cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
468
Views
0
Helpful
2
Replies

CSC Warning message at startup, Is this normal?

tahequivoice
Level 2
Level 2

During the bootup, I get a series of

...WARNING: CSC can ONLY scan TCP traffic that is destined to port 80 (HTTP), 25 (SMTP), 110 (POP3), or 21 (FTP) when configured. Any other type of traffic, ev

en if configured, will not be scanned.

*** Output from config line 387, " csc fail-open")

One for each port. I know the CSc fail-open is to pass the traffic if csc fails, but what about the rest of the message. ? Normal?

2 Replies 2

hoogen_82
Level 4
Level 4

Yes its normal. Its just informing you that CSC-SSM module can scan only scan the specified traffic.

If any other traffic like https or if you are looking at scanning tftp traffic or some netbios traffic it won't be scanned by the csc module.

Your config for diverting the traffic through the CSC would look like:

access-list csc extended permit tcp any any eq ftp

access-list csc extended permit tcp any any eq www

access-list csc extended permit tcp any any eq https

access-list csc extended permit tcp any any eq pop3

!

class-map cscmap

match access-list csc

!

policy-map cscpolicy

class cscmap

csc fail-open

!

service-policy cscpolicy interface outside

service-policy cscpolicy interface inside

!

-Hoogen

Do rate if this post helps :)

This one looks a bit different, it doesnt appear to use an ACL.

class-map FTP

match port tcp eq ftp

class-map http

match port tcp eq www

class-map SMTP

match port tcp eq smtp

class-map inspection_default

match default-inspection-traffic

class-map POP3

match port tcp eq pop3

!

policy-map inside-policy

class http

csc fail-open

class POP3

csc fail-open

class FTP

csc fail-open

class SMTP

csc fail-open

This was all done via the gui.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: