Thank you very much for posting this detailed configuration.
"Also, remember we cannot perform the healthcheck via SSL/HTTPS because of the model of our CSS. Therefore, we have to perform the healthcheck via HTTP instead. Because of that, we had to use Novell's docs to setup a dedicated "heartbeat" proxy on the non-secure port."
The CSS that we have does not support health checks via SSL/HTTPS. We also force SSL on all our proxy connections. How did you handle that? So if our resource is called teaming.novell.com, if I navigate to teaming.novell.com/.../heartbeat I am redirected to teaming.novell.com/.../heartbeat and then I see the success page. Since the CSS cannot make SSL/HTTPS connections, when I use this as a keepalive, the status is always dead.