ASA csc module

[mbluemel]

Hi all. We have an ASA with the csc module. It works fine but we find that we have a lot of latency when we try to download large files. Mainly downloading images from Cisco. I know there are a lot of tweaks ie deferred scanning etc but I dont want to enable that across the board. Is there any way to pass the traffic destined to and from Cisco/Microsoft etc so that it is not scanned by the content module?

[Panos Kampanakis]

You can exclude the ips that you want to exempt from scanning the CSC ACL.

For example see how ip address 172.18.124.237is excluded from scanning in http://supportforums.cisco.com/docs/DOC-5668#Configuring_the_ASA_for_the_CSCSSM_

I hope it helps.

PK