How does the CSS handle TCP options

[Christopher Isett]

Can anyone describe how the CSS handles the MSS and SACK tcp options. I am particularly interested in the case when the CSS has to proxy the initial TCP connection (Layer 7 rule). Is the MSS and SACK preserved once a server is selected? I know I can take sniffer traces to determine the behavior but I would like to find some documentation to back that up.

[ebreniz]

This link might shed some light on your problem...

http://www.cisco.com/en/US/docs/security/security_management/cisco_security_manager/security_manager/3.2.2/user/guide/pobjpage.html#wp963455