SSL/TLS Termination Device

[guan]

Hi,

Does anyone know if there is a TLS/SSL termination device available at Cisco? The TLS is used to tunnel traffic for RTSP control session and streaming.

Thanks

Guan

[kitanaka]

Hello Guan,

There are several Cisco products that provide SSL termination feature.

ACE20 module product page

http://www.cisco.com/en/US/products/ps6906/tsd_products_support_model_home.html

SSL termination configuration guide

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/vA2_3_0/configuration/ssl/guide/terminat.html

ACE4710 appliance product page

http://www.cisco.com/en/US/products/ps7027/tsd_products_support_series_home.html

SSL termination configuration guide

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/ssl/guide/terminat.html

CSS product page (need a SSL module installed)

http://www.cisco.com/en/US/products/hw/contnetw/ps792/tsd_products_support_series_home.html

SSL termination configuration guide

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/css11500series/v8.20/configuration/ssl/guide/terminat.html

Regards,

Kimihito.

[guan]

Hi Kimihito,

You right, for https yes, i know they support TLS/SSL termination, for SSL offloading.

The big question here is does this support arbitrary protocols running over SSL tunneling, in particular interest for running RTSP over TLS?

the scene is that some of our customer home wireless router blocks rtsp protocol( inspection not working) from STB connected behind the router. Is it possible to setup TLS/SSL tunnel from the STB directly to the ACE20, which can increase security and bypass the router inspections.

Kind Rgds,

Guan

[kitanaka]

Hi Guan,

Sorry for the delay, I had been off.

ACE does not support RTSP over SSL at this moment and I think it is not on the list.

If you have your Cisco representative, could you please consult with him or her about a possibility of an enhancement ?

Regards,

Kimihito.