Monitoring SSL-connections on CSS11501

[uralsib]

Hi!

The question is: can I log/debug on CSS any detailed info concerning particular client SSL-connection (i.e. user-agent, client certificate info, etc). I know I can enable ACL logging but it is not enough for us. For example, we need to see what client has been connected (i.e. we want to check some fields in certificate). I know about http header insertion but we have non-http SSL-traffic so it doesn't suit us.

Thank you in advance.

Regards, Amir.

[Gilles Dufour · Accepted solution]

There is no logging feature on the CSS for SSL client information.

Gilles.

[uralsib]

Gilles, thank you and excuse me for the late response.

But may be cisco has a similat product with this capability (may be ACE appliance)?

Regards, Amir

[Gilles Dufour · Accepted solution]

Amir,

there is no such feature on any of our product.

ACE offers connection log messages but it is limited to ip addresses.

Gilles.