<!--
	Nonfunctional subdomains:

		- bam-prd1
		- blogs		(cert: 184964-nc-web1.cisco.com, self-signed, expired; shows RHEL Apache test page)
		- homecommunity
		- newsroom	(times out)


	Fully covered subdomains:

		- csc-stage
		- csc-test[1-4]
		- learningnetwork
		- supportforums


	Observed cookie domains:

		- csc-stage
		- csc-test[1-4]
		- learningnetwork
		- supportforums

-->
<ruleset name="Cisco" default_off="Needs review">

	<target host="cisco.com" />
	<target host="*.cisco.com" />
		<exclusion pattern="^http://www\.cisco\.com/cgi-bin/login" />
		<!--
			Cisco redirection pages do not support HTTPS, so we exclude them.
			They redirect to HTTPS secured pages, though.
									-->
		<exclusion pattern="^https?://(?:www\.)?cisco\.com/go" />
	<target host="ciscoconnectcloud.com" />
	<target host="www.ciscoconnectcloud.com" />
	<target host="www.static-cisco.com" />


	<securecookie host="^[chlst].*\.cisco\.com$" name=".*" />


	<!--	Default: Replace with HTTPS.  Redirect at Logout
		is still bugged, but the logout itself works.
								-->
	<rule from="^https?://(?:www\.)?cisco\.com/"
		to="https://www.cisco.com/" />

	<rule from="^http://(csc-stage|csc-test\d|home|homesupport|learningnetwork|sso|supportforums|tools)\.cisco\.com/"
		to="https://$1.cisco.com/" />

	<rule from="^http://(www\.)?ciscoconnectcloud\.com/"
		to="https://$1ciscoconnectcloud.com/" />

	<!--	!www doesn't exist.
					-->
	<rule from="^http://www\.static-cisco\.com/"
		to="https://www.static-cisco.com/" />

</ruleset>
