ASA with CSC-SSM Services required

Unanswered Question
Jan 26th, 2010

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Tabla normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0cm 5.4pt 0cm 5.4pt; mso-para-margin-top:0cm; mso-para-margin-right:0cm; mso-para-margin-bottom:10.0pt; mso-para-margin-left:0cm; line-height:115%; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin;}

In the data sheet of the CSC-SSM says,: ” Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet”. I have about 100 users so I think I need:

ASA-SSM-CSC-10-K9 (the CSC-SSM module for ASA)

ASA-CSC10-PLUS= (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam)             

ASA-CSC10-USR-100=   100-User License -Total Users

This is the initial investment, but I suppose I have to pay every year the two services (Smartnet and Software update services). For example:

CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

But what is the part number for ordering the software update service?

Is this all right?

Thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
Kureli Sankar Tue, 01/26/2010 - 05:32

Every year you would have to order a renewal license for the CSC module. Otherwise if your plus license expirers it will not do URL filtering or detect spam in the e-mail.

Here are the part numbers for that for 1 and 2 year renewal

ASA-CSC10-100U-1Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (1-year)

ASA-CSC10-100P-1Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (1-yr)

ASA-CSC10-100UP-1Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (1-year)

ASA-CSC10-100U-2Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (2-year)

ASA-CSC10-100P-2Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (2-yr)

ASA-CSC10-100UP-2Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (2-year)

-KS

jmprats Tue, 01/26/2010 - 05:43

ASA-CSC10-100U-1Y + ASA-CSC10-100P-1Y = ASA-CSC10-100UP-1Y  ?


So in my case, for 100 users with antivirus and antispam? I need every year


- ASA-CSC10-100UP-1Y and,
- CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

Is this correct?

Thanks

ifpindia_cisco Mon, 11/01/2010 - 03:27

hi,

this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

ifpindia_cisco Tue, 11/02/2010 - 05:02

hi,

this thread answered my  quest in understanding the part numbers, particularly with Plus license  renewal (w/ plus license description is so vague). Thanks a lot. I have a  ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my  reseller had written this long description for smartnet and I don't  understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

Muhammad Anser Khan Tue, 03/04/2014 - 03:55

Dear Poonguzhali,

I have exiting ASA5520-K9 with CSM-SSM-10 module. The support is expired for the ASA last year. I need CSC-SSM-10 plus license for 50 users. I am planning to order the below:

1- CON-SNT-AS2BUNK9 (SMARTNET 8X5XNBD ASA Appliance)


2- CON-SNT-ASCS10K9 (SMARTNET 8X5XNBD ASA Content Sec SSM-10 w/ 50 Usr AV)


3- L-ASACSC10-50UP1Y   (ASA 5500 CSC-SSM-10 50-User w/ Plus Lic. Renewal (1-year))


4- L-ASA-CSC10-PLUS= ASA 5500 CSC SSM10 Plus Lic. (Spam/URL/Phish, 1Yr Subscript)) 

Kindly confirm point # 4 that do I need (4 - L-ASA-CSC10-PLUS=) or not. Below are some useful outputs:

DLMKSA-ASA# show version


Cisco Adaptive Security Appliance Software Version 8.4(2)

Device Manager Version 6.4(5)


Compiled on Wed 15-Jun-11 18:17 by builders

System image file is "disk0:/asa842-k8.bin"

Config file at boot was "startup-config"


DLMKSA-ASA up 7 days 0 hours


Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB


Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode        : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

                             Number of accelerators: 1


0: Ext: GigabitEthernet0/0  : address is 4055.3981.cedc, irq 9

1: Ext: GigabitEthernet0/1  : address is 4055.3981.cedd, irq 9

2: Ext: GigabitEthernet0/2  : address is 4055.3981.cede, irq 9

3: Ext: GigabitEthernet0/3  : address is 4055.3981.cedf, irq 9

4: Ext: Management0/0       : address is 4055.3981.cee0, irq 11

5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5


Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 150            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 750            perpetual

Total VPN Peers                   : 750            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual


This platform has an ASA 5520 VPN Plus license.


Serial Number: JMX1xxxx3

Running Permanent Activation Key: 0x62xxx79 0x444ec782 0x4xxxxc 0xbbc8c8x0x4b27xxxbd

Configuration register is 0x1

Configuration last modified by enable_15 at 20:15:03.339 AST Mon Feb 24 2014

DLMKSA-ASA#



DLMKSA-ASA#  show module


Mod Card Type                                    Model              Serial No.

--- -------------------------------------------- ------------------ -----------

  0 ASA 5520 Adaptive Security Appliance         ASA5520            JMX1xxxxx63

  1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9  JAF1xxxxCJN


Mod MAC Address Range                 Hw Version   Fw Version   Sw Version

--- --------------------------------- ------------ ------------ ---------------

  0 4055.39xxx1.cedc to 4055.xxx81.cee0  2.0          1.0(11)5     8.4(2)

  1 e8b7.4xxx9.40f3 to e8b7.4xxx.40f3  1.0          1.0(11)5     CSC SSM 6.6.1125.0


Mod SSM Application Name           Status           SSM Application Version

--- ------------------------------ ---------------- --------------------------

  1 CSC SSM                        Up               6.6.1125.0


Mod Status             Data Plane Status     Compatibility

--- ------------------ --------------------- -------------

  0 Up Sys             Not Applicable

  1 Up                 Up

DLMKSA-ASA#


DLMKSA-ASA#  show module 1 details

Getting details from the Service Module, please wait...

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10-K9

Hardware version:   1.0

Serial Number:      JAFxxxxxCJN

Firmware version:   1.0(11)5

Software version:   CSC SSM 6.6.1125.0

MAC Address Range:  e8b7.4869.40f3 to e8b7.4869.40f3

App. name:          CSC SSM

App. Status:        Up

App. Status Desc:   CSC SSM scan services are available

App. version:       6.6.1125.0

Data plane Status:  Up

Status:             Up

HTTP Service:       Up

HTTPS Service:      Up

Mail Service:       Up

FTP  Service:       Up

Activated:          Yes

Mgmt IP addr:       192.111.200.62

Mgmt web port:      8443

Peer IP addr:      

DLMKSA-ASA#


DLMKSA-ASA#  show module 0 details

ASA 5520 Adaptive Security Appliance

Model:              ASA5520

Hardware version:   2.0

Serial Number:      JMX1xxxxx63

Firmware version:   1.0(11)5

Software version:   8.4(2)

MAC Address Range:  4055.3xxx1.cedc to 4055.3xxx1.cee0

Data plane Status:  Not Applicable

Status:             Up Sys

DLMKSA-ASA#

Regards,

Anser

Actions

This Discussion

Related Content