Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

CSC SSM in VPN

Hi guys,

I'm at a customers site doing some unrelated work and noticed that they have an ASA 5520 used solely for VPN connections. In this they have a CSC SSM module to, I assume, stop remote users with infected computers. He had set it up using the CSC wizard.

Now too my question: does this actually provide any security at all? From what I can gather in the logs it doesn't do anything at all. Maybe it's just lack of proper configuration?

I'm not at all familiar with the CSC SSM, so I'm turning to you in hope for some clarification.

//Charlie

1 REPLY
Cisco Employee

Re: CSC SSM in VPN

Charlie,

CSC is device intended to take care of verious threats on the Internet and enforce policy (like no porn browsing during workhours) aaaand protoct your email server from spam.


Much more of course but this is it in a shell.

It has barely any capabilities to protect users connecting over VPN, unless they users do a u-turn on the ASA with the CSC module to go to the Internet.

CSC is not an IPS device - it's more of antivirus on the wire :-)

Marcin

308
Views
5
Helpful
1
Replies
CreatePlease to create content