do you have only 1 vlan ?
If so, the problem is the return traffic from server to client.
This traffic must go through the CSS.
So, the server must use the CSS as default gateway or you need source nating or policy routing.
Also verify traffic is hitting your content rule with the command 'show summary'
Regards,
Gilles