Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA with CSC-SSM Services required

In the data sheet of the CSC-SSM says,: ” Two services are required for the effective operation of the CSC-SSM: Software update service and Cisco SMARTnet”. I have about 100 users so I think I need:

ASA-SSM-CSC-10-K9 (the CSC-SSM module for ASA)

ASA-CSC10-PLUS= (Adds URL and Content Filtering, Anti-Phishing, Anti-Spam)             

ASA-CSC10-USR-100=   100-User License -Total Users

This is the initial investment, but I suppose I have to pay every year the two services (Smartnet and Software update services). For example:

CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

But what is the part number for ordering the software update service?

Is this all right?

Thanks

Everyone's tags (3)
7 REPLIES
Cisco Employee

Re: ASA with CSC-SSM Services required

Every year you would have to order a renewal license for the CSC module. Otherwise if your plus license expirers it will not do URL filtering or detect spam in the e-mail.

Here are the part numbers for that for 1 and 2 year renewal

ASA-CSC10-100U-1Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (1-year)

ASA-CSC10-100P-1Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (1-yr)

ASA-CSC10-100UP-1Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (1-year)

ASA-CSC10-100U-2Y    ASA 5500 CSC-SSM-10 100-User License Only Renewal (2-year)

ASA-CSC10-100P-2Y    ASA 5500 CSC-SSM-10 100-User Plus Lic. Only Renewal (2-yr)

ASA-CSC10-100UP-2Y    ASA 5500 CSC-SSM-10 100-User w/ Plus Lic. Renewal (2-year)

-KS

New Member

Re: ASA with CSC-SSM Services required

ASA-CSC10-100U-1Y + ASA-CSC10-100P-1Y = ASA-CSC10-100UP-1Y  ?


So in my case, for 100 users with antivirus and antispam? I need every year


- ASA-CSC10-100UP-1Y and,
- CON-SNT-ASCS10K9 (ASA-SSM-CSC-10-K9  SMARTnet 8x5xNBD)

Is this correct?

Thanks

Cisco Employee

Re: ASA with CSC-SSM Services required

That is correct.

-KS

New Member

Re: ASA with CSC-SSM Services required

Thanks

New Member

Re: ASA with CSC-SSM Services required

hi,

this thread answered my quest in understanding the part numbers, particularly with Plus license renewal (w/ plus license description is so vague). Thanks a lot. I have a ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my reseller had written this long description for smartnet and I don't understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

New Member

Re: ASA with CSC-SSM Services required

hi,

this thread answered my  quest in understanding the part numbers, particularly with Plus license  renewal (w/ plus license description is so vague). Thanks a lot. I have a  ASA 5510 with CSC 100 users module.

my question is: part no: CON-SNT-ASCS10K9 covers the Cisco ASA 5510 "and" the CSC SSM module or just the CSC SSM module?

my  reseller had written this long description for smartnet and I don't  understand it at all. if you can lend me a hand here, it would be great.

SMARTNET 8X5XNBD ASA 5510 Appl w/ CSC10,SW,50 Usr AV/Sp,Part no
CON-SNT-AS1C10K9,SMARTNET 8X5XNBD ASA CSC SSM-10 included w/ ASA Syst
part no CON-SNT-ASCINC10

thanks in advance

balu

ASA with CSC-SSM Services required

Dear Poonguzhali,

I have exiting ASA5520-K9 with CSM-SSM-10 module. The support is expired for the ASA last year. I need CSC-SSM-10 plus license for 50 users. I am planning to order the below:

1- CON-SNT-AS2BUNK9 (SMARTNET 8X5XNBD ASA Appliance)


2- CON-SNT-ASCS10K9 (SMARTNET 8X5XNBD ASA Content Sec SSM-10 w/ 50 Usr AV)


3- L-ASACSC10-50UP1Y   (ASA 5500 CSC-SSM-10 50-User w/ Plus Lic. Renewal (1-year))


4- L-ASA-CSC10-PLUS= ASA 5500 CSC SSM10 Plus Lic. (Spam/URL/Phish, 1Yr Subscript)) 

Kindly confirm point # 4 that do I need (4 - L-ASA-CSC10-PLUS=) or not. Below are some useful outputs:

DLMKSA-ASA# show version


Cisco Adaptive Security Appliance Software Version 8.4(2)

Device Manager Version 6.4(5)


Compiled on Wed 15-Jun-11 18:17 by builders

System image file is "disk0:/asa842-k8.bin"

Config file at boot was "startup-config"


DLMKSA-ASA up 7 days 0 hours


Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz

Internal ATA Compact Flash, 256MB

BIOS Flash M50FW016 @ 0xfff00000, 2048KB


Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)

