Configuring Traffic Log Settings Using The Srem - Nortel Secure Network Access Switch 4050 User Manual

178 Chapter 4 Configuring the domain
Table 25
Field
CA Chain List
CA Certificate List
3

Configuring traffic log settings using the SREM

You can configure a syslog server to receive User Datagram Protocol (UDP)
syslog messages for all HTTP requests handled by the portal server.
Nortel does not recommend routinely enabling this functionality for the following
reasons:
•
•
•
Enable traffic logging with syslog messages in environments where laws or
regulations require traffic logging to be performed on the SSL terminating device
itself. You can also enable it temporarily for debugging purposes.
Because of the amount of traffic generated, Nortel recommends that you set up
syslog on the backend server if possible.
320818-A
Server SSL Settings fields (continued)
Click Apply on the toolbar to send the current changes to the Nortel
SNAS 4050. Click Commit on the toolbar to save the changes permanently.
Logging traffic with syslog messages generates a substantial amount of
network traffic.
Logging traffic places an additional CPU load on each Nortel SNAS 4050
device in the cluster.
In general, syslog servers are not intended for the traffic type of log message.
Therefore, the syslog server might not be able to cope with the quantity of
syslog messages generated within a cluster of Nortel SNAS 4050 devices.
Description
Specifies the CA certificate chain of the server certificate.
Select certificates from the list to create the chain. The
chain starts with the issuing CA certificate of the server
certificate and can range up to the root CA certificate.
Note: The SSL server can use chain certificates only if the
protocol version is set to ssl3 or ssl23.
Specifies which of the available CA certificates to use for
client authentication.
Not supported in Nortel Secure Network Access Switch
Software Release 1.0.