Troubleshooting guide

1-28
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Configuring Application Acceleration
Enabling and Disabling the Global Optimization Features
Figure 1-13 ICA Acceleration Configuration Window
Step 3
In the WAN Secure Mode drop-down list, choose the mode, as follows:
• None—Disables WAN Secure mode for ICA.
• Always—Enables WAN Secure mode ICA. This is the default.
Note The state of WAN Secure mode in both Branch WAE and Data Center WAE must match for
connections to get optimized with the ICA accelerator.
Step 4 Click Submit.
The changes are saved to the device or device group.
To configure ICA acceleration from the CLI, use the accelerator ica global configuration command.
To verify the status of WAN Secure mode from the CLI, use the show accelerator wansecure EXEC
command.
Configuring SSL Acceleration
The SSL application accelerator optimizes traffic on Secure Sockets Layer (SSL) encrypted connections.
If SSL acceleration is not enabled, the WAAS software DRE optimizations are not very effective on SSL
encrypted traffic. The SSL application acceleration enables WAAS to decrypt and apply optimizations
while maintaining the security of the connection.
Note On a WAAS Express device, only SSL cipher list, SSL certificate authorities, and SSL peering service
configuration is supported.
Note The SSL accelerator does not optimize protocols that do not start their SSL/TLS handshake from the
very first byte. The only exception is HTTPS going through a proxy (where the HTTP accelerator detects
the start of SSL/TLS). In this case, both HTTP and SSL accelerators optimize the connection.
The SSL application accelerator supports SSL Version 3 (SSLv3) and Transport Layer Security
Version 1 (TLSv1) protocols. TLSv1.1 and TLSv1.2 protocols are not supported.
Table 1-2 provides an overview of the steps you must complete to set up and enable SSL acceleration.