How to determine is CSS supports SSL

osiristrading123 · ‎02-09-2009

As per title, we have some CSS11501s in production, but I don't know if they support SSL or not. They accept SSL commands - does this mean that it's supported?

lalvenka · ‎02-09-2009

Hi,

You can issue the command "show chassis" and see if there is a SSL module in that CSS. WebNS allows users to configure SSL Proxy Lists and services of type "ssl-accel" on non-SSL-capable CSS, i.e. CSS without SSL module(s).

Although a complete SSL configuration will not be possible (the CSS will not

accept any "slot" command under the SSL service), this may lead to confusing

configurations.

If you see SSL module listed in the show chassis, then any SSL commands are indeed supported unless you have some issues with the SSL module.

Hope that helps

Thanks,

Lalitha

osiristrading123 · ‎02-09-2009

Thanks for the information. It appears the CSSs are not SSL capable.

Next question - is it still worthwhile buying new CSS11501s? Or should we rather go for Cisco ACE 4710s?

Syed Iftekhar Ahmed · ‎02-09-2009

Go for ACE appliance, with ACE you will get the following valuable features

1. virtualization Support

2. Http compression

3. Http Optimization

4. Http Header Insertion

5. Http Dynamic Cookie Learning

6. Built in SSL offloader (Unlike CSS, No need to buy additional SSL card)

7. Peace of mind (As ACE will not go EOL soon ):)

Syed Iftekhar Ahmed