ACE script and crypto file replication

[nlgbr0]

We have a redundant ACE setup running with an active and standby ACE sychronized using FT replication. This mechanism is not replicating the script files and crypto files stored on the active ACE. Is there an easy way to replicate those files to the standby ACE? I mean without using a FTP- or TFTP-server.

[Roble Mumin]

AFAIK there is know way to replicate the crypto files. I don't use scripts so know idea about those but i guess you have to also add them manually.

In case of certs or keys i always copy them prior to referencing the cert and key in the ssl-proxy rule. Kind of annoying but maybe they will add file/script replication in a later release.

Roble

[nlgbr0]

Do you copy them across using a tftp/ftp server or is it possible to copy them directly from one ACE to the other?

[Roble Mumin]

I use tftp to copy the certs and just "crypto import" them.