Here are a few things you want to make sure you have configured for the CSS/SCA config.
- Make sure the SCA's are on separate VLAN from the server farm
- The default Gateway for the SCA's should be the circuit VLAN IP of the CSS
- The SCA should be configured in non
-transparent mode (under the server on the SCA specify - To see what ports the SCA is listening on type on the SCA
- Make sure the server you created on the SCA is <-activated-> if not type
- Do a show flows 0.0.0.0 on the CSS and a netstat on the SCA to see the traffic from CSS > SCA