Appendix B Deployment Examples
Use with the CSS
B-20
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-06
Figure B-5
Secure Content Accelerator One-Armed Transparent Proxy
Installation
This deployment has several constraints:
•
No SSL client can be attached to a directly connected subnet; all SSL clients
must pass through an upstream router.
•
ACLs must be written so that Secure Content Accelerator management and
other applications are passed through the CSS properly.
•
Static routes must be added to the CSS so that traffic that should not pass
through the Secure Content Accelerator devices is routed properly.
