• SteelHead™ Deployment Guide - Protocols
•  Preface
  •  About This Guide
    • Audience
    • Types of SteelHeads
    • Document Conventions
  • Documentation and Release Notes
  • Contacting Riverbed
  • What Is New
•  CIFS Optimization
  •  Overview of CIFS Protocol
    • CIFS File Locking and Oplocks
    • Safe Reading and Writing
    • Security Signatures
    • Overview of SMB Versions 2, 2.1, 3, 3.02, and 3.1.1
    • More Information
  • RiOS CIFS Optimization Techniques
•  Microsoft Exchange Email Optimization
  •  MAPI Client and Server Communication
    • Autodiscovery and MAPI Connections
  •  RiOS MAPI Optimization
    • Encrypted MAPI Optimization
    • MAPI Admission Control for Microsoft Outlook
    • MAPI Optimization with SteelHeads in a Serial Cluster or a Parallel Deployment
    • MAPI Optimization with Exchange Clusters
    •  Outlook Anywhere Optimization
      • Support for Common Access Card
      • Verifying Connection Status
      • Troubleshooting Outlook Anywhere Optimized Traffic
    • Microsoft Exchange 2013 Optimization
  •  MAPI over HTTP
    • MAPI over HTTP Requirements
    • MAPI over HTTP Down Negotiation
  • MAPI Destination Port Handling
  • MAPI Multiple Context
•  Signed SMB and Encrypted MAPI Optimization
  • Overview of SteelHeads Optimizing with Secure Windows Traffic
  • Windows Security Concepts
  • Domain Relationships
  • Choosing an Authentication Mode for the Server-Side SteelHead
  • Overview of Configuring SMB Signing and Encrypted MAPI
  •  SMB3 Optimization with Windows 8, Windows 2012 Server, and Later Operating Systems
    • SMB 3.1.1 Optimization
  •  Joining a SteelHead to a Domain
    • One-Way Trust Configuration
    • Enabling Kerberos in a Restricted Trust Environment
  •  Kerberos
    •  Overview of Kerberos
      • Multiple Domain Environments and Referral Tickets
    • Optimization in a Native Kerberos Environment
    • Domain User with Replication Privileges
    • Configuring Traffic Optimization for HTTP (SharePoint), Encrypted MAPI, and Signed SMB/SMB2/SMB3
  •  Configuring the Server-Side SteelHead for Active Directory Integrated (Windows 2003/2008)
  • Best Practices for the SteelHead in a Secure Windows Deployment
  •  Domain Authentication Scaling
    • When to Use Domain Authentication Scaling
    • General Improvements in RiOS 8.6
    • Domain Controller Load Balancing
  •  Domain Health Check and Domain Authentication Automatic Configuration
    •  Domain Health Check
      • Using the SteelHead Management Console to Test Domain Health Check
      • Using the RiOS CLI Commands to Test Domain Health Check
    • Domain Authentication Automatic Configuration
  • Single Domain Example Configuration
•  HTTP Optimization
  •  HTTP and Browser Behavior
    • Multiple TCP Connections and Pipelining
    • HTTP Authentication
    • Connection Jumping
    • HTTP Proxy Servers
    • Configuring HTTP SSL Proxy Interception
  •  RiOS HTTP Optimization Techniques
    • Primary Content Optimization Methods
    • HTTP Vary Headers
    • Connection Pooling
  • HTTP Authentication Optimization
  • HTTP Automatic Configuration
  • HTTP Settings for Common Applications
  • HTTP Optimization for SharePoint
  •  HTTP Optimization Module and Internet-Bound Traffic
  • HTTP and IPv6
  • Overview of the Web Proxy Feature
  •  Tuning Microsoft IIS Server
    •  Determining the Current Authentication Scheme on IIS
      • Determining the Current Authentication Mode on IIS
    • Per-Connection or Per-Request NTLM Authentication
    • Per-Connection or Per-Request Kerberos Authentication
    • Changing the Authentication Scheme
    • Changing the Per-Connection/Per-Request NTLM Authentication Mode
    • Changing the Per-Connection/Per-Request Kerberos Authentication Mode
    • HTTP Authentication Settings
    • HTTP Optimization Module and Proxy Servers
    • Determining the Effectiveness of the HTTP Optimization Module
  • Info-Level Logging
  • Use Case
•  Citrix ICA Optimization
  •  Overview of Citrix ICA
    • Citrix Version Support
  • Citrix ICA Traffic Optimization with SteelHeads
  •  Citrix SecureICA Encryption
  • Citrix Drive-Mapping Optimizations
  •  Citrix Multi-Stream ICA Traffic Optimization with SteelHeads
    • Citrix Virtual Channels and Traffic Priorities
    • Single-Stream and Multi-Stream ICA
  • QoS Classification for Citrix Traffic
  • Automatic Negotiation of Multi-Stream ICA Traffic for QoS Enforcement
  • Reduction for Citrix Small Packet Real-Time Traffic
  • Citrix ICA Optimization over SSL
•  Secure SMTP Optimization
  • Overview of SMTP and TLS
  • Configuring Microsoft Exchange Servers for Secure SMTP
  • Configuring the SteelHead for START-TLS Support
•  FTP Optimization
  •  Overview of FTP
    • Active Mode
    • Passive Mode
  •  Configuring In-Path Rules
    • Optimizing FTP
    • Passing Through FTP
  •  QoS Classification for the FTP Data Channel
    • Active FTP Classification
    • Passive FTP Classification
  • FTP Optimization Considerations
  • SteelCentral Controller for SteelHead Mobile FTP Considerations
•  Other Protocol Optimization
  •  Oracle Forms Optimization
    • Determining the Deployment Mode
  •  NFS Optimization
    •  Implementing NFS Optimization
      • Basic Steps
    • Configuring IP Aliasing
  •  Lotus Notes Optimization
    •  Optimizing Encrypted Lotus Notes
      • Lotus Notes Authentication
      • Optimization Architecture
      • Configuring Optimized Encrypted Lotus Notes
      • Troubleshooting
•  Video Optimization
  • Overview of Video Optimization
  • HTTP Stream Splitting
  • Video On-Demand with HTTP Prepopulation
  • On-Demand Video Caching
•  CIFS and HTTP Prepopulation
  •  CIFS Prepopulation
    • Design Considerations
  •  HTTP Prepopulation
    • Microsoft Silverlight, Apple HLS, and Adobe Flash
•  SSL Deployments
  • The Riverbed SSL Solution
  •  Overview of SSL
    • How SteelHeads Terminate an Optimized SSL Connection
  •  Configuring SSL Optimization on SteelHeads
    •  SSL Optimization Required Components
      • Enhanced Cryptography License Key
      • Proxy Certificate and Private Key
      • Certificate Chain Discovery
      • Certificate Authority Certificates
      • Peer Certificates
    • Setting Up a Simple SSL Optimization Deployment
    • Generating the Proxy Certificate and Private Key Pair
    •  SteelHead Secure Peering Scenarios
      • Secure Peering Using the Self-Signed Peer White, Gray, and Black Lists
      • Secure Peering with CA-Signed Certificates
      • Managing SteelHead Secure Peering Trusts with an SCC
    • Deploying Secure Peering for All Optimized Traffic
  •  Advanced SSL Features
    •  Client Certificate Support
      • Verification
    • Proxy Server Support
    • Mid-Session SSL Support
    • Server Name Indication
  • SSL Optimization with SteelHead Mobile
  • Troubleshooting and Verification
  •  Interacting with SSL-Enabled Web Servers
    •  Obtaining the Server Certificate and Private Key
      • Apache Certificates and Private Keys
      • IIS Certificates and Private Keys
    •  Generating Self-Signed Certificates
      • Generating Self-Signed Certificates with Apache
      • Generating Self-Signed Certificates with IIS
•  Configuring SCEP and Managing CRLs
  •  Using SCEP to Configure On-Demand and Automatic Reenrollment
    • Configuring On-Demand Enrollment
    • Configuring Automatic Reenrollment
    • Viewing SCEP Settings and Alarms
  •  Managing Certificate Revocation Lists
    • Managing CRLs
    • Viewing CRL Alarm Status

SteelHead™ Deployment Guide - Protocols

Configuring SCEP and Managing CRLs