Cisco Application :: CSS 11501 - Wildcard Certificate With Subject Alternative Names

Sep 6, 2012

I generated a wildcard certificate for my company type *. [URL] in a CSS 11501. For the site [URL] worked fine, for the site [URL] didn't worked. I read on the web that should generate a wildcard certificate with subject alternative names. Is it possible in CSS? how can I do it?

View 5 Replies


ADVERTISEMENT

Cisco :: WS-SVC-SSL-1-K9 / ACE And SSLM Support Subject Alternative Name (SAN)

Jun 5, 2011

I want to  migrate Exchange server to Exchange 2010, I would like to know if ACE and SSLM support Subject Alternative Name (SAN).
  
1.   Can the current CSM (WS-SVC-SSL-1-K9) support SSL certificates that have Subject Alternative Names? I.e. a certificate that has both of these names in it.
 
a.       exchange.ww.edu
b.       legexchange.ww.edu.
 
2)      Can the new ACE( ACE20-MOD-K9) support SSL certificates that have Subject Alternative Names? I.e. a certificate that has both of these names in it:
 
a.       exchange.ww.edu
b.       legexchange.ww.edu

View 1 Replies View Related

Cisco :: 5508 - Wildcard Certificate Accepted By Wireless Lan Controller?

Feb 13, 2011

I have 3 WLC 5508 and a NAC guest server. We want to download a wildcard certificate after a few seconds at the download of this certificate I got the failure message download failed.
 
Accept the WLC wildcard certificates or must I generate a SAN (Subject Alternative Name) Certificate.

View 5 Replies View Related

Cisco Application :: Clear Stickies On CSS 11501 By VIP?

Jan 30, 2012

it's possible to clear stickies per VIP?  The firmware is 08.20

View 2 Replies View Related

Cisco Application :: Slow Download Via SSL In CSS 11501

Nov 27, 2011

I have 2 CSS 11501 providing load-balancing rules and SSL termination. When CSS is used for downloading through the rules of SSL, the rates I get are quite lower than those obtained when the download is done either directly on the machine or by using the rules of HTTP. Is it normal? Is there anything that canspeed up this process?

View 2 Replies View Related

Cisco Application :: How To Enable Snmp On Css 11501

Feb 13, 2012

i need to enable snmp on Cisco CSS 11501. 

View 1 Replies View Related

Cisco Application :: SSO (Single Sign-on) Through CSS 11501?

Nov 22, 2011

I am load balancing Terminal Server Windows 2008 sessions with an CSS 11501. The code version is sg0750004 (07.50.0.04). I am trying to establish a Terminal Server session with Single Sign-On (SSO), but without success. Normal login with Username and Password on the TS are functionning, but never SSO session. The environment is: 10 Windows 2008 Terminal Servers (NTS1, NTS2,NTS3...). In DNS I have a host A named TS with IP for balanced CSS. The problem I see is that the client PC opens a TS session to "TS". then dont work SSO, but if client PC open a TS session to NTS1, NTS2...is working fine the SSO I am not sur if we can do something on the CSS.

View 3 Replies View Related

Cisco Application :: How To Test CSS 11501 Failover

Aug 7, 2012

I have 2 CSS, 1 as primary and 2nd as standby. I configured the standby CSS as my old standby CSS box and now wanted to test the faliover. I am not aware of how to test it in. ny how i have cr for that.

View 1 Replies View Related

Cisco Application :: CSS 11501 Not Dropping Flows If Service Is Down

Oct 14, 2012

some misconfiguration (?) may be the reason for an undesired behaviour we are experiencing with our Cisco CSS 11501s. Balancing mechanisms work fine, however if a service transitions to the "down" state, the corresponding flows remain "alive" leading to a temporary outage of our service. Subsequent client requests are still being sent to the "down" frontend which is unresponsive.

View 4 Replies View Related

Cisco Application :: CSS 11503 - Layer 5 Content Rule Match Wildcard And Suffix

Oct 2, 2011

Is it possible on the CSS11503 to create a layer 5 content rule that matches a url "/*/_edit".

View 3 Replies View Related

Cisco Application :: CSS 11501 Load Balancing With X-forwarded For Address

Sep 15, 2011

We have a pair of CSS 11501,Currently it is using source ip for load balancing and 5 servers as backend , however we have users loggin in using http and based on its source IP (ISP PROXY) , it is forwarded to SERVER A.However, we have a SSL page and when the client switches over to SSL , it is forwarded to SERVER B/C/D/E  based on its source IP ( REAL CLIENT IP) .This will cause the user to be terminated as the 5 servers are independent and not running in a cluster.
 
Is there any way that we can use the X-Forwarded-For address to load balance so that when users loging , they are sent to SERVER A (Based on X-Forwarded-For Header IP which translate to REAL CLIENT IP).This way we are able to also send it back to the same server when it uses SSL.I believe that we should be able to load balance using X-Forwarded-For IP or to rewrite the X-Forwarded-For IP into client source IP.

View 3 Replies View Related

Cisco Application :: Active CSS 11501 Telnet And Console Not Working?

Mar 31, 2013

implementation of the cisco CSS 11501 boxes available as spare on our site into production for an application evry thing worked as expected. i was able to telnet the active/master box and was able to console both master and backup box from the console port.however a week post the activity im faced with this weird problem where im not able to take console or the telnet access of my primary/active box.The boxes are working in BOX-to-BOX redundancy and now im not able to telnet or console my active/master box. The telnet and console window prompts me for username and password and after entering the credentials nothing happens. no prompt or no error message is displayed.

The telnet primary authentication is via tacacs and secondary is via local. however for console im not using any method for primay authentication and local for secondary authentication. however i can successfully console my backup box. below are my obsrvations 1. the left and right status LED on the active CSS box is OFF.- it means my CSS 11501 failed and has no power. 2. upon firing the rcmd command with show line command on backup box i see that the telnet sessions and console session is established with the master box3. the redundancy state of the active box says it is master and has not changed state since my last activity, no application issue reported, all the services are active on the active box and also i can ping the active box ip address from my backup box over which box to box redundancy is established. This confirms the active box is functioning well 4. i initially thought the telnet sessions are not getting cleared, however the show line cmd with the rcmd cmd on the backup box confirms this is not happening. now im stuck as the active box cannot be accessed at all via console or telnet. i was thinking of below steps to be carried out.1. to failover the boxes and make the backup as master2. then try to take the faulty box off the network and troubleshoot (are there any other commands that i should use to troubleshoot)3. if nothing works try rebooting the box and check
 
NOTE: the software running is version 7.20.30.3 with standard feature set. we are not using cvdm or the CSS GUI. we could access the css initially on CSS gui and that is also not working now.

View 1 Replies View Related

Cisco Application :: 11501 Ftp Server Setup Using Non-standard Port?

Dec 13, 2011

we would like to setup FTP server over CSS where our member sever use non-std-port to open both control/data channel (i.e. 6370 as ctrl and 6369 as data this case.) but seems we only get Passive mode FTP mode work only but not for Active mode FTP case for data channel establishement for server back to client..
 
#  sh ver
Version:               sg0820501 (08.20.5.01)
Flash (Locked):        08.10.1.06
Flash (Operational):   08.20.5.01
Type:                  PRIMARY
Licensed Cmd Set(s):   Standard Feature Set

[code]....

View 3 Replies View Related

Cisco Application Networking :: CSS 11501 Reboots When Making Change To Global Keepalive?

May 17, 2010

I've got an issue with a CSS 11501 where, if *any* change is made to a global keepalive (active), the device reboots. The code is 08.10.2.05. I'm unable to search the TAC archive or I would've gone there first.

View 2 Replies View Related

Cisco Application :: Content Switch 11501 / 11503 Abnormal Interface Link Down?

Mar 27, 2013

I have 2 pair of 11501 switches and 1 pair of 11503 switches on 3 sites(LA, China, Taiwan).Each site has a pair of 1105x switch running as redundancy between them and is a standalone which will not interact with others.Recently a series of interfaces(ports) down happened to every active 1150x switches without any reason and log.Especially today, it happened to active switches at 5:39 AM meanwhile on 3 sites.

View 3 Replies View Related

Cisco Application :: Sample Command Output Of Show Chassis Inventory For CSS 11501 / 11503 / 11506?

Oct 30, 2011

I am trying to get a sample command output of "show chassis inventory" for:

CSS 11501
CSS 11503
CSS 11506

View 1 Replies View Related

Cisco Application :: Transferring Existing SSL Certificate From 11503 To ACE?

Jun 2, 2012

We now have a new requirement . We are replacing existing pair of CSS with ACE 4710 appliances. The problem here is that I can see from the configuration that  some SSL certificate installed in CSS .Is it possible to transfer the existing SSL certificate from the 11503 to the ACE? Or, do we need to generate a new key pair and CSR on the ACE?  Is there any document available to know the steps for the same.

