Okay all you CSS gurus, riddle me this one. I have a CSS11503 with SSL mod. This is a testing configuration very soon to become production sitting in a DMZ. We tried to get SNTP to sync to a known working NTP server inside the FW and couldn't. We...
I can see from the threads in the forum that it is a bit of a struggle to get servers behind the CSS to successfully hit time (NTP) servers out in the real world. I want the four servers behind the CSS to each hit an outside server independantly.I d...
We have layer 2 connectivity between to core sites and are implementing two new CSS11501's. Is it possable to implement these in a active/backup configuration and stateful?
Hi Giles,In the event a certificate needs to be renewed, is it possible to generate a new CSR using the same RSA key pairs?From the testing i've been doing, it appears that a new CSR can only be obtained when the RSA key pair is regenerated.thanks,Sh...
Hi,I'm new to implementing SSLM module and I need help on the following:- Importing and exporting of key and certificate (PKCS12 and PEM)- Duplicating keys and certificates on standby SSL Services Module using the key and certificate import and expor...
IS their a way to have logs on end user activity with a one arm design using source IP NAT.On the end systems all connections comes from this NAT address.
I am doing HTTP loadbalancing with 2 servers and 2 CSSs. When we loose one http server the CSS stops accecpting new http connections for 21 seconds. Existing connections move over to the other sever just find and continue the session without a proble...
Hi, I have a problem with the NAT group intercepting connections to a PIX on the local VLAN. VLAN1 on the LB is the outside internet connection, VLAN2 is internal, at 10.0.10.0/24. The PIX IP is 10.0.10.254. If a webserver at 10.0.10.5 tries to co...
It is my understanding that the redirect-string service command supports up to 256 characters in 7.4 - this helps. However under version 7.10 I need to put in a url string that has a "?" - The command reference indicates that I can put the string in...
Hi all,Is it a must to have two IDENTICAL CSS11500 to configure redundancy? How about if I have 11506&11503, can I configure redundancy?Thanks and Regards,mak
I am a new with content switching and I just like to find out if it is possible to send the URL request to a symantec anti-virus server to scan for possible virus?If yes, which feature of CSS will do that? Would appreciate if you can send a URL that...
Hi,Question 1.I understand that you need to use cross cable to connect LD417 to Cisco switch 2900. What would be the result if you use straight cable ? Question 2.What would happen with the following scenario in LD417 ? LD417 port 3 is connected to s...
Guys,I'm trying to get the following to work:Client on internet (no explicit proxy config) is connecting to a webserver. The VIP resides on the CSS which has a reverse proxy config pointing to the CE590.--------|Client|-------- | |-------- ...
Hi,I have a problem with the sticky based cookie. What I did was to take the trace of the packet and to do the sticky based on:Set-Cookie: mobsess=9D7FEAF2710FA9119F4113836D3C4D07;domain=tim.it;path=/inresponse from the http server. In the client pac...
Hello,When I was reading the general docs and configuration docs of the CSS version 7.5 the 'Network cache' is being mentioned.Does Cisco have these kind of 'Network cache' devices?I know they had cache engines but it looks like they have disappeared...
