You just need to make sure that the firewall allos keepalive traffic sent by the CSS and client traffic forwarded by the CSS.
Gilles.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: