ASA 5510 AIP SSM vs CSC SSM

Unanswered Question
Feb 18th, 2008
User Badges:

I have read the documentation regarding the functionality of both the AIP and CSC modules, but since the 5510 has only one expanable slot, can one manually enter equivalent filtering url and url-server commands instead of installing the CSC SSM module to gain a subset of that functionality?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
abinjola Mon, 02/18/2008 - 12:03
User Badges:
  • Cisco Employee,

Definitely you can continue to use URL Filtering without SSM/CSC card,

You can simplify configuration and improve security appliance performance by using a separate server running one of the following Internet filtering products:


•Websense Enterprise for filtering HTTP, HTTPS, and FTP.


•Secure Computing SmartFilter (formerly N2H2) for filtering HTTP, HTTPS, FTP, and long URL filtering.


http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/filter.html#wp1045692


for IPS/IDS funcionalities you may add AIP-SSM/CSC module


csco11305595 Mon, 02/18/2008 - 12:24
User Badges:

I am at the design stage with a couple of clients - like both feature sets but your suggestion seems to be the only way to implement them. A follow-up question; When I buy the security plus license with the ASA 5510 does one need the CSC module to take advantage of those enhancements - spam,phishing, etc?

ernestorodriguez Sat, 02/23/2008 - 05:40
User Badges:

You need the CSC module to take advantage of those enhancements, even if you have the plus license.

Actions

This Discussion