I know that this topic has been breached many times, I just want some design validation.
The need is to load balance servers in a DMZ with an existing CSS that load balances internal servers. It is cost prohibitive to purchase a new set of 11501s dedicated to the DMZ.
The idea is that connections from the internet would be nat'd through the ASA to the VIP on the CSS. The CSS would proxy back through the ASA to the hosts in the DMZ.
Any issues? Not the best design I know.
Thanks,
Jason
