Figure B-5 Secure Content Accelerator One-Armed Transparent Proxy Installation - Cisco CSS11501S-C-K9 Configuration Manual

Use with the CSS
Figure B-5
This deployment has several constraints:
•
•
•
Cisco 11000 Series Secure Content Accelerator Configuration Guide
B-20
Secure Content Accelerator One-Armed Transparent Proxy
Installation
No SSL client can be attached to a directly connected subnet; all SSL clients
must pass through an upstream router.
ACLs must be written so that Secure Content Accelerator management and
other applications are passed through the CSS properly.
Static routes must be added to the CSS so that traffic that should not pass
through the Secure Content Accelerator devices is routed properly.
Appendix B Deployment Examples
78-13124-06