide plain http access to the VIP w...

Hi all, Being a neophite to CSSs and content switching in general, I'm looking for the best practice to access backend servers. I have two frontend servers on a 11501 bridged over to my internal network. All my rules are set and appear to be work...

I have a one-armed CSS balancing 9 web sites in production & am adding a redundant CSS & a pair of one armed SCA2. The servers currently see the clients addresses. Are there any sample CSS /SCA configs using the transparent local-listen? Is there...

Hello Gilles,I have setup cookie stickiness using the following config:sticky 1 cookie JSESSIONID timeout 100serverfarm xxxxxreal 192.168.1.1health probe HTTP01 inservicereal 192.168.1.2health probe HTTP02 inservicepolicy pol_IOW_stickserverfarm xxx...

Hi, Is it possible to dynamically throttleapplication specific traffic with the QOS and or ACL capabilities of the6500 CSM? More general question might be is if there exists devices that allow application traffic to be throttledup/down at near real-t...

In our network, the GSS replies to the url queries with an A-record. It returns IP addresses hosted by active/backup CSS boxes located at 2 different sites. GSS monitors the health of the sites/CSS using KAL-AP.The CSS are configured in a 'Routing' t...

Hello,I am having a problem with the CSS. When I "Show ip-fragment-stats", the "Collection Timeout" count keep increasing and clients failed. However, I cannot find any command to adjust the time for collection. I think the timeout in the CSS is t...

Hi,In a global load balancing project, I need to report more accurate load information to the GSS as the CSS can report natively via KAL-AP (load based on response time). The new protocol SASP, developped by IBM and Cisco should allow to inform the C...