SSL both in and out

[mirrell]

A customer want to terminate SSL on the CSS and have encryption between CSS and servers as well. I understand that this not smart but they have som reasons about certificats and possibility to reach the servers via SSL even beside the loadbalancing.

Have anyone tried this??

[pknoops]

Backend SSL is available on the 11500 series CSS in Webns 7.20.

Information and config stuff can be found at this location in chapter 10

http://www.cisco.com/univercd/cc/td/doc/product/webscale/css/css_720/advcggd/index.htm

Regards

Pete Knoops

Cisco Systems

[tdo_001]

I'm trying this in one arm mode with NAT and sofar still have not got it working. It is still with TAC right now...

One thing about Backend SSL that you may one to take a look at is the possibity of service disruption.

(See my post on Backend SSL - Service Disruption)

Thanks,

td