Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
A client is using CSS11500 with SSL modules to do network based HTTPS.This presents some problems on the Web Servers as the applications have no idea they are running over an HTTPS connection to the user, as the only traffic they see is HTTP.Unfortun...
Many of our customers are recieving sporadic Internet Explorer errors when we switched on SSL on our CSS11506s on Monday.The error manifests itself by :As soon as the user clicks a link in the browser (e.g. an on-page button) their browser immediatel...
I've searched the forum but can't find a specific answer, so I'll ask outright.Can a CSS advertise two different Virtual IP addresses? We need this as we have two physical locations for our website, but if one site dies all traffic will be directed t...
I have been reliably told a Cisco Secure IDS can actually monitor two switches at once by direct physical connection (Note we are not and will not be using IDS modules in the switches, but physically seperate Cisco Secure system).Unfortunately none o...
Glad to have someone who knows CSS SSL to discuss this one, so thanks for your opinions and thoughts - they are very welcome.Agree entirely other user accounts are difficult to compromise, but the nature of the system means compromising just one acco...
I'm well aware of the risks around relying on a browser to honour the rules - these cookies contain fully encrypted data, however this has no relation to the problem of a man in the middle attack.It is much harder to do a man-in-the-middle attack usi...
We have fixed our problem at last!We got hold of the Cisco bug reports and they agreed with our Apache/Internet Explorer 5.5SP1 and above reports - it's due to an IE bug with SSL3.0 causing closed connections to be re-used by the browser.Effectively,...
Hi Giles, problem appears to be IE related and we are currently investigating Apache directives for IE around keep-alives.Some times it works, some times it does not. Mainly seems to happen on POST operations, but again is inconsistent. When the prob...
We are about to depoly a pair of CSS11500s. I was under the impression we can create a web status page on our web service (created by a monitoring cgi program), and get the CSS to make a hash of the returned contents of the page.If that page changes ...