User manual

The WebMux™ Model 480S, 580SG, and 680PG User Guide – Version 7.0.x
after the WebMux™ terminates the SSL traffic, only clear traffic will go to servers.
When the servers return traffic back, the WebMux™ will re-encrypt the data and
send encrypted back to client. If you are using out-of-path mode, please make
sure your servers’ gateway points to the WebMux™ server LAN gateway IP
address; so that the WebMux™ has the chance to re-encrypt the data before
replying back to clients.
One can also block not encrypted incoming traffic, so that only encrypted traffic
can reach to your server. This might be useful, when you only want encrypted
traffic reaching to your servers.
If you like to track on your server if the incoming traffic was HTTPS or HTTP, you
may turn on “tag SSL terminated HTTP traffic”. By change that to "Yes",
decrypted traffic will have the added MIME header "X-WebMux-SSL-termination:
true”. You can write script on your server to identify if the original traffic was
HTTPS or HTTP, and then properly redirect the traffic to the HTTPS.
Copyright© 1997-2006 CAI Networks, Inc.
47