View 2 Replies View Related

Cisco Application :: Certificate Import From Exchange To ACE 4700

Dec 8, 2011

I am tasked to Configure an ACE 4700 for SLB. This has been done and working. Am also further tasked to create a secure communication between tha ACE and Exchange server. I need the breakdown of steps required to Import certificate from the exchange server, and how to verify that things are working.

View 3 Replies View Related

Cisco Application :: How To Install SSL Certificate On Second ACE02 In HA Pair

Aug 20, 2012

how to install a certificate (.p7b and .crf) on my second ACE in a HA pair.
 
On ACE01 i generated a CSR and gave the details to our SSL provider, they provided the certificates and i imported them. All good there.
 
How can i install the same SSL on ACE02 if i haven't generated a CSR on my backup devicde, or do i generate a CSR and import the same certificate?
 
Since bringing the ACE's into HA all contexts have sync'd and the backup ACE is in 'hot standby' state. But one context fails the sync and i think this is because the SSL certificate is not installed correctly on the second ACE02.

View 5 Replies View Related

Cisco Application :: GSS 4492 SSL Certificate And Private Key Replacement

Aug 29, 2011

During our recent pen test, it was discovered that the GSS appears to be running what could be considered a "weak" cipher:
 
"SSL Weak Cipher Suite Supported - The web servers tested supports the use of weak SSL ciphers."
 
I've logon to the GSS but was not able to find the directory where the apache confs were stored (/cisco/merlot/apache)
 
My question is, can the cert and private key on the GSS be replaced by a new cert and key with stronger encryption?

View 1 Replies View Related

Cisco Application :: ACE-4710 Forwarding Of Client Certificate Information

Nov 25, 2009

I have an environment with SSL termination and client authentication with a client certificate. Now, the backend server application needs to be informed of the client DN information present in the presented client certificate. Is it possible to tell the ACE to send specific client certificate fields to the backen server via insertion of an HTTP header or, to forward the entire client certificate in any way to the backend server ?

View 2 Replies View Related

Cisco Application :: Importing SSL Certificate From MS Exchange Server To ACE 4710?

Nov 16, 2011

My customer has SSL certificate already installed on microsoft exchnage 2010 servers and now wanted to import that certificate to cisco ACE4710.
 
How to trace the exact procedure to import the SSL Cert to ACE from microsoft exchange server and how about the KEY, from where I should get the KEY to cross verify for SSL Cert?

View 2 Replies View Related

Cisco Application :: ACE 4710 (1) SSL Certificate Import ( 2 ) With Load Balancing?

Dec 3, 2012

I am performing a deployment, in which i require clarity on the following. Our setup has DC and DR , in each site we have two devices for HA.We have received One SSL Certificate from Public CA, Kindly clarify the following doubts i have on thisIn Doc, i found Cert.pem and key.pem is required to generate the pair ,do i receive both Cert.pem and key.pem from the CA or we can generate key.pem from Cert.pem ?SSL Offloading is planned for the X application, and it is running in both DC and DR ( Considering each having their own Public IP address ) , do i need to have two different public certificates or a single certificate can i use in both DC and DR.Load Balancing IssueIs it possible to configure in ACE to access the service in Business hours and in non Business hours to display HTML page showing this is available only during these hours ?In DC we have Three Web Servers ( only in One physical server the service is active, other two are backup ), and these three servers are under cluster and shares one cluster IP , In ACE we have created the VIP and Pointed to only Cluster IP ( like pass through only ). The issue we face is if active web server is down, even then ACE is sending the traffic to that webserver only instead of sending it to the new Active web server. let us know if any solution is there to overcome this issue ?as per my understanding instead of giving cluster IP as real server IP we can issue the three physical servers. now i dont require load balancing between three servers instead require failover king like if first server is down then it should forward to Second server ?

View 4 Replies View Related

Cisco VPN :: 1811 / Dual-Hub DMVPN With PKI And Subject-name Don't Work

Oct 15, 2012

I have a Dual-Hub DMVPN with PKI dep[oyment infrastructure and with 2 Hub on Cisco 1811 and Spokes on Cisco 1841. When I enter the 'subject-name' parameter (pki trustpoint configuration mode) on a Spoke routers, one of two Tunnel is up, but the second Tunnel is not up. ISAKMP-negotiation select the rsa-sig-mode is correctly. If I select pre-shared-mode or if i remove 'subject-name' from Spokes, DMVPN work is fine!
 
