Having problems with two ASA's both with CSC-SSM modules and wondered if anyone had seen anything similar.
The first ASA only has the SSM module and is set up as the documentation examples, with service-policy applied to the inside interface. When scanning is enabled, web browsing becomes so slow it is unusable, when disabled on the module everything is fine. We have checked the default gateway and ip settings, etc and have had our Trend guru take a run through the configuration and can't find anything wrong. The SMTP side of this is fine only HTTP has problems.
The second site is a little more complex, with CSC module and external websense server. The websense side works as expected however with the CSC module is also enabled firstly, any rejection messages from websense return "page cannot be displayed" to the browser rather than the websense error page, and secondly standard web browsing is incredibly slow. Again, SMTP works as expected.
I can post configs as needed however has anyone else seen these type of symptoms ? Does anyone have a CSC module running as it should ?
I can appreciate that scanning will add a delay to the proceedings and that the expectation with HTTP is greater than SMTP however this is too slow for genuine use right now and I`m struggling for solutions.