Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
5046
Views
9
Helpful
7
Replies

ASA with CSC-SSM Services required

jmprats
Level 4
Level 4

‎01-26-2010 02:51 AM - edited ‎03-11-2019 10:01 AM

In the data sheet of the CSC-SSM says,: ” Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet”. I have about 100 users so I think I need:

ASA-SSM-CSC-10-K9 (the CSC-SSM module for ASA)

ASA-CSC10-PLUS= (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam)             

ASA-CSC10-USR-100=   100-User License -Total Users

This is the initial investment, but I suppose I have to pay every year the two services (Smartnet and Software update services). For example:

CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

But what is the part number for ordering the software update service?

Is this all right?

Thanks

Labels:
0 Helpful
7 Replies 7

Kureli Sankar
Cisco Employee
Cisco Employee

‎01-26-2010 05:32 AM

Every year you would have to order a renewal license for the CSC module. Otherwise if your plus license expirers it will not do URL filtering or detect spam in the e-mail.

Here are the part numbers for that for 1 and 2 year renewal

ASA-CSC10-100U-1Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (1-year)

ASA-CSC10-100P-1Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (1-yr)

ASA-CSC10-100UP-1Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (1-year)

ASA-CSC10-100U-2Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (2-year)

ASA-CSC10-100P-2Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (2-yr)

ASA-CSC10-100UP-2Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (2-year)

-KS

jmprats
Level 4
Level 4
In response to Kureli Sankar

‎01-26-2010 05:43 AM

ASA-CSC10-100U-1Y + ASA-CSC10-100P-1Y = ASA-CSC10-100UP-1Y  ?


So in my case, for 100 users with antivirus and antispam? I need every year


- ASA-CSC10-100UP-1Y and,
- CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

Is this correct?

Thanks

0 Helpful

Kureli Sankar
Cisco Employee
Cisco Employee
In response to jmprats

‎01-26-2010 05:55 AM

That is correct.

-KS

jmprats
Level 4
Level 4
In response to Kureli Sankar

‎01-27-2010 12:30 AM

Thanks

0 Helpful

ifpindia_cisco
Level 1
Level 1
In response to jmprats

‎11-01-2010 03:27 AM

hi,

this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

0 Helpful

ifpindia_cisco
Level 1
Level 1
In response to Kureli Sankar

‎11-02-2010 05:02 AM

hi,

this thread answered my  quest in understanding the part numbers, particularly with Plus license  renewal (w/ plus license description is so vague). Thanks a lot. I have a  ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my  reseller had written this long description for smartnet and I don't  understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

0 Helpful

Muhammad Anser Khan
Level 1
Level 1
In response to Kureli Sankar

‎03-04-2014 03:55 AM

Dear Poonguzhali,

I have exiting ASA5520-K9 with CSM-SSM-10 module. The support is expired for the ASA last year. I need CSC-SSM-10 plus license for 50 users. I am planning to order the below:

1- CON-SNT-AS2BUNK9 (SMARTNET 8X5XNBD ASA Appliance)


2- CON-SNT-ASCS10K9 (SMARTNET 8X5XNBD ASA Content Sec SSM-10 w/ 50 Usr AV)


3- L-ASACSC10-50UP1Y   (ASA 5500 CSC-SSM-10 50-User w/ Plus Lic. Renewal (1-year))


4- L-ASA-CSC10-PLUS= ASA 5500 CSC SSM10 Plus Lic. (Spam/URL/Phish, 1Yr Subscript)) 

Kindly confirm point # 4 that do I need (4 - L-ASA-CSC10-PLUS=) or not. Below are some useful outputs:

DLMKSA-ASA# show version


Cisco Adaptive Security Appliance Software Version 8.4(2)

Device Manager Version 6.4(5)


Compiled on Wed 15-Jun-11 18:17 by builders

System image file is "disk0:/asa842-k8.bin"

Config file at boot was "startup-config"


DLMKSA-ASA up 7 days 0 hours


Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB


Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode        : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

                             Number of accelerators: 1


0: Ext: GigabitEthernet0/0  : address is 4055.3981.cedc, irq 9

1: Ext: GigabitEthernet0/1  : address is 4055.3981.cedd, irq 9

2: Ext: GigabitEthernet0/2  : address is 4055.3981.cede, irq 9

3: Ext: GigabitEthernet0/3  : address is 4055.3981.cedf, irq 9

4: Ext: Management0/0       : address is 4055.3981.cee0, irq 11

5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5


Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 150            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 750            perpetual

Total VPN Peers                   : 750            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual


This platform has an ASA 5520 VPN Plus license.


Serial Number: JMX1xxxx3

Running Permanent Activation Key: 0x62xxx79 0x444ec782 0x4xxxxc 0xbbc8c8x0x4b27xxxbd

Configuration register is 0x1

Configuration last modified by enable_15 at 20:15:03.339 AST Mon Feb 24 2014

DLMKSA-ASA#



DLMKSA-ASA#  show module


Mod Card Type                                    Model              Serial No.

--- -------------------------------------------- ------------------ -----------

  0 ASA 5520 Adaptive Security Appliance         ASA5520            JMX1xxxxx63

  1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9  JAF1xxxxCJN


Mod MAC Address Range                 Hw Version   Fw Version   Sw Version

--- --------------------------------- ------------ ------------ ---------------

  0 4055.39xxx1.cedc to 4055.xxx81.cee0  2.0          1.0(11)5     8.4(2)

  1 e8b7.4xxx9.40f3 to e8b7.4xxx.40f3  1.0          1.0(11)5     CSC SSM 6.6.1125.0


Mod SSM Application Name           Status           SSM Application Version

--- ------------------------------ ---------------- --------------------------

  1 CSC SSM                        Up               6.6.1125.0


Mod Status             Data Plane Status     Compatibility

--- ------------------ --------------------- -------------

  0 Up Sys             Not Applicable

  1 Up                 Up

DLMKSA-ASA#


DLMKSA-ASA#  show module 1 details

Getting details from the Service Module, please wait...

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10-K9

Hardware version:   1.0

Serial Number:      JAFxxxxxCJN

Firmware version:   1.0(11)5

Software version:   CSC SSM 6.6.1125.0

MAC Address Range:  e8b7.4869.40f3 to e8b7.4869.40f3

App. name:          CSC SSM

App. Status:        Up

App. Status Desc:   CSC SSM scan services are available

App. version:       6.6.1125.0

Data plane Status:  Up

Status:             Up

HTTP Service:       Up

HTTPS Service:      Up

Mail Service:       Up

FTP  Service:       Up

Activated:          Yes

Mgmt IP addr:       192.111.200.62

Mgmt web port:      8443

Peer IP addr:      

DLMKSA-ASA#


DLMKSA-ASA#  show module 0 details

ASA 5520 Adaptive Security Appliance

Model:              ASA5520

Hardware version:   2.0

Serial Number:      JMX1xxxxx63

Firmware version:   1.0(11)5

Software version:   8.4(2)

MAC Address Range:  4055.3xxx1.cedc to 4055.3xxx1.cee0

Data plane Status:  Not Applicable

Status:             Up Sys

DLMKSA-ASA#

Regards,

Anser

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card