Configuration example:
 
1. HUB:
--------------------------------------------------------------------------------
Cisco IOS Software, C181X Software (C181X-ADVENTERPRISEK9-M), Version 12.4(15)T15, RELEASE SOFTWARE (fc3)
Technical Support: [URL]
Copyright (c) 1986-2011 by Cisco Systems, Inc.
Compiled Tue 08-Mar-11 06:09 by prod_rel_team

[code].....

View 14 Replies View Related

Cisco VPN :: 1811 / 1841 - Dual-Hub DMVPN With PKI And Subject-name Don't Work

Sep 25, 2011

I have a Dual-Hub DMVPN with PKI dep[oyment infrastructure and with 2 Hub on Cisco 1811 and Spokes on Cisco 1841. When I enter the 'subject-name' parameter (pki trustpoint configuration mode) on a Spoke routers, one of two Tunnel is up, but the second Tunnel is not up. ISAKMP-negotiation select the rsa-sig-mode is correctly. If I select pre-shared-mode or if i remove 'subject-name' from Spokes, DMVPN work is fine!
 
In what there can be a problem?
 
Configuration example:
 
1. HUB:
crypto pki trustpoint TRUSTPOINT-CA1
enrollment mode ra
enrollment url http://.../certsrv/mscep/mscep.dll
password ...
[ code]....

View 17 Replies View Related

Cisco AAA/Identity/Nac :: %ASA-3-717009 / Certificate Validation Failed / Certificate Date Is Out-of-range

Jan 30, 2012

There is ASA with remote access VPN and users are authenticated using third party signed certificates (CA is not local in ASA).When user certificate expires i can see it in syslog messages. For example:
 
     %ASA-3-717009: Certificate validation failed. Certificate date is out-of-range, serial number: (...)
 
I would like to know if there is an opportunity to view user's certificate expiry date beforehand, say, 3 days before?

View 3 Replies View Related

D-Link DCS-942L :: Change Subject Line Of Email Alerts That Are Sent?

Feb 8, 2012

Is there any way to change the subject line of the email alerts that are sent?  Right now mine are coming with the MAC address, date and time.  I would like to remove the MAC address and date and time so that I can sort them into one folder when I sort my email by subject.

View 7 Replies View Related

Cisco AAA/Identity/Nac :: ISE 1.1.1 Don't Have Certificate Authority Certificate Anymore?

Oct 19, 2012

i am working on ISE 1.1.1, surprisingly i couldn't found certificate authority certifiate at certificate operation anymore.
 
would it be the change on GUI? So now where i can import the CA certificate to ISE?

View 5 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.2 Wildcard / Regexp

Sep 1, 2011

Is it possible to use wildcard (*) or regexp in ACS 5.2? For example, I would like to create an End Station Filter that would match when the DNIS is *something

View 1 Replies View Related

Cisco Firewall :: Alternative To PBR On ASA5510

Mar 30, 2011

We have an ASA5510 with a backup ISP connection protecting our corporate network.  I also have a mail server and I would like to route SMTP traffic over the backup network.  I realize that the ASA5510 does not support PBR, but I also know that I can use static NAT rules as a workaround to direct specific types of traffic over a particular interface (e.g. "static (outside,inside) tcp 0.0.0.0 www 0.0.0.0 www netmask 0.0.0.0" and "static (backup,inside) tcp 0.0.0.0 smtp 0.0.0.0 smtp netmask 0.0.0.0"). is it possible to use something similar to force a particular host to use a specific interface? I have tried to make this work on my own without success.  Is it even possible?

View 5 Replies View Related

Cisco VPN :: ASA 5510 / Wildcard Cert - Only Have CER File

Dec 5, 2011

how to install a wildcard certificate with only the .cer file.  I've found quite a few things here in the forums, but everyone seems to also have a pkcs12 file, which I do not. 
 
This is an ASA 5510 on ver 8.4. 

View 6 Replies View Related

Cisco AAA/Identity/Nac :: ACS 5.4 Support Wildcard SSL Certificates?

Apr 29, 2013

Getting ready to order a SSL Certificate for my newly installed ACS 5.4 and before I did that i want to verify if ACS 5.4 supports Wildcard SSL's.

View 5 Replies View Related

Cisco Switching/Routing :: Getting Alternative To 891 Router?

May 3, 2013

I need 891 SEC router. I think this comes with advanced IP services.What I have is 1921, with IP Base.Can I upgrade 1921, so it will become alternative to 891 SEC ?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved