Connection mirroring copies the connection table entry and its state to the peer unit. With connection mirroring, the client would be able to resume an existing connection after a failover.
SSL session cache mirroring would copy the shared SSL key, session ID, cipher spec, and version. With SSL cache mirroring, the client would be able to resume an existing SSL session after a failover.
I don't think there is an option to strip bad attachments but allow the request. You could potentially disable blocking on the ICAP violation and insert a header using an iRule that indicates the attachment is bad.
You could also submit a request for enhancement to allow for removing a bad attachment.
Aaron
Nimbostratus
