<!--
	Other Cisco rulesets:

		- Cisco.mobi.xml
		- Cisco_Learning_System.com.xml
		- Sourcefire.com.xml


	Nonfunctional subdomains:

		- bam-prd1
		- homecommunity
		- mkto ⁴
		- newsroom	(times out)

	⁴ Marketo


	Problematic subdomains:

		- ^ ¹
		- eir-stage ²
		- home ³
		- homesupport ⁴
		- video ⁵

	¹ Mismatched
	² Self-signed, CN: eir-stage
	³ Mismatched, CN: homesupport.cisco.com
	⁴ Expired 2014-03-07
	⁵ Works; self-signed, CN: constellation


	Partially covered subdomains:

		- (www.)	(^ → www)
		- csr *

	* Some pages redirect to http


	Fully covered subdomains:

		- beli
		- chinasmbmarketplace
		- ciscobusinesslink
		- cisco-images
		- communities
		- csc-stage
		- csc-test[1-4]
		- developer
		- eir
		- eir-stage		(→ eir)
		- home			(→ support.linksys.com)
		- homesupport		(→ support.linksys.com)
		- indiasmbmarketplace
		- learningnetwork
		- smbmarketplace
		- solucionespyme
		- solucoespme
		- sso
		- sso-prod[0-3]
		- supportforums
		- tools
		- tools[123]
		- www[12]


	Observed cookie domains:

		- . ¹
		- blogs ²
		- communities ²
		- csc-stage
		- csc-test[1-4]
		- .developer ³
		- learningnetwork ²
		- learningnetworkstore ²
		- sso ²
		- supportforums

	¹ Not secured by us <= accounting for possible use on unsecurable domains
	² Secured by us <= not secured by server
	³ Secured by server


	Mixed content:

		- css on video from www *

		- Images, on:

			- blogs from $self *
			- csr from $self *
			- eir from eir-stage *
			- from services-sj.mediusviewer.com *
			- video from images.gallery.brightcove.com *
			- Images on www3 from www.static-cisco.com *

		- Bugs, on:

			- blogs from apis.google.com *
			- blogs from platform.linkedin.com *
			- solucoespme from community.spiceworks.com *
			- video from admin.brightcove.com

	* Secured by us

-->
<ruleset name="Cisco (partial)" default_off="Needs review">

	<target host="cisco.com" />
	<target host="*.cisco.com" />
	<target host="ciscoconnectcloud.com" />
	<target host="www.ciscoconnectcloud.com" />

	<!--	!www doesn't exist.
					-->
	<target host="www.static-cisco.com" />

		<exclusion pattern="^http://csr\.cisco\.com/+pages/" />
		<exclusion pattern="^http://www\.cisco\.com/cgi-bin/login" />
		<!--
			Cisco redirection pages do not support HTTPS, so we exclude them.
			They redirect to HTTPS secured pages, though.
									-->
		<exclusion pattern="^http://(?:www\.)?cisco\.com/go" />
		<!--exclusion pattern="^http://(mkto|video)\.cisco\.com/" /-->


	<!--	Secured by server:
					-->
	<!--securecookie host="^\.developer\.cisco\.com$" name="^DP_SESSION_ID$" /-->
	<!--
		Not secured by server:
					-->
	<!--securecookie host="^\.cisco\.com$" name="^(ObSSOCookie|TOOLS-Loc)$" /-->
	<!--securecookie host="^blogs\.cisco\.com$" name="^wpmp_switcher$" /-->
	<!--securecookie host="^communities\.cisco\.com$" name="^(BIGipServerm\w+-\d+-pool|JSESSIONID|jive\.security\.context)$" /-->
	<!--securecookie host="^learningnetwork\.cisco\.com$" name="^(BIGipServerm\w+-40-pool|JSESSIONID|jive\.recentHistory\.-1|jive\.server\.info)$" /-->
	<!--securecookie host="^learningnetworkstore\.cisco\.com$" name="^JSESSIONID$" /-->
	<!--securecookie host="^sso\.cisco\.com$" name="^ObFormLoginCookie$" /-->

	<securecookie host="^[bchlst].*\.cisco\.com$" name=".*" />


	<!--	Default: Replace with HTTPS.  Redirect at Logout
		is still bugged, but the logout itself works.
								-->
	<rule from="^http://cisco\.com/"
		to="https://www.cisco.com/" />

	<rule from="^http://eir-stage\.cisco\.com/"
		to="https://eir.cisco.com/" />

	<rule from="^http://home(?:support)?\.cisco\.com/+"
		to="https://support.linksys.com/" />

	<rule from="^http://(beli|blogs|chinasmbmarketplace|ciscobusinesslink|cisco-images|communities|csc-stage|csc-test\d|csr|developer|eir|indiasmbmarketplace|learningnetwork|learningnetworkstore|smbmarketplace|solucionespyme|solucoespme|sso|sso-prod[0-3]|supportforums|tools[123]?|www[123]?)\.cisco\.com/"
		to="https://$1.cisco.com/" />

	<rule from="^http://(www\.)?ciscoconnectcloud\.com/"
		to="https://$1ciscoconnectcloud.com/" />

	<rule from="^http://www\.static-cisco\.com/"
		to="https://www.static-cisco.com/" />

</ruleset>
