Hi ALL !c

I connect Cisco CSS to the scheme (2 MS Windows 2003 Server -> Cisco CSS ->  Cisco ASA)

I monitor VIP service on Cisco CSS from inside and outside but CSS 11503 regularly fails:

Chart of HTTP/HTTPS VIP service:

PS: Red dots - this is service down (HTTPS timeout on monitor engine request)

Chart of HTTP NLB-cluster member (second Web site has this chart too):

CSS11503 config:

!*************************** GLOBAL ***************************
  no restrict web-mgmt
  ip no-implicit-service

  logging host 10.1.64.200 facility 7

  ssl associate rsakey epayment epayment.key
  ssl associate cert epayment epayment.pem
  ssl associate dhparam epayment dh1024.pem

  load threshold 100

  ip route 0.0.0.0 0.0.0.0 10.1.65.1 1
  ip route 10.1.64.0 255.255.224.0 10.1.65.130 1

!************************* INTERFACE *************************
interface  1/1
  bridge vlan 10

interface  1/2
  bridge vlan 20

interface  2/1
  bridge vlan 30
  bridge port-fast enable

interface  2/2
  bridge port-fast enable
  bridge vlan 30

interface  2/3
  bridge port-fast enable
  bridge vlan 30

interface  2/4
  bridge port-fast enable
  bridge vlan 30

interface  2/5
  bridge vlan 30
  bridge port-fast enable

interface  2/6
  bridge vlan 30
  bridge port-fast enable

interface  2/7
  bridge vlan 30
  bridge port-fast enable

interface  2/8
  bridge port-fast enable
  bridge vlan 30

!************************** CIRCUIT **************************
circuit VLAN10

  ip address 10.1.65.2 255.255.255.128

circuit VLAN20
        
  ip address 10.1.65.129 255.255.255.128

circuit VLAN30

  ip address 1.1.1.1 255.255.255.252

!*********************** SSL PROXY LIST ***********************
ssl-proxy-list epayment
  ssl-server 100
  ssl-server 100 rsacert epayment
  ssl-server 100 rsakey epayment
  ssl-server 100 cipher rsa-with-rc4-128-md5 10.1.65.3 80
  ssl-server 100 vip address 10.1.65.3
  active

!************************** SERVICE **************************
service APP-HTTPS-module-01
  type ssl-accel
  keepalive type none
  slot 3
  add ssl-proxy-list epayment
  active

service APP-srv1
  keepalive type http
  keepalive uri "/"
  keepalive frequency 20
  keepalive retryperiod 2
  ip address 10.1.66.35
  active

service APP-srv2
  keepalive type http
  keepalive uri "/"
  keepalive frequency 20
  keepalive retryperiod 2
  ip address 10.1.66.36
  active

!*************************** OWNER ***************************
owner CSS-NLB

  content App-servers
    add service APP-srv1
    add service APP-srv2
    protocol tcp
    port 80
    vip address 10.1.65.3
    active

  content HTTPS-Proxy
    vip address 10.1.65.3
    protocol tcp
    port 443
    add service APP-HTTPS-module-01
    active

Version

Version:               sg0810106 (08.10.1.06)
Flash (Locked):        08.10.1.06
Flash (Operational):   08.10.1.06
Type:                  PRIMARY
Licensed Cmd Set(s):   Standard Feature Set

Where is my mistake ? Or is it a bug ?