                             Boot microcode        : CN1000-MC-BOOT-2.00

                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03

                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06

                             Number of accelerators: 1


0: Ext: GigabitEthernet0/0  : address is 4055.3981.cedc, irq 9

1: Ext: GigabitEthernet0/1  : address is 4055.3981.cedd, irq 9

2: Ext: GigabitEthernet0/2  : address is 4055.3981.cede, irq 9

3: Ext: GigabitEthernet0/3  : address is 4055.3981.cedf, irq 9

4: Ext: Management0/0       : address is 4055.3981.cee0, irq 11

5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11

6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5


Licensed features for this platform:

Maximum Physical Interfaces       : Unlimited      perpetual

Maximum VLANs                     : 150            perpetual

Inside Hosts                      : Unlimited      perpetual

Failover                          : Active/Active  perpetual

VPN-DES                           : Enabled        perpetual

VPN-3DES-AES                      : Enabled        perpetual

Security Contexts                 : 2              perpetual

GTP/GPRS                          : Disabled       perpetual

AnyConnect Premium Peers          : 2              perpetual

AnyConnect Essentials             : Disabled       perpetual

Other VPN Peers                   : 750            perpetual

Total VPN Peers                   : 750            perpetual

Shared License                    : Disabled       perpetual

AnyConnect for Mobile             : Disabled       perpetual

AnyConnect for Cisco VPN Phone    : Disabled       perpetual

Advanced Endpoint Assessment      : Disabled       perpetual

UC Phone Proxy Sessions           : 2              perpetual

Total UC Proxy Sessions           : 2              perpetual

Botnet Traffic Filter             : Disabled       perpetual

Intercompany Media Engine         : Disabled       perpetual


This platform has an ASA 5520 VPN Plus license.


Serial Number: JMX1xxxx3

Running Permanent Activation Key: 0x62xxx79 0x444ec782 0x4xxxxc 0xbbc8c8x0x4b27xxxbd

Configuration register is 0x1

Configuration last modified by enable_15 at 20:15:03.339 AST Mon Feb 24 2014

DLMKSA-ASA#



DLMKSA-ASA#  show module


Mod Card Type                                    Model              Serial No.

--- -------------------------------------------- ------------------ -----------

  0 ASA 5520 Adaptive Security Appliance         ASA5520            JMX1xxxxx63

  1 ASA 5500 Series Content Security Services Mo ASA-SSM-CSC-10-K9  JAF1xxxxCJN


Mod MAC Address Range                 Hw Version   Fw Version   Sw Version

--- --------------------------------- ------------ ------------ ---------------

  0 4055.39xxx1.cedc to 4055.xxx81.cee0  2.0          1.0(11)5     8.4(2)

  1 e8b7.4xxx9.40f3 to e8b7.4xxx.40f3  1.0          1.0(11)5     CSC SSM 6.6.1125.0


Mod SSM Application Name           Status           SSM Application Version

--- ------------------------------ ---------------- --------------------------

  1 CSC SSM                        Up               6.6.1125.0


Mod Status             Data Plane Status     Compatibility

--- ------------------ --------------------- -------------

  0 Up Sys             Not Applicable

  1 Up                 Up

DLMKSA-ASA#


DLMKSA-ASA#  show module 1 details

Getting details from the Service Module, please wait...

ASA 5500 Series Content Security Services Module-10

Model:              ASA-SSM-CSC-10-K9

Hardware version:   1.0

Serial Number:      JAFxxxxxCJN

Firmware version:   1.0(11)5

Software version:   CSC SSM 6.6.1125.0

MAC Address Range:  e8b7.4869.40f3 to e8b7.4869.40f3

App. name:          CSC SSM

App. Status:        Up

App. Status Desc:   CSC SSM scan services are available

App. version:       6.6.1125.0

Data plane Status:  Up

Status:             Up

HTTP Service:       Up

HTTPS Service:      Up

Mail Service:       Up

FTP  Service:       Up

Activated:          Yes

Mgmt IP addr:       192.111.200.62

Mgmt web port:      8443

Peer IP addr:      

DLMKSA-ASA#


DLMKSA-ASA#  show module 0 details

ASA 5520 Adaptive Security Appliance

Model:              ASA5520

Hardware version:   2.0

Serial Number:      JMX1xxxxx63

Firmware version:   1.0(11)5

Software version:   8.4(2)

MAC Address Range:  4055.3xxx1.cedc to 4055.3xxx1.cee0

Data plane Status:  Not Applicable

Status:             Up Sys

DLMKSA-ASA#

Regards,

Anser

4295
Views
9
Helpful
7
